[17313] in North American Network Operators' Group
Re: ingress filtering
daemon@ATHENA.MIT.EDU (Michael Shields)
Fri May 29 03:18:42 1998
From: shields@crosslink.net (Michael Shields)
Mail-Copies-To: never
To: Jared Mauch <jared@puck.nether.net>
Cc: "Mr. Dana Hudes" <dhudes@graphnet.com>, nanog@merit.edu
Date: 29 May 1998 07:06:20 +0000
In-Reply-To: Jared Mauch's message of "Thu, 28 May 1998 14:57:44 -0400"
In article <19980528145744.B1561@puck.nether.net>,
Jared Mauch <jared@puck.nether.net> wrote:
> The great thing about the CC images released by cisco
> (as long as you're running with ip cef or ip cef dist), you can turn
> this neato command on your interfaces to your customers:
>
> ip verify unicast reverse-path
It is neato, but be careful not to turn it on without CEF or it will
silently drop all packets on the interface. Just a tip. Not that I
did that or anything.
--
Shields, CrossLink.
