sysopt connection enforcesubnet command

[chan-kuen.hui]

Dear All,

In version 6.0 or later "sysopt connection enforcesubnet" command have been removed.

Is these command or feature already included in the IOS? also, is there any document mention this?

Thanks.

Regards,

CK

[scoclayton]

Documentation that the command has been removed:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/relnotes/pixrn53.htm#xtocid18

The "sysopt connection enforcesubnet" has been replaced by "ip verify reverse-path ":

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/gl.htm#wp1137904

Effectively, the 2 commands work the same. The newer command is more in keeping with the way Cisco IOS handles the situation.

Hope this helps.

Scott

[chan-kuen.hui]

Is "ip verify reverse-path " a default command?

Thanks.

CK

[scoclayton]

No, you need to enable it.

Scott