Unicast Reverse Path -ACL

From: 22Cent@gmail.com
Date: Wed Nov 30 2005 - 14:23:35 GMT-3

• Next message: HIERS, DAVID \(AIT\): "RE: Per Port Per Vlan.."
• Previous message: Josef A: "Re: Preventing an EIGRP/OSPF Neighbor Forming"
• Next in thread: Lileikis, Gary: "RE: Unicast Reverse Path -ACL"
• Maybe reply: Lileikis, Gary: "RE: Unicast Reverse Path -ACL"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi Group,
Quick question. If i want to log all packets that fail the RPF check would i
use a permit or deny statement ? Trying to understand the logic.

R1(config-if)#ip verify unicast reverse-path 122

R1(config)#access-list 122 deny ip any any log-input
                                or
R1(config)#access-list 122 permit ip any any log-input

TIA
Ray

• Next message: HIERS, DAVID \(AIT\): "RE: Per Port Per Vlan.."
• Previous message: Josef A: "Re: Preventing an EIGRP/OSPF Neighbor Forming"
• Next in thread: Lileikis, Gary: "RE: Unicast Reverse Path -ACL"
• Maybe reply: Lileikis, Gary: "RE: Unicast Reverse Path -ACL"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Dec 01 2005 - 09:12:08 GMT-3