Network application
Figure 82 Network diagram for URPF application
ISP A
Configure strict URPF between each ISP and its connected users. Configure loose URPF between ISPs.
URPF configuration
To configure URPF globally:
To do...
1.
Enter system view.
2.
Enable URPF check globally.
The routing table size decreases by half when URPF is enabled on the HP A5830 switches.
To prevent loss of routes and packets, URPF cannot be enabled if the number of route entries the switch
maintains exceeds half the routing table size.
URPF configuration examples
Network requirements
As shown in
check on Switch A and Switch B to prevent source address spoofing attacks.
Use the command...
system-view
ip urpf { loose | strict }
Figure
83, a client (Switch A) directly connects to the ISP switch (Switch B). Enable URPF
ISP B
URPF(loose)
URPF(strict)
Remarks
––
Required
Disabled by default
247
ISP C