Table of Contents
Advertisement
Use undo ipv6 urpf to disable IPv6 uRPF.
Syntax
ipv6 urpf { loose | strict } [ allow-default-route ]
undo ipv6 urpf
Default
IPv6 uRPF is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
loose: Enables loose IPv6 uRPF check. To pass loose IPv6 uRPF check, the source address of a
packet must match the destination address of an IPv6 FIB entry.
strict: Enables strict IPv6 uRPF check. To pass strict IPv6 uRPF check, the source address and
receiving interface of a packet must match the destination address and output interface of an IPv6
FIB entry.
allow-default-route: Allows using the default route for IPv6 uRPF check.
Usage guidelines
IPv6 uRPF can be deployed on a CE or on a PE connected to either a CE or an ISP.
Configure strict IPv6 uRPF check for traffic that uses symmetric path and configure loose IPv6 uRPF
check for traffic that uses asymmetric path. A symmetric path exists for a session if the PE uses the
same interface to receive upstream traffic and send downstream traffic. The path is asymmetric if the
PE uses different interfaces to receive upstream traffic and send downstream traffic.
•
Typically, symmetric path applies to traffic that goes through an ISP's PE interface connected to
the CE. You can configure strict IPv6 uRPF check on the PE interface.
•
Asymmetric path might exist for traffic that goes through a PE interface connected to another
ISP. In this case, configure loose IPv6 uRPF check on the PE interface.
Typically, you do not need to configure the allow-default-route keyword on a PE device, because it
has no default route pointing to a CE. If you enable uRPF on a CE that has a default route pointing to
the PE, specify the allow-default-route keyword.
Examples
# Enable strict IPv6 uRPF check globally.
<Sysname> system-view
[Sysname] ipv6 urpf strict
Related commands
display ipv6 urpf
657
Advertisement
Table of Contents
