nanog mailing list archives

RE: Cisco uRPF failures


From: "Tom Zingale (tomz)" <tomz () cisco com>
Date: Mon, 15 Sep 2008 09:31:39 -0700

The 3560E/3750E support uRPF as per docs:
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750e_3560e/softwar
e/release/12.2_46_se/configuration/guide/swiprout.html#wp1388196

The unsupported command guide looks in error.

-----Original Message-----
From: Brandon Ewing [mailto:nicotine () warningg com]
Sent: Saturday, September 13, 2008 11:26 AM
To: nanog () nanog org; saku+nanog () ytti fi
Subject: Re: Cisco uRPF failures

On Thu, Sep 11, 2008 at 08:11:28PM +0300, Saku Ytti wrote:

Sound like these shops are using 3550 as router, which is common for
smaller shops, especially in EU. And indeed, 3550 would not do uRPF.
(3560E does).


Are you sure?  According to the IOS guide for 3560E/3750E, "ip verify"
is
still an unsupported interface command.  I don't have a 3560E handy to
test
on, but I know that a non-E 3560 refuses it with a notice regarding
how
verification is not supported by hardware.

http://tinyurl.com/5qbqzb

--
Brandon



Current thread: