Urpf Configuration Example I - H3C S9500 Series Operation Manual

Operation Manual – NAT-URPF-VPLS
H3C S9500 Series Routing Switches
Quit to system view
Enter
interface view
Enable URPF on a
port
Display
configuration
information
Clear
statistical counters
to zero
Note:
In access control lists, redirection configuration is only valid for permit action of the
rule.
When redirected to the board's CPU, packets are not forwarded.
You can configure the next-hop parameter of the traffic-redirect inbound
ip-group command to implement policy routing. Refer to "Packet Redirection"
section in "QACL".

2.3 URPF Configuration Example I

I. Network requirements
What differs from routers is that, for switches, you can enable URPF on VLAN
interfaces, and configure only packet redirection on every port. Packets to be checked
are sent to the service processor card and then are forwarded or discarded after the
system performs URPF procedure on them.
Item
quit
VLAN
interface vlan-interface vlan-id
urpf enable to slot slotid
display urpf
URPF
reset urpf statistic
Command
2-3
Chapter 2 URPF Configuration
Description
-
-
Required.
Enable URPF in VLAN
interface view. Specify
corresponding slot of a
service processor card to
perform URPF check.
By default, URPF
disabled.
-
-
is