|
Hello,
On Sat, 16 Sep 2000, Joseph Mack wrote:
> > RFC1577 postualtes in 6.3 ATMARP Server Operational Requirements
> > that the second request to be discarded. But we need the router not to
> > restrict the packets to come from a specific IP derived from the VC.
>
> what's the VC?
Virtual Connection - RFC1577
> > I.e. we need the router to allow packets from RIP1 to come with
> > saddr=VIP (spoofed source). I don't think there is any ARP problem
> > here. The ATM implementation talks only for IP addresses configured
> > on ATM devices. This is my understanding looking in the sources.
> > If the VIP is not configured on ATM device on the real servers I
> > _expect_ this VIP not to be reported to the ARP server from the
> > real server.
> >
> > So, the problem is whether the router blocks packets coming
> > from the real server with saddr=VIP which is different from the
> > RIP (if associated with the VC). This must be checked. I don't see
> > such restrictions in the Linux CIP implementation. Not sure for
> > the other implementations. I can't believe such restriction exists.
>
> I asked this question of my friend a while ago and have just got the reply
> this morning.
>
> I had forgotten your reply which came later. It's a spoof problem and not
> an arp problem.
I'm not sure whether this is the problem. For now, I prefer to
think there is an ARP problem. May be the real server reports the VIP
to the ARP server because it is configured on atm device.
> thanks Joe
>
> --
> Joseph Mack mack@xxxxxxxxxxx
Regards
--
Julian Anastasov <ja@xxxxxx>
|
