Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

What is IP source Route ?

Please let me know what is IP source Route and why is it disable for security purpose.

Thanks in advance

4 REPLIES
New Member

It's information in an IP

It's information in an IP header that allows the source host to dictate the path the packet uses to get to the destination rather than leaving the path to be determined by intermediate gateways.  This could allow a source to go around security devices that are typically in the path between source and destination. 

New Member

Thanks for your reply

Thanks for your reply

Cisco Employee

Hello Nitin,Cisco routers

Hello Nitin,

Cisco routers normally accept and process source routes. Unless a network depends on it, source routing should be disabled.

Source routing is a technique whereby the sender of a packet can specify the route that a packet should take through the network. As a packet travels through the network, each router will examine the destination IP address and choose the next hop to forward the packet to. In source routing, the "source" (i.e., the sender) makes some or all of these decisions.

 

Reason for disabling: Attackers can use source routing to probe the network by forcing packets into specific parts of the network. Using source routing, an attacker can collect information about a network's topology, or other information that could be useful in performing an attack. During an attack, an attacker could use source routing to direct packets to bypass existing security restrictions.

Remedy:

Use the 'no ip source-route' command to disable IP source routing on the router. Refer to your router documentation for specific instructions.

 

 

Regards,

Mohit 

New Member

Thanks Mohit..For explaining

Thanks Mohit..For explaining this topic in such a good way. :-)

11182
Views
10
Helpful
4
Replies