Example: Configuring Unicast Rpf On A Vpn; Configuring Unicast Rpf Fail Filter; Verifying Unicast Rpf Status - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide

Configuring Unicast RPF Fail Filter

Related
Documentation

Verifying Unicast RPF Status

Purpose
808
For virtual-router routing instances, unicast RPF is supported on all interfaces you
specify in the routing instance.
If an input filter forwards packets anywhere other than the routing instance the input
interface is configured for, the unicast RPF check is not performed.
For more information about VPNs and virtual-router routing instances, see the Junos OS
VPNs Library for Routing Devices. For more information about FBF, see the Junos OS
Routing Protocols Library.

Example: Configuring Unicast RPF on a VPN

Configure unicast RPF on a Layer 3 VPN interface:
[edit interfaces]
so-0/0/0 {
unit 0 {
family inet {
rpf-check;
}
}
}
[edit routing-instance]
VPN-A {
interface so-0/0/0.0;
}
Unicast RPF fail filter allows you to apply a filter to packets that fail the unicast RPF
check. ACX Series routers supports configuring uRPF fail filter on interfaces. You can
define the fail filter to perform any filter operation, including accepting, rejecting, logging,
or policing.
For more information about unicast RPF, see the Junos OS Routing Protocols Library. For
more information about defining fail filters, see the Routing Policies, Firewall Filters, and
Traffic Policers Feature Guide.
For information about configuring a firewall filters, see
Filters" on page 1044.
To configure unicast RPF fail filter, include the
interface-name unit logical-unit-number family (inet | inet6) rpf-check]
unicast-reverse-path on page 1770
Example: Configuring Unicast Reverse-Path-Forwarding Check
Guidelines for Configuring Firewall Filters on page 1044
Verify that unicast reverse-path forwarding (RPF) is enabled and is working on the
interface.
"Guidelines for Configuring Firewall
fail-filter statement at the
hierarchy level.
Copyright © 2017, Juniper Networks, Inc.
[edit interfaces