Enabling Source Address Validation; Enabling Source Address Validation Traps - Juniper IGP - CONFIGURATION GUIDE V11.1.X Configuration Manual

JUNOSe 11.0.x IP, IPv6, and IGP Configuration Guide

Enabling Source Address Validation

Source address validation verifies that a packet has been sent from a valid source
address. When a packet arrives on an interface, the router performs a routing table
lookup using the source address. The result from the routing table lookup is an
interface to which packets destined for that address are routed. This interface must
match the interface on which the packet arrived. If it does not match, the router
drops the packet.
ip sa-validate

Enabling Source Address Validation Traps

The ip sa-validate trap-enable command enables the generation of traps for source
address validation failure.
NOTE: To fully enable source address validation traps, you must also enable the IP
trap category with the snmp-server trap enable command. See JUNOSe System Basics
Configuration Guide for more information.
ip sa-validate trap-enable
40
IP Routing
Use to enable the ability to create host access routes on a PPP interface.
Example
host1(config-if)#ip access-routes
Use the no version to disable this feature.
See ip access-routes
Use to enable source address validation.
Example
host1(config-if)#ip sa-validate
Use the no version to disable source address validation.
See ip sa-validate
Use to enable the generation of traps for source address validation failure on the
router.
You can specify a VRF context for which you want to enable trap validation for
source address validation.
Example
host1(config)#ip sa-validate trap-enable