[c-nsp] IOS-XE: Applying or removing uRPF on a virtual-access interface using RADIUS av-pairs.

Lukas Tribus luky-37 at hotmail.com
Thu Nov 6 13:34:14 EST 2014


> Hi all,
>
> We use uRPF on our LNS'es as part of implementing BCP38 in our network
> and it is enabled by default on PPP/PPPoE virtual-templates. We've
> found a situation where uRFP is causing a very specific corner case
> problem and I want to remove it, but I don't want to remove it globally.
> Removing it via a RADIUS av-pair seems the best solution there.
> However I'm not seeing the intended result when I use the following av-pair:
>
> lcp:interface-config=no ip verify unicast reverse-path self-ping

"self-ping" or "allow-self-ping"? Anyway, you probably just can use:
lcp:interface-config=no ip verify unicast

as IOS-XE doesn't support anything else:
ASR1k-BNG-1(config-if)#no ip verify unicast ?
  <cr>



Let me know if that works, I probably need the same here.



Regards,

Lukas



 		 	   		  


More information about the cisco-nsp mailing list