URPF support
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-12-2016 02:10 PM
Hi Experts,
Does our extreme switches support URPF feature? i was not able to find it in latest 22.1 UG?
Does our extreme switches support URPF feature? i was not able to find it in latest 22.1 UG?
3 REPLIES 3
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-16-2016 08:48 AM
Hi,
the uRPF feature in other vendor's products has the advantage that it just needs to be turned on and then works automatically, adjusting to routing changes on the fly. It is not realistic to manually implement and maintain ACLs for this on every routed interface.
What is realistic is to implement anti-spoofing ACL(s) on the uplink(s) to the service provider(s) using egress ACL(s). This is equivalent to the service provider using ingress filtering (BCP 38, BCP 84).
Erik
the uRPF feature in other vendor's products has the advantage that it just needs to be turned on and then works automatically, adjusting to routing changes on the fly. It is not realistic to manually implement and maintain ACLs for this on every routed interface.
What is realistic is to implement anti-spoofing ACL(s) on the uplink(s) to the service provider(s) using egress ACL(s). This is equivalent to the service provider using ingress filtering (BCP 38, BCP 84).
Erik
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-14-2016 04:29 PM
Hi,
uRPF is defined in rfc 3704, which lists several methods. Among them, ingress ACL is proposed. That could be done, but I agree this is a stretch and maybe not very feasible in everyday network.
uRPF is defined in rfc 3704, which lists several methods. Among them, ingress ACL is proposed. That could be done, but I agree this is a stretch and maybe not very feasible in everyday network.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-12-2016 03:46 PM
hello,
EXOS today not support unicast reverse-path forwarding (uRPF)
we had some internal discussion about that, might be we add this in the future.
looking into our GTAC Knowledge Base
https://gtacknowledge.extremenetworks.com/articles/Q_A/Do-EXOS-switches-support-unicast-reverse-path...
-
EXOS today not support unicast reverse-path forwarding (uRPF)
we had some internal discussion about that, might be we add this in the future.
looking into our GTAC Knowledge Base
https://gtacknowledge.extremenetworks.com/articles/Q_A/Do-EXOS-switches-support-unicast-reverse-path...
-
