Network Application; Configuration Procedure - H3C S5830V2 Security Configuration Manual

Network application

Figure 75 Network diagram
Configure strict uRPF check between an ISP network and a customer network, and loose uRPF check
between ISPs.

Configuration procedure

When you configure uRPF, follow these guidelines:
uRPF checks only incoming packets on an interface.
•
After you enable the uRPF function on the switch, the routing table size might decrease by half.
•
If the number of routes exceeds half the routing table size of the switch, the uRPF function cannot be
•
enabled to avoid loss of routes and packets.
• Global uRPF configuration takes effect on both IPv4 and IPv6 routes.
To enable uRPF globally:
Step
1. Enter system view.
2. Enable uRPF globally.
ISP A
ISP B
User
Command
system-view
ip urpf { loose | strict }
230
uRPF (loose)
ISP C
uRPF (strict)
Remarks
N/A
By default, uRPF is disabled.