Checking Validity Of Source Ip Addresses Of Received Packets; Controlling Ip Packets With Source Route Options - Huawei AR150 series Configuration Manual

Huawei AR150&200 Series Enterprise Routers
Configuration Guide - IP Service
l
l
l
Data Preparation
To optimize IP performance, you need the following data.
No.
1
2
3
4

7.3.2 Checking Validity of Source IP Addresses of Received Packets

You can enable an interface to check validity of source IP addresses of received packets. This
improves network security.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Step 3 Run:
ip verify source-address
The interface is enabled to check validity of source IP addresses of received packets.
By default, an interface does not check validity of source IP addresses of received packets.
The AR150/200 only checks validity of source IP addresses of packets forwarded from an
interface to the CPU.
----End

7.3.3 Controlling IP packets with Source Route Options

By controlling IP packets with source route options, the AR150/200 can prevent malicious
attackers from detecting network topologies by using source route options. This improves
network security.
Issue 02 (2012-03-30)
Setting link layer protocol parameters for interfaces to ensure that the link layer protocol
status on the interfaces is Up
Configuring IP addresses for interfaces
Configuring an ACL
Data
Number of the interface where validity of source addresses of received packets will
be checked
Number of an ACL and number of the interface that will forward broadcast packets
Number of the interface that will reset the DF field of packets
Number of the interface where ICMP redirection will be configured
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 IP Performance Configuration
176