[107836] in North American Network Operators' Group
RE: Cisco uRPF failures
daemon@ATHENA.MIT.EDU (Tom Zingale (tomz))
Mon Sep 15 12:28:41 2008
Date: Mon, 15 Sep 2008 09:31:39 -0700
In-Reply-To: <20080913182618.GA29660@biological.warningg.com>
From: "Tom Zingale (tomz)" <tomz@cisco.com>
To: "Brandon Ewing" <nicotine@warningg.com>, <nanog@nanog.org>,
<saku+nanog@ytti.fi>
Errors-To: nanog-bounces@nanog.org
The 3560E/3750E support uRPF as per docs:
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750e_3560e/softwar
e/release/12.2_46_se/configuration/guide/swiprout.html#wp1388196
The unsupported command guide looks in error.
> -----Original Message-----
> From: Brandon Ewing [mailto:nicotine@warningg.com]
> Sent: Saturday, September 13, 2008 11:26 AM
> To: nanog@nanog.org; saku+nanog@ytti.fi
> Subject: Re: Cisco uRPF failures
>=20
> On Thu, Sep 11, 2008 at 08:11:28PM +0300, Saku Ytti wrote:
> >
> > Sound like these shops are using 3550 as router, which is common for
> > smaller shops, especially in EU. And indeed, 3550 would not do uRPF.
> > (3560E does).
> >
>=20
> Are you sure? According to the IOS guide for 3560E/3750E, "ip verify"
> is
> still an unsupported interface command. I don't have a 3560E handy to
> test
> on, but I know that a non-E 3560 refuses it with a notice regarding
how
> verification is not supported by hardware.
>=20
> http://tinyurl.com/5qbqzb
>=20
> --
> Brandon
