ingress filtering

Michael Shields shields at crosslink.net
Fri May 29 07:06:20 UTC 1998


In article <19980528145744.B1561 at puck.nether.net>,
Jared Mauch <jared at puck.nether.net> wrote:
> 	The great thing about the CC images released by cisco
> (as long as you're running with ip cef or ip cef dist), you can turn
> this neato command on your interfaces to your customers:
> 
> 	ip verify unicast reverse-path

It is neato, but be careful not to turn it on without CEF or it will
silently drop all packets on the interface.  Just a tip.  Not that I
did that or anything.
-- 
Shields, CrossLink.



More information about the NANOG mailing list