D-Link DXS-3600 Series Cli Reference Manual page 1321

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Parameters
reachable-via
any
rx
allow-default
access-group IP-ACCESS-
LIST-NAME
ipv6-access-group IPV6-
ACCESS-LIST-NAME
Default
By default, URPF checking is not performed.
By default, the checking mode is RX.
By default, no IPv4/IPv6 access list is specified.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Unicast RPF helps to mitigate problems caused by the introduction of malformed or forged IPv4/IPv6
source addresses into a network by discarding IPv4/IPv6 packets that lack a verifiable IPv4/IPv6 source
address.
When Unicast RPF is effectively enabled on an interface, the switch examines all IPv4 and IPv6 packets
received as input on that interface to make sure that the source address and source interface appear in
the routing table and match the interface on which the packet was received.
The reverse path checking will not be performed in the following situations:
•
The destination IPv4/IPv6 address is not a unicast address.
•
The source IP address is an IPv6 address and the address is a link-local address.
•
The received packet is a BOOTP/DHCP packet (the source IP is 0.0.0.0 and destination IP is
255.255.255.255).
Example
This example shows how to enable Unicast RPF checking on interface Ethernet 1/0/8.
Switch# configure terminal
Switch(config)# interface ethernet 1/0/8
Switch(config-if)# ip verify unicast source
Switch(config-if)#
This example shows how to configure the Unicast RPF checking mode to any and allow the use of the
default route for RPF verification on interface Ethernet 1/0/1.
(Optional) Specifies the mode how URPF examines the incoming
packets.
Specifies to verify if the source address is present in the routing table
(sometimes referred to as the loose mode).
Specifies to verify if the source address is present in the routing table
and the incoming interface matches the source and is reachable
through the interface on which the packet was received (sometimes
referred to as the strict mode). This is the default option.
(Optional) Specifies allowing the use of the default route for URPF
verification.
(Optional) Specifies the name of the IPv4 ACL to be checked.
(Optional) Specifies the name of the IPV6 ACL to be checked.
1316