[c-nsp] uRPF Core Internet Routers

[Adam Vitkovsky]

It's still work in progress, though should be advertised throughout the
community as a starting point for everyone who's interested in applying
anti-spoofing measures in their networks. 

http://www.bcp38.info/index.php/Main_Page


adam
-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
Antonio Soares
Sent: Tuesday, April 16, 2013 7:37 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] uRPF Core Internet Routers

Hello group,

I looking for Information about anti-spoofing measures namely uRPF.

My initial reference is a quite old document:

http://www.cisco.com/web/about/security/intelligence/urpf.pdf

It's funny to see this on the document:

"General questions on uRPF can be sent to unicast-rpf at cisco.com or
cisco-nsp at puck.nether.net."

So I must be on the right list :)

Now my question, is it appropriate to use uRPF loose mode on Core Routers
(Full Routing Tables) ?

How about the impact/restrictions ? I was able to find a few restrictions
when comparing the SUP720 with the SUP-2T but I'm more interested on IOS-XR
Platforms.


Thanks.

Regards,

Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt
http://www.ccie18473.net




_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/