Configuration Examples; Example For Configuring Urpf; Figure 7-2 Networking Diagram For Configuring Urpf - Huawei Quidway S9300 Configuration Manual

7 URPF Configuration
Prerequisite
The configurations of URPF are complete.
Procedure
l
----End
Example
Run the display this command to check whether URPF is enabled on GE 1/0/0.
[Quidway-GigabitEthernet1/0/0] display this
#
interface GigabitEthernet1/0/0
urpf loose allow-default-route
#
return

7.4 Configuration Examples

This section provides several configuration examples of URPF.

7.4.1 Example for Configuring URPF

7.4.1 Example for Configuring URPF
Networking Requirements
As shown in
is connected to the user network through GE 2/0/0. To protect the S9300 against the attack based
on the source address at the user side, you need to enable the URPF check function and matching
of the default route on the S9300.

Figure 7-2 Networking diagram for configuring URPF

Configuration Roadmap
Enable URPF on user side interface GE 2/0/0 of the S9300.
7-6
Run the display this command in the interface view to check whether URPF is enabled on
the current interface.
Figure 7-2, the S9300 is connected to the router of the ISP through GE 1/0/0 and
GE2/0/0
User network
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
GE1/0/0
S9300
Configuration Guide - Security
ISP
Issue 01 (2009-07-28)