Hi,
On Thu, Mar 27, 2014 at 10:42:23AM -0400, Lee wrote:
> And to ratchet the level of hyperbole down a notch, enabling uRPF can lead to
> - not being able to specifically ping one particular interface from
> the management system
> - not having traceroute tell me on which exact path my packets are flowing
> - NMS/discovery limitations
> and yet enabling uRPF is generally considered A Good Idea.
Actually, enabling uRPF on core-to-core interfaces is considered a
significantly stupid idea. You enable uRPF towards your customers,
and loose(!) uRPF towards peers/upstreams for BGP-RTBH.
None of these will impair traceroute or NMS/discovery.
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec
