[c-nsp] IOS-XE: Applying or removing uRPF on a virtual-access interface using RADIUS av-pairs.
Lukas Tribus
luky-37 at hotmail.com
Thu Nov 6 13:34:14 EST 2014
> Hi all,
>
> We use uRPF on our LNS'es as part of implementing BCP38 in our network
> and it is enabled by default on PPP/PPPoE virtual-templates. We've
> found a situation where uRFP is causing a very specific corner case
> problem and I want to remove it, but I don't want to remove it globally.
> Removing it via a RADIUS av-pair seems the best solution there.
> However I'm not seeing the intended result when I use the following av-pair:
>
> lcp:interface-config=no ip verify unicast reverse-path self-ping
"self-ping" or "allow-self-ping"? Anyway, you probably just can use:
lcp:interface-config=no ip verify unicast
as IOS-XE doesn't support anything else:
ASR1k-BNG-1(config-if)#no ip verify unicast ?
<cr>
Let me know if that works, I probably need the same here.
Regards,
Lukas
More information about the cisco-nsp
mailing list