GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Question Re: "ip verify unicast" feature in IOS posted 02/01/2007
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


Hi Groupstudy,

I am a little confused about the operation of the ip verify source feature
in IOS. In the following example I want to log an entry if the source lookup
fails.

For example, my intrepretation of the configuration below is that it will
perform the source lookup for all sources (permit any) and generate a syslog
message if the source lookup fails.

I have tested this with little success other than some output at the end of
"show ip interface serial 0/0" which suggests its doing what it should.

#------- Config Output ------#
ip cef

access-list 1 permit any log
!
interface Serial0/0
ip verify unicast source reachable-via rx 1

#--- End of Config Output ---#


After some testing..

R1#show ip interface serial 0/0
Serial0/0 is up, line protocol is up
(Output Removed)
  IP verify source reachable-via RX, ACL 1
  20 verification drops
  0 suppressed verification drops
R1#

Thanks for any input/clarification,
Jim White

(Cork, Ireland)