Hi, On Wed, Aug 26, 2009 at 04:11:28PM +0200, Mikael Abrahamsson wrote: > >On Wed, Aug 26, 2009 at 03:52:55PM +0200, Mikael Abrahamsson wrote: > >>On Wed, 26 Aug 2009, Gert Doering wrote: > >> > >>>So how do you prevent customer A from sending out packets with an IP > >>>address belonging to customer B? (For whatever reason). > >> > >>Antispoofing ACL on vlan interface? > > > >Won't help if you have customer A and customer B in the same VLAN. > > They are not in the same vlan, they're in the same IP subnet but in > different vlans.
Ah, pvlans and community vlan stuff. OK, that would work, but still - lots
of effort that is just "automatic" otherwise.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpgfVz2CT16L.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
