Re: urpf

From: Marko Milivojevic <markom_at_ipexpert.com>
Date: Fri, 6 Jan 2012 09:52:18 -0800

In a loose mode you just need "a route" for a packet, it doesn't have
to be part of a load-shared path. In a feasible mode, packet will not
be accepted on an interface that is not part of the active path.

--
Marko Milivojevic - CCIE #18427 (SP R&S)
Senior CCIE Instructor - IPexpert
On Fri, Jan 6, 2012 at 08:11, Aaron <aaron1_at_gvtc.com> wrote:
> Thanks Marko, that sounds like loose mode. B Is there a difference in loose and feasible modes?
>
> Aaron
>
> -----Original Message-----
> From: Marko Milivojevic [mailto:markom_at_ipexpert.com]
> Sent: Thursday, January 05, 2012 6:07 PM
> To: Aaron
> Cc: ccielab_at_groupstudy.com
> Subject: Re: urpf
>
> Feasible mode accepts the packet if the interface is one of the
> possible destinations (say in a case of load sharing), otherwise the
> packet is dropped. AFAIK, you cannot configure it in IOS 12.4. I'm not
> sure about 15.x and/or IOS XR.
>
> --
> Marko Milivojevic - CCIE #18427 (SP R&S)
> Senior CCIE Instructor - IPexpert
>
> On Thu, Jan 5, 2012 at 13:46, Aaron <aaron1_at_gvtc.com> wrote:
>> Rack1R4(config-if)#ip verify unicast source reachable-via ?
>>
>> B any B Source is reachable via any interface
>>
>> B rx B  Source is reachable via interface on which packet was received
>>
>>
>>
>> are these the two options known as loose (any) and strict (rx) ? B if so,
>> what is urpf feasible mode? B .and is it supported by cisco? B If so, how to
>> config?
>>
>>
>>
>> Aaron
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Fri Jan 06 2012 - 09:52:18 ART

This archive was generated by hypermail 2.2.0 : Thu Feb 02 2012 - 11:52:51 ART