Ipv6 Urpf Configuration Example - HP VSR1000 Security Configuration Manual

IPv6 uRPF configuration example

Network requirements
As shown in
packets from network 1010::/64.
Configure strict IPv6 uRPF check on GigabitEthernet 1/0 of Router A and allow using the default route for
IPv6 uRPF check.
Figure 101 Network diagram
Configuration procedure
1. Configure Router B:
# Define IPv6 ACL 2010 to permit traffic from network 1010::/64.
<RouterB> system-view
[RouterB] acl ipv6 number 2010
[RouterB-acl-basic-2010] rule permit source 1010:: 64
[RouterB-acl-basic-2010] quit
# Specify the IPv6 address of GigabitEthernet 1/0.
[RouterB] interface gigabitethernet 1/0
[RouterB-GigabitEthernet1/0] ipv6 address 1000::2/64
# Configure strict uRPF check on GigabitEthernet 1/0.
[RouterB-GigabitEthernet1/0] ipv6 urpf strict acl 2010
2. Configure Router A:
# Specify the IPv6 address of GigabitEthernet 1/0.
<RouterA> system-view
[RouterA] interface gigabitethernet 1/0
[RouterA-GigabitEthernet1/0] ipv6 address 1000::1/64
# Configure strict uRPF check on GigabitEthernet 1/0 and allow using the default route for IPv6
uRPF check.
[RouterA-GigabitEthernet1/0] ipv6 urpf strict allow-default-route
Figure 101, configure strict IPv6 uRPF check on GigabitEthernet 1/0 of Router B and permit
334