QuestionQ4

Network

A client reports frequent flapping and server-cluster disconnects in its data center. While investigating the problem, an engineer finds that a network attack is targeting Cisco Nexus 7000 Series Switches and that its source IP addresses are spoofed. Which first-line security solution resolves this problem?

Explanation

Unicast RPF checks ingress packets against the forwarding information base to verify that the source address has a valid reverse path. Packets with forged or unverifiable source IP addresses are dropped, mitigating spoofed-source attacks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!