Unicast Rpf With Bootp And Dhcp - Cisco Catalyst 4500 series Administration Manual

About Unicast Reverse Path Forwarding
Figure 36-4

Unicast RPF with BOOTP and DHCP

Unicast RPF will allow packets with 0.0.0.0 source and 255.255.255.255 destination to pass so that
Bootstrap Protocol (BOOTP) and Dynamic Host Configuration Protocol (DHCP) functions work
properly.
Restrictions
Restrictions for applying Unicast RPF to multihomed clients include the following:
•
•
Limitation
Unicast loose mode is not supported.
Related Features and Technologies
For more information about Unicast RPF-related features and technologies, review the following:
•
•
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
36-8
Unicast RPF Blocking Traffic in an Asymmetrical Routing Environment
Unicast RPF applied
to S0 would not
block traffic to
site A
S0
ISP
network
S1
Unicast RPF applied
to S1 would BLOCK
traffic from site A
Clients should not be multihomed to the same switch because action defeats the purpose of building
a redundant service for the client.
Customers must ensure that the packets flowing up the link (out to the Internet) match the route
advertised out the link. Otherwise, Unicast RPF filters those packets as malformed packets.
Unicast RPF requires Cisco express forwarding (CEF) to function properly on the switch. For more
information about CEF, refer to the Cisco IOS Switching Services Configuration Guide.
Unicast RPF can be more effective at mitigating spoofing attacks when combined with a policy of
ingress and egress filtering using Cisco IOS access control lists (ACLs).
Chapter 36 Configuring Unicast Reverse Path Forwarding
Best route to
site A from ISP
The Internet
Best route to
ISP from site A
Site A
OL_28731-01