Re: ingress filtering

[shields () crosslink net (Michael Shields)]

In article <19980528145744.B1561 () puck nether net>,
Jared Mauch <jared () puck nether net> wrote:
>       The great thing about the CC images released by cisco
> (as long as you're running with ip cef or ip cef dist), you can turn
> this neato command on your interfaces to your customers:
>
>       ip verify unicast reverse-path

It is neato, but be careful not to turn it on without CEF or it will
silently drop all packets on the interface.  Just a tip.  Not that I
did that or anything.
-- 
Shields, CrossLink.