diff options
| author |   AkshayaNadahalli <anadahal@cisco.com> | 2017-02-07 23:59:54 +0530 |
|---|---|---|
| committer |   Neale Ranns <nranns@cisco.com> | 2017-02-08 10:21:00 +0000 |
| commit | 8ea6d7153b053f1b9bf837ef3a927136f44b41fd (patch) | |
| tree | 7622a7dc6266edba33c9d36910114d06e6440cc3 /src/vnet/ip/ip_input_acl.c | |
| parent | e4ad8cce6cf6e5d50b0ec101a4f5ab5d510ad374 (diff) | |
Fix source address reachability check for ip6 local packets
Currently ip6 local check fails with error - source lookup miss if
route to source of packet is over a dpo object such as load balance -
recurssive route, tunnel adj - GRE, SR etc.
So unless packet source is of a directly connected neibhor or has
route with both interface and nexthop specified, it will be dropped.
Fix is to check urpf list and if at least one link exists in the list,
then allow packets to be processed, else drop.
Change-Id: Id426311bb63bab506754a79409c602fdb6d0f190
Signed-off-by: AkshayaNadahalli <anadahal@cisco.com>
Diffstat (limited to 'src/vnet/ip/ip_input_acl.c')
0 files changed, 0 insertions, 0 deletions