Re: RFC1918 addresses to permit in for VPN?

[Stephen Stuart <stuart () mfnx net>]

> Implementation at the border with a peer is another matter. On cisco
> one would love to use ip verify unicast reverse path but that's not going
> to work because of asymmetric routes.

Have you looked at "ip verify unicast source reachable-via any"? YMMV
traffic-wise, but technology-wise it's supposed to address the
asymmetry issue.

Stephen