Urpf Settings - D-Link DXS-3600 Series Reference Manual

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch Web UI Reference Guide
Parameter
Destination IPv6 Address
Network Address
IPv6 Address/Prefix Length
Click the Apply button to accept the changes made.
Click the Back button to return to the previous window.

URPF Settings

This window is used to view and configure the Unicast Reverse Path Forwarding (URPF) settings.
One common method to initiate an attack is to utilize IPv4/IPv6 source address spoofing. When using this
method, a hacker attempts to send traffic into the network with a source address that is known or trusted
by the target. If no protection exists, the organizational network will allow the traffic and potentially be
open to a number of different attack types. URPF helps to mitigate problems caused by malformed or
forged IPv4/IPv6 source addresses passing through a router.
When Unicast RPF is effectively enabled on an interface, the switch examines all IPv4 and IPv6 packets
received as input on that interface to make sure that the source address and source interface appear in
the routing table and match the interface on which the packet was received.
The reverse path checking will not be performed in the following situations:
•
The destination IPv4/IPv6 address is not a unicast address.
•
The source IP address is an IPv6 address and the address is a link-local address.
•
The received packet is a BOOTP/DHCP packet (the source IP is 0.0.0.0 and destination IP is
255.255.255.255).
To view the following window, click L3 Features > URPF Settings, as shown below:
The fields that can be configured in URPF Global Settings are described below:
Description
Select and enter the destination IPv6 address for the tunnel interface
here.
Enter the network address(es) in the spaces provided here.
Enter the IPv6 address and prefix length here.
Figure 6-31 URPF Settings Window
190