Huawei Quidway S9300 Configuration Manual page 153

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Data Preparation
To complete the configuration, you need the following data:
l
The URPF takes effect when the unicast route functions normally. The following configuration
procedure lists only URPF-related configurations, and the configurations of IP addresses and
unicast route are not mentioned.
Procedure
Step 1 Enable URPF on an LPU.
<Quidway> system-view
[Quidway] urpf slot 2
Step 2 Set the URPF check mode on an interface.
[Quidway] interface gigabitethernet 2/0/0
[Quidway-GigabitEthernet2/0/0] urpf strict allow-default-route
Step 3 Verify the configuration.
Run the display this command in the view of GE 2/0/0 to view the URPF configuration.
[Quidway-GigabitEthernet2/0/0] display this
#
interface GigabitEthernet2/0/0
urpf strict allow-default-route
#
return
----End
Configuration Files
#
sysname Quidway
#
urpf slot 2
#
interface GigabitEthernet2/0/0
urpf strict allow-default-route
#
return
Issue 01 (2009-07-28)
URPF strict check mode
NOTE
As shown in Figure 7-2, the networking of symmetric routes is adopted. URPF strict check is recommended
in the case of symmetric routes.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 URPF Configuration
7-7