Hi, On Wed, Nov 14, 2012 at 11:55:30AM -0500, Jon Lewis wrote: > So that suggests that the suppressed drops were suppressed by > allow-default and that Gert doesn't have full routes on this device, which > is a given since it's a non-XL 3B.
Actually it is a 3BXL, but it still doesn't have full routes - interesting
enough, for those packets that came up in "debug ip cef drops rpf", I
*did* have routes. Pointing to other interfaces, though...
So it seems it would sort of do a strict match first, always, and if
that would result in a drop, do the loose/default match second and
"suppress the drop". But not for all relevant packets.
So the workings of the hardware, and what it actually counts in "show ip int"
is still somewhat of a mystery to me - but it's good to see (and hear) that
it indeed does this in hardware :-)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpy7iZ4zc1uh.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
