Download Print this page

HP FlexNetwork MSR Series Command Reference Manual page 977

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

Usage guidelines
IPv6 uRPF can be deployed on a CE or on a PE connected to either a CE or another ISP.
Configure strict IPv6 uRPF check on a PE interface connected to a CE, and configure loose IPv6
uRPF check on a PE interface connected to another ISP.
For asymmetrical routing, configure loose IPv6 uRPF to avoid discarding valid packets. For
symmetrical routing, configure strict IPv6 uRPF. An ISP usually adopts symmetrical routing on a PE
device.
Typically, you do not need to configure the allow-default-route keyword on a PE device, because it
has no default route pointing to a CE. If you enable uRPF on a CE that has a default route pointing to
the PE, specify the allow-default-route keyword.
You can use an ACL to match specific packets, so they are forwarded even if they fail to pass IPv6
uRPF check.
Examples
# Configure strict IPv6 uRPF check on interface GigabitEthernet 1/0/2 and allow using the default
route and IPv6 ACL 2999 to match packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] ipv6 urpf strict allow-default-route acl 2999
# Configure loose IPv6 uRPF check on interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ipv6 urpf loose
Related commands
display ipv6 urpf
959

Advertisement

loading