Configuring Unicast Rpf For Cisco Nexus 9300 Switches - Cisco Nexus 9000 Series Configuration Manual

Configuring Unicast RPF for Cisco Nexus 9300 Switches

Command or Action
Step 6 (Optional) show running-config interface ethernet
slot/port
Example:
switch(config)# show running-config interface
ethernet 2/3
Step 7 (Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Configuring Unicast RPF for Cisco Nexus 9300 Switches
You can configure one of the following Unicast RPF modes on an ingress interface for Cisco Nexus 9300
platform switches (excluding the 9300-FXP switches) running Cisco NX-OS Release 9.2(1) or a later release.
Strict Unicast RPF mode
Loose Unicast RPF mode
SUMMARY STEPS
1. configure terminal
2. [no] system urpf disable
3. interface ethernet slot/port
4. {ip | ipv6} address ip-address/length
5. {ip | ipv6} verify unicast source reachable-via {any [allow-default] | rx}
6. exit
7. (Optional) show ip interface ethernet slot/port
8. (Optional) show running-config interface ethernet slot/port
9. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
444
A strict mode check is successful when Unicast RPF finds a match in the FIB for the packet source
address and the ingress interface through which the packet is received matches one of the Unicast RPF
interfaces in the FIB match. If this check fails, the packet is discarded. You can use this type of Unicast
RPF check where packet flows are expected to be symmetrical.
A loose mode check is successful when a lookup of a packet source address in the FIB returns a match
and the FIB result indicates that the source is reachable through at least one real interface. The ingress
interface through which the packet is received is not required to match any of the interfaces in the FIB
result.
Purpose
Displays the configuration for an interface in the running
configuration.
Copies the running configuration to the startup
configuration.
Purpose
Enters global configuration mode.
Configuring Unicast RPF