[c-nsp] uRPF Core Internet Routers

Adam Vitkovsky adam.vitkovsky at swan.sk
Fri Apr 19 08:09:20 EDT 2013

It's still work in progress, though should be advertised throughout the
community as a starting point for everyone who's interested in applying
anti-spoofing measures in their networks. 


-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
Antonio Soares
Sent: Tuesday, April 16, 2013 7:37 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] uRPF Core Internet Routers

Hello group,

I looking for Information about anti-spoofing measures namely uRPF.

My initial reference is a quite old document:


It's funny to see this on the document:

"General questions on uRPF can be sent to unicast-rpf at cisco.com or
cisco-nsp at puck.nether.net."

So I must be on the right list :)

Now my question, is it appropriate to use uRPF loose mode on Core Routers
(Full Routing Tables) ?

How about the impact/restrictions ? I was able to find a few restrictions
when comparing the SUP720 with the SUP-2T but I'm more interested on IOS-XR



Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt

cisco-nsp mailing list  cisco-nsp at puck.nether.net
archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list