I would include  no ip unreachables, we've seen major impacts from this


------------------------------------------------------
Tom Sands                                                       
Chief Network Engineer                          
Rackspace Managed Hosting               
(210)447-4391                   
------------------------------------------------------

Jared Mauch wrote:
> On Mon, May 07, 2007 at 05:58:02PM +0200, Brian Turnbow wrote:
>> Besides redesigning to avoid icmp redirects anyone have any ideas?
> 
>       Can you make sure that all your routers have the following
> on their "IP" (routed) interfaces:?
> 
>       no ip redirects
>       no ip proxy-arp
> 
>       This should help solve the problem.
> 
>       These two should really be default these days.
> 
>       - Jared
> 


Confidentiality Notice: This e-mail message (including any attached or
embedded documents) is intended for the exclusive and confidential use of the
individual or entity to which this message is addressed, and unless otherwise
expressly indicated, is confidential and privileged information of Rackspace
Managed Hosting. Any dissemination, distribution or copying of the enclosed
material is prohibited. If you receive this transmission in error, please
notify us immediately by e-mail at [EMAIL PROTECTED], and delete the
original message. Your cooperation is appreciated.

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to