Re: diff between ip verify unicast-rpf and " " " reachable-via

From: Petr Lapukhov (petrsoft@gmail.com)
Date: Sat Jun 10 2006 - 02:32:34 ART

• Next message: Cisco Boy : "Test"
• Previous message: Petr Lapukhov: "Re: ip multicast rate-limit [KZ]"
• Next in thread: Brent Foster: "Re: diff between ip verify unicast-rpf and " " " reachable-via"
• Maybe reply: Brent Foster: "Re: diff between ip verify unicast-rpf and " " " reachable-via"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Okay, now

"ip verify unicast reverse-path" is an "old" format of uRPF command.
It is functionally equivalent to more recent "ip verify unicast source
reachable-via rx"

"ip verify unicast source reachable-via any" defines uRPF "loose"
mode, which requires that source ip should be reachable via any
router's inteface, not the "rx"-one.

HTH
Petr

2006/6/10, rocco r21 <roccor21@hotmail.com>:
>
> ip verify unicast reachable-via according to cisco prevents spoofing. How
> does this differ from ip verify unicast reverse-path? CCO is a bit vauge
> on this.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

• Next message: Cisco Boy : "Test"
• Previous message: Petr Lapukhov: "Re: ip multicast rate-limit [KZ]"
• Next in thread: Brent Foster: "Re: diff between ip verify unicast-rpf and " " " reachable-via"
• Maybe reply: Brent Foster: "Re: diff between ip verify unicast-rpf and " " " reachable-via"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:32 ART