[c-nsp] uRPF Core Internet Routers

Dobbins, Roland rdobbins at arbor.net
Tue Apr 16 22:00:51 EDT 2013


On Apr 17, 2013, at 12:37 AM, Antonio Soares wrote:

> Now my question, is it appropriate to use uRPF loose mode on Core Routers
> (Full Routing Tables) ?

It's an edge technology - use loose-mode on your peering/transit interfaces, use strict-mode whenever possible on your customer aggregation/IDC access edges.

You can also use ACLs, IP Source Verify, Cable Source-Verify, PACLs, VACLs, et. al. as appropriate/necessary.

In terms of XR platforms, be sure you have the appropriate Engine cards in 12000s.  CRS, ASR9K should support it just fine on about anything.

Of course, verify with your Cisco account team, test in lab with appropriate OS/train/release/throttle/feature mix before deploying, and so forth.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton




More information about the cisco-nsp mailing list