Network Application; Configuring Urpf; Urpf Configuration Example - HP 3600 v2 Series Security Configuration Manual

Network application

Figure 137 Network diagram
Configure strict URPF between each ISP and its connected users, and loose URPF between ISPs.

Configuring URPF

Follow these steps to configure URPF globally:
To do...
Enter system view
Enable URPF check globally
NOTE:
The routing table size decreases by half when URPF is enabled on the 3600 v2 switches.
•
• To prevent loss of routes and packets, URPF cannot be enabled if the number of route entries the switch
maintains exceeds half the routing table size.

URPF configuration example

Network requirements
As shown in
check on Switch A and Switch B to prevent source address spoofing attacks.
ISP A
Figure 138, a client (Switch A) directly connects to the ISP switch (Switch B). Enable URPF
ISP B
URPF(loose)
Use the command...
system-view
ip urpf { loose | strict }
359
ISP C
URPF(strict)
Remarks
––
Required
Disabled by default.