Setting The Urpf Check Mode On An Interface - Huawei Quidway S9300 Configuration Manual

7 URPF Configuration
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
urpf slot slot-number
URPF is enabled on an LPU.
By default, URPF is disabled on an LPU.
----End

7.3.3 Setting the URPF Check Mode on an Interface

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
The URPF check function can be configured on GE interfaces and Eth-Trunks of the S9300.
Step 3 Run:
urpf { loose | strict } [ allow-default-route ]
The URPF check mode is configured on the interface.
URPF determines the mode for processing a default route according to the value of allow-
default-route.
l
l
7-4
NOTE
The IP address of the interface on the S9300 needs to be configured on the VLANIF interface, but URPF
needs to be configured on the physical interface. This is because URPF is implemented on the physical
interface.
When neither the allow-default-route parameter is specified nor the source address of
packets exists in the FIB table, the packets are discarded in URPF strict or loose check mode
even if a corresponding default route is found.
When the allow-default-route parameter is specified and the source address of a packet does
not exist in the FIB table,
Packets pass URPF check and are forwarded in URPF strict check mode if the outgoing
–
interface of a default route is the same as the incoming interface of the packets. Packets
are discarded if the outgoing interface of a default route is different from the incoming
interface of the packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 01 (2009-07-28)