HP ProCurve 7102dl Reference Manual page 434

Secure router sros command line interface

Hide thumbs Also See for ProCurve 7102dl:

Table of Contents

SROS Command Line Interface Reference Guide

ip policy-class <policyname> rpf-check

Use the ip policy-class rpf-check command to verify that traffic has entered on the appropriate interface

using a route lookup. Reverse Path Forwarding (RPF) is essentially a spoofing check. For more details on

IP policy class functionality in SROS, refer to ip policy-class <policyname> on page 426. Use the no form

of this command to disable this feature.

Syntax Description

Default Values

This command is enabled by default.

Functional Notes

The rpf-check feature should be disabled if your application allows incoming traffic on policy classes that

do not match the route table's source destination specifications. This feature can be disabled on a per pol-

icy class basis by issuing the command in conjunction with the policy class name you do not want to be

Usage Examples

The following example turns off the rpf-check feature for the Private policy class:

ProCurve(config)#no ip policy-class Private rpf-check

Identifies the configured access policy using an alphanumeric descriptor

(maximum of 255 characters). All access policy descriptors are

case-sensitive.

Enables RPF check (spoofing).

Global Configuration Mode Command Set

Chapters

Table of Contents