H3C S9500 Series Operation Manual page 167

Operation Manual – URPF
H3C S9500 Series Routing Switches
III. Configuration procedure
As for Switch B, assume that the service processor board is installed in slot 5, and
normal access boards are installed in slot 3 and 3.
# Configure VLAN 1000.
[H3C] vlan 1000
[H3C-vlan1000] port Ethernet 3/1/30
[H3C-vlan1000] port GigabitEthernet6/1/2
[H3C] interface vlan-interface 1000
[H3C-Vlan-interface1000] ip address 10.10.10.1 24
# Configure flow templates. Specify the flow template of the two access boards installed
in slot 3 and slot 6 to extract the destination MAC addresses and Ethernet protocol
fields of the packets.
[H3C] flow-template user-defined slot 3 dmac 00-00-00 ethernet-protocol
[H3C] flow-template user-defined slot 6 dmac 00-00-00 ethernet-protocol
# Create an ACL of Layer 2.
[H3C]acl number 4000
# Define a rule that permits IP packets whose destination MAC addresses are that of
the interface (01-02-03).
[H3C-acl-link-4000] rule 0 permit ip egress 01-02-03 00-00-00
# Configure packet redirecting on the corresponding Ethernet port.
[H3C] interface ethernet 3/1/30
[H3C-Ethernet3/1/30] flow-template user-defined
[H3C-Ethernet3/1/30] traffic-redirect inbound link-group 4000 slot 5 vlan 1000
[H3C-Ethernet3/1/30] quit
[H3C] interface GigabitEthernet 6/1/2
[H3C-GigabitEthernet6/1/2] flow-template user-defined
[H3C-GigabitEthernet6/1/2] traffic-redirect inbound link-group 4000 slot 5
designated-vlan 1000
[H3C-GigabitEthernet6/1/2] quit
# Enable URPF in VLAN 1000.
[H3C] interface vlan-interface 1000
[H3C-Vlan-Interface1000] urpf enable to slot 5
1.3.2 Example II
I. Network requirements
NAM board is placed in slot 5.
1-4
Chapter 1 URPF Configuration