Question Re: "ip verify unicast" feature in IOS

From: Jim White (jim.t.white@gmail.com)
Date: Thu Feb 01 2007 - 19:39:58 ART


Hi Groupstudy,

I am a little confused about the operation of the ip verify source feature
in IOS. In the following example I want to log an entry if the source lookup
fails.

For example, my intrepretation of the configuration below is that it will
perform the source lookup for all sources (permit any) and generate a syslog
message if the source lookup fails.

I have tested this with little success other than some output at the end of
"show ip interface serial 0/0" which suggests its doing what it should.

#------- Config Output ------#
ip cef

access-list 1 permit any log
!
interface Serial0/0
ip verify unicast source reachable-via rx 1

#--- End of Config Output ---#

After some testing..

R1#show ip interface serial 0/0
Serial0/0 is up, line protocol is up
(Output Removed)
  IP verify source reachable-via RX, ACL 1
  20 verification drops
  0 suppressed verification drops
R1#

Thanks for any input/clarification,
Jim White

(Cork, Ireland)



This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:45 ART