nanog mailing list archives

Re: no ip forged-source-address


From: Jesper Skriver <jesper () skriver dk>
Date: Wed, 30 Oct 2002 19:48:04 +0100


On Wed, Oct 30, 2002 at 06:02:44PM +0000, variable () ednet co uk wrote:
On Wed, 30 Oct 2002, Jesper Skriver wrote:

Cannot be done, I certainly doesn't want RPF check to be default enabled
on all interfaces on my routers, think for a second about asymmetric
routing WITHIN the ISP network.

Turn it off for backbone interfaces.

What's the difference then, the person who doesn't understand what it's
about will then just disable it throughout ...

The current solution about enabling it manually works fine.

/Jesper

-- 
Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
Senior network engineer @ AS3292, TDC Tele Danmark

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.


Current thread: