Configuring Unicast Rpf On A Vpn; Example: Configuring Unicast Rpf On A Vpn; Example: Configuring Unicast Rpf - Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual

Configuring Unicast RPF on a VPN

You can configure unicast RPF on a VPN interface by enabling unicast RPF on the
interface and including the
routing-instance-name]
You can configure unicast RPF only on the interfaces you specify in the routing
instance. This means the following:
For unicast RPF configuration guidelines, see "Configuring Unicast RPF" on page 215.
For more information about VPNs and virtual-router routing instances, see the JUNOS
VPNs Configuration Guide. For more information about FBF, see the JUNOS Routing
Protocols Configuration Guide.

Example: Configuring Unicast RPF on a VPN

Configure unicast RPF on a Layer 3 VPN interface:

Example: Configuring Unicast RPF

Configure unicast RPF strict mode, and apply a fail filter that allows the interface to
accept BOOTP packets and DHCP packets. The filter accepts all packets with a source
address of
Chapter 5: Configuring Protocol Family and Interface Address Properties
hierarchy level.
For Layer 3 VPNs, unicast RPF is supported on the CE router interface.
Unicast RPF is not supported on core-facing interfaces.
For virtual-router routing instances, unicast RPF is supported on all interfaces
you specify in the routing instance.
If an input filter forwards packets anywhere other than the routing instance the
input interface is configured for, the unicast RPF check is not performed.
[edit interfaces]
so-0/0/0 {
unit 0 {
family inet {
rpf-check;
}
}
}
[edit routing-instance]
VPN-A {
interface so-0/0/0.0;
}
and a destination address of
0.0.0.0
[edit firewall]
filter rpf-special-case-dhcp-bootp {
term allow-dhcp-bootp {
from {
source-address {
0.0.0.0/32;
statement at the
interface
255.255.255.255
[edit routing-instances
.
Configuring Unicast RPF
219