IP Source Routing

Table 1. IP Source Routing product support

Feature

Product

Release introduced

IP Source Routing enable or disable

5320 Series

Fabric Engine 8.6

Only 5320-48P-8XE and 5320-48T-8XE support more than one VRF with IP configuration.

5420 Series

VOSS 8.4

5520 Series

VOSS 8.2.5

5720 Series

Fabric Engine 8.7

VSP 4450 Series

VOSS 5.1

VSP 4900 Series

VOSS 8.1

VSP 7200 Series

VOSS 5.1

VSP 7400 Series

VOSS 8.0

VSP 8200 Series

VOSS 5.1

VSP 8400 Series

VOSS 5.1

VSP 8600 Series

VSP 8600 4.5

XA1400 Series

Not Supported

IP Source Routing allows the sender of a packet to specify the route that the packet must travel through the network. When the Source Route option is not enabled, the router chooses the primary routing path to send the packets. If IP Source Routing flag is on, the source host dictates the datapath for the packet to reach the destination using the information contained in the IP header.

The routing behavior in VSP 8600 Series is controlled by the datapath specified, and not by status of the IP Source Route. VSP 8600 Series inspects the packets only if the router itself is specified in the Source Routing. Otherwise, the switch forwards the packets to another router in the network using IP Routing, whether or not IP Source Route is enabled. You can use an ACL filter to block the datapath from forwarding any IP Source Routing packets.

IP Source Routing is considered a security risk because it allows the users to specify their own path through the network outside of the primary forwarding path. This can cause packets to bypass the security devices. Therefore, IP Source Routing is disabled by default.