A city clerk’s peering edge receives packets with source addresses that do not match a plausible reverse path. Which feature drops many of those spoofed sources?
Select an answer to reveal the explanation.
Short Explanation
uRPF asks whether a reply to that source would leave via the same door the packet arrived on. If the reverse path looks bogus, the spoofed packet is trash-canned at the edge.
Full Explanation
Unicast RPF validates that a packet’s source address is consistent with the routing table’s reverse path (strict or loose modes per design). It is a primary anti-spoofing control on enterprise and peering edges. DHCP snooping, unrelated VACL mirrors, and NHRP shortcuts do not perform reverse-path source validation on that edge.