Configuring The User Interface For Urpf - Cisco Catalyst 4500 series Administration Manual

Configuring VRF-lite for IPv6

Configuring the User Interface for uRPF

You can configure uRPF on an interface assigned to a VRF. Source lookup is performed in the VRF table.
To configure VRF-aware services for uRPF, perform this task:
Command
Step 1
Switch# configure terminal
Step 2
Switch(config)# interface
interface-id
Step 3
Switch(config-if)# no switchport
Step 4
Switch(config-if)# ip vrf forwarding
vrf-name
Step 5
Switch(config-if-vrf)# ip address
ip-address subnet-mask
Step 6
Switch(config-if-vrf)# ip verify
unicast source reachable-via
rx allow-default
Step 7
Switch(config-if-vrf)# end
Configuring the User Interface for Traceroute
To configure VRF-aware services for traceroute, perform this task:
Command
traceroute vrf vrf-name ipaddress
Configuring the User Interface for FTP and TFTP
You must configure some FTP and TFTP CLIs in order for FTP and TFTP to be VRF-aware. For
example, if you want to use a VRF table that is attached to an interface (for example, E1/0), you need to
configure the ip [t]ftp source-interface E1/0 command to inform [t]ftp to use a specific routing table.
In this example, the VRF table is used to look up the destination IP address. These changes are
backward-compatible and do not affect existing behavior. You can use the source-interface CLI to send
packets out a particular interface even if no VRF is configured on that interface.
To specify the source IP address for FTP connections, use the ip ftp source-interface show mode
command. To use the address of the interface where the connection is made, use the no form of this
command.
To configure the user interface for FTP and TFTP, perform this task:
Command
Step 1
Switch# configure terminal
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
41-16
Purpose
Enters global configuration mode.
Enters interface configuration mode and specifies the Layer 3 interface
to configure.
Removes the interface from Layer 2 configuration mode if it is a
physical interface.
Configures VRF on the interface.
Enters the IP address for the interface.
Enables uRPF on the interface.
Returns to privileged EXEC mode.
Purpose
Specifies the name of a VPN VRF in which to find the destination
address.
Purpose
Enters global configuration mode.
Chapter 41 Configuring VRF-lite
OL_28731-01