Network Application; Enabling Urpf; Displaying And Maintaining Urpf - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Network application

Figure 135 Network diagram
As shown in
network. Loose uRPF check is configured between ISPs.

Enabling uRPF

When you enable uRPF, follow these restrictions and guidelines:
•
Global uRPF configuration takes effect on both IPv4 and IPv6 routes.
•
uRPF checks only incoming packets on an interface.
•
After you enable the uRPF function on the switch, the routing table size might decrease by half.
•
If the number of routes exceeds half the routing table size of the switch, the uRPF function
cannot be enabled to avoid loss of routes and packets.
To enable uRPF globally:
Step
1. Enter system view.
2. Enable uRPF globally.

Displaying and maintaining uRPF

Execute display commands in any view.
ISP A
Figure 135, strict uRPF check is configured between an ISP network and a customer
ISP B
User
Command
system-view
ip urpf { loose | strict }
441
uRPF (loose)
ISP C
uRPF (strict)
Remarks
N/A
By default, uRPF is disabled.