[107794] in North American Network Operators' Group
Re: Cisco uRPF failures
daemon@ATHENA.MIT.EDU (Brandon Ewing)
Sat Sep 13 14:26:30 2008
Date: Sat, 13 Sep 2008 13:26:18 -0500
From: Brandon Ewing <nicotine@warningg.com>
To: nanog@nanog.org, saku+nanog@ytti.fi
Mail-Followup-To: nanog@nanog.org, saku+nanog@ytti.fi
In-Reply-To: <20080911171128.GA5283@mx.ytti.net>
Errors-To: nanog-bounces@nanog.org
On Thu, Sep 11, 2008 at 08:11:28PM +0300, Saku Ytti wrote:
>
> Sound like these shops are using 3550 as router, which is common for
> smaller shops, especially in EU. And indeed, 3550 would not do uRPF.
> (3560E does).
>
Are you sure? According to the IOS guide for 3560E/3750E, "ip verify" is
still an unsupported interface command. I don't have a 3560E handy to test
on, but I know that a non-E 3560 refuses it with a notice regarding how
verification is not supported by hardware.
http://tinyurl.com/5qbqzb
--
Brandon
