Unicast Reverse Path Forwarding – Strict Mode

Unicast Reverse Path Forwarding (Unicast RPF) in Strict Mode is a network security tool designed for use at the edge of a service-provider network. Strict Mode vs Loose Mode Strict mode verifies that the source address of an IPv4 packet both exists in the routing table and is reachable by a path through the input [...]

Zone Based Firewall

A new feature to the V4 blueprint for the CCIE R&S exam is Zone Based Firewall. According to the blueprint you need to Implement Zone Based Firewall. First stop would be the Documentation. The configuration document is here http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml If anyone can navigate me in from the home page please comment, as I have had [...]

Block P2P traffic on Cisco router

This short blog post shows you how to block peer to peer traffic on a cisco router. This example is based on a Cisco 1801 ADSL router but will work equally well on any device running the correct image. We will be using NBAR to identify the p2p traffic. Before you can configure NBAR you [...]