[c-nsp] uRPF Core Internet Routers

[Antonio Soares]

Hello group,

I looking for Information about anti-spoofing measures namely uRPF.

My initial reference is a quite old document:

http://www.cisco.com/web/about/security/intelligence/urpf.pdf

It's funny to see this on the document:

"General questions on uRPF can be sent to unicast-rpf at cisco.com or
cisco-nsp at puck.nether.net."

So I must be on the right list :)

Now my question, is it appropriate to use uRPF loose mode on Core Routers
(Full Routing Tables) ?

How about the impact/restrictions ? I was able to find a few restrictions
when comparing the SUP720 with the SUP-2T but I'm more interested on IOS-XR
Platforms.


Thanks.

Regards,

Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt
http://www.ccie18473.net