Urpf Configuration Example Ii - H3C S9500 Series Operation Manual

Operation Manual – NAT-URPF-VPLS
H3C S9500 Series Routing Switches
[H3C] interface vlan 1000
[H3C-Vlan-Interface1000] urpf enable to slot 5

2.4 URPF Configuration Example II

I. Network requirements
NAT board is placed in slot 5.
Create two virtual interfaces, VLAN interface 1000 and VLAN interface 1001; enable
URPF on them and use the NAT service processor card in slot 5 to perform URPF
check.
Port Ethernet6/1/1 is a trunk port, permitting packets of VLAN 1000 and VLAN 1001.
It is required that port Ethernet6/1/1 perform URPF check on packets of VLAN 1000
and VLAN 1001.
II. Network diagram
Figure 2-3 Network diagram for URPF
III. Configuration procedure
# Configure VLAN information.
[H3C] vlan 1000
[H3C-vlan1000] vlan 1001
[H3C-vlan1001] quit
[H3C] interface ethernet 6/1/1
[H3C-Ethernet6/1/1]quit
[H3C] vlan 1001
[H3C-vlan1001] quit
[H3C] interface vlan-interface 1000
[H3C-Vlan-interface1000] ip address 10.10.10.1 24
[H3C-Vlan-interface1000] interface vlan-interface 1001
[H3C-Vlan-interface1001] ip address 11.11.11.1 24
# Enable URPF on the VLAN interfaces.
[H3C-Vlan-interface1000] urpf enable to slot 5
[H3C-Vlan-interface1000] interface vlan 1001
[H3C-Vlan-interface1001]urpf enable to slot 5
2-5
Chapter 2 URPF Configuration