Hi All, Please help to understand this IS-IS can never be *routed beyond the immediate next hop *and hence shielded from IP spoofing and similar Denial of Service attacks. Regards Iftek