Difference between revisions of "First-hop security IPv6 Cisco IOS"

From Teknologisk videncenter
Jump to: navigation, search
(No difference)

Revision as of 11:34, 18 December 2011

Kate.png This article is under development....

Unicast Reverse Path Forwarding

To avoid spoofed packets passing a Router. Could be DoS attack. With RPF - reverse Path Forwarding - the router checks that the sending hosts source IP address matches the routing table on the receiving interface.

Example
An access-list can be used as an option to this command
R1(config)#<input>interface fa0/1</input>
R1(config-if)#<input>ipv6 verify unicast reverse-path</input>

Links