First-hop security IPv6 Cisco IOS

This article is under development....

Unicast Reverse Path Forwarding

To avoid spoofed packets passing a Router. Could be DoS attack. With RPF - reverse Path Forwarding - the router checks that the sending hosts source IP address matches the routing table on the receiving interface.

Example

An access-list can be used as an option to this command

R1(config)#<input>interface fa0/1</input>
R1(config-if)#<input>ipv6 verify unicast reverse-path</input>

Links

• Cisco Ipv6 first-hop security