Configuration Procedure; Displaying And Maintaining Ipv6 Urpf; Ipv6 Urpf Configuration Example - HP FlexNetwork 10500 Series Security Configuration Manual

Configuration procedure

A device supports IPv6 uRPF configuration globally. Global IPv6 uRPF configuration takes effect on
all interfaces.
Follow these guidelines when you configure IPv6 uRPF:
•
IPv6 uRPF is not supported on the LSUM1TGS48SG0(JH197A, JH205A) module.
•
IPv6 uRPF does not check packets received on the SA interface modules if the source IPv6
addresses of the packets have a prefix length longer than 64.
•
IPv6 uRPF checks only incoming packets on an interface.
•
IPv6 uRPF does not check tunneled packets. For more information about tunneling, see Layer
3—IP Services Configuration Guide.
•
In an MPLS network, an egress node cannot perform strict IPv6 uRPF check on packets from
the penultimate hop to which the egress assigns an implicit null label. For more information
about the implicit null label, see MPLS Configuration Guide.
•
Do not configure the allow-default-route keyword for loose IPv6 uRPF check. Otherwise, IPv6
uRPF might fail to work.
To enable IPv6 uRPF globally:
Step
1. Enter system view.
2. Enable IPv6 uRPF globally.

Displaying and maintaining IPv6 uRPF

Execute display commands in any view.
Task
Display IPv6 uRPF configuration (in
standalone mode).
Display IPv6 uRPF configuration (in IRF
mode).

IPv6 uRPF configuration example

Network requirements
As shown in
Configure strict IPv6 uRPF check on Switch A and allow using the default route for IPv6 uRPF check.
Figure 139 Network diagram
Switch A
Command
system-view
ipv6 urpf { loose | strict }
[ allow-default-route ]
Figure 139, configure strict IPv6 uRPF check on Switch B.
Switch B
Command
display ipv6 urpf [ slot slot-number ]
display ipv6 urpf [ chassis chassis-number slot
slot-number ]
IP network
456
Remarks
N/A
By default, IPv6 uRPF is disabled.