no ip source-route and ip source-route

[5165980]

Please tell me the meaning of no ip source-route and ip source-route and provide a reference document link

[marce1000 · Accepted solution]

  - FYI  : https://community.cisco.com/t5/other-security-subjects/what-is-ip-source-route/m-p/2516037/highlight/true#M141179

 M.

[Blue_Bird · Accepted solution]

Hello @5165980 

ip source-route enables IP source routing, allowing a packet's sender to specify the route it takes through the network, while no ip source-route disables this feature. Source routing is generally considered a security risk and should be disabled unless explicitly required.

Here is the link where you can find the similar discussion:

https://community.cisco.com/t5/other-security-subjects/what-is-ip-source-route/td-p/2516035

Best regards
******* If This Helps, Please Rate *******

[Joseph W. Doherty]

As the other replies have already noted, that's a router configuration option to enable or disable processing IP hop addresses within an IP packet.  BTW, it's per hop, i.e. if one router doesn't process this IP packet option, it doesn't prevent prior or later routers from doing so.

General documention on source routing https://en.m.wikipedia.org/wiki/Source_routing.  (There's information on this IP option too.)

BTW, @Blue_Bird correctly notes this capability is considered a "security risk", but to security folk, everything is a security risk, and everything is.  But, often overlooked is risk to benefit.