[c-nsp] asr9k dhcp relay + ipv4 verify unicast

Tarko Tikan tarko at lanparty.ee
Mon May 23 11:02:10 EDT 2016


hey,

> 	interface BVI60004
> 	 ipv4 address 10.4.5.1 255.255.255.0
> 	 ipv4 verify unicast source reachable-via rx allow-self-ping

Is this actual config or simplified? If simplified, is there VRRP/HSRP 
involved?

If there is, it can be explained by DHCP return packet hitting other 
router (because it's sent to GIADDR but you only announce your connected 
prefix). Other router then fails to send packet to original router via 
connected interface because from other routers POV it fails RPF (saddr: 
dhcp-server, daddr: giaddr).

-- 
tarko


More information about the cisco-nsp mailing list