Header Only - DO NOT REMOVE - Extreme Networks

URPF support


Hi Experts,

Does our extreme switches support URPF feature? i was not able to find it in latest 22.1 UG?

3 replies

Userlevel 4
hello,
EXOS today not support unicast reverse-path forwarding (uRPF)
we had some internal discussion about that, might be we add this in the future.

looking into our GTAC Knowledge Base

https://gtacknowledge.extremenetworks.com/articles/Q_A/Do-EXOS-switches-support-unicast-reverse-path...

-
Userlevel 7
Hi,
uRPF is defined in rfc 3704, which lists several methods. Among them, ingress ACL is proposed. That could be done, but I agree this is a stretch and maybe not very feasible in everyday network.
Userlevel 7
Hi,

the uRPF feature in other vendor's products has the advantage that it just needs to be turned on and then works automatically, adjusting to routing changes on the fly. It is not realistic to manually implement and maintain ACLs for this on every routed interface.

What is realistic is to implement anti-spoofing ACL(s) on the uplink(s) to the service provider(s) using egress ACL(s). This is equivalent to the service provider using ingress filtering (BCP 38, BCP 84).

Erik

Reply