Configuration Examples - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
URPF cannot be configured on Layer 2 interfaces of the AR1200-S.
Step 3 Configure URPF check for packets on the interface.
l
l
----End
Checking the Configuration
After the configuration, run the display this command in the interface view to view the URPF
configuration on the interface.
[Huawei-GigabitEthernet1/0/0] display this
#
interface GigabitEthernet 1/0/0
urpf strict allow-default-route
ipv6 urpf strict allow-default-route
#
return

8.4 Configuration Examples

This topic provides IP address anti-spoofing configuration examples.
8.4.1 Example for Configuring URPF
This section provides an example for configuring URPF.
Networking Requirements
As shown in
of an enterprise are connected to GE1/0/0 and GE2/0/0 of RouterA and they access the server
Issue 02 (2012-03-30)
Configure URPF check for IPv4 packets on the interface.
Run the urpf { loose | strict } [ allow-default-route ] command to configure the URPF
check for IPv4 packets on the interface.
Configure URPF check for IPv6 packets on the interface.
Run the ipv6 urpf { loose | strict } [ allow-default-route ] command to configure the
URPF check for IPv6 packets on the interface.
NOTE
To configure URPF check for IPv6 packets on an interface, enable the IPv6 function on the interface
first. Run the ipv6 command in the system view, and then the ipv6 enable command in the interface
view.
Figure 8-3, the research and development department and marketing department
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 IP Address Anti-spoofing Configuration
165