Table of Contents
Advertisement
Enabling Source Address Validation
ipv6 sa-validate
Establishing a Static Route
ipv6 route
Copyright © 2010, Juniper Networks, Inc.
Source address validation verifies that a packet has been sent from a valid source address.
When a packet arrives on an interface, the router performs a routing table lookup using
the source address. The result from the routing table lookup is an interface to which
packets destined for that address are routed. This interface must match the interface
on which the packet arrived. If it does not match, the router drops the packet.
CAUTION: When the routing table lookup for a source address contains an
ECMP route, the router returns a list of interfaces for multiple next-hops. One
of the interfaces in this list must match the interface on which the packet
arrived or the router drops the packet. If the ECMP route uses indirect
next-hops, the returned list of interfaces does not include interfaces that are
reachable by those indirect next-hops. For example, if a packet arrives on an
interface with source address validation enabled, and the interface is
represented only by an indirect next-hop, a match for that interface does not
appear in the list of interfaces from the routing table lookup. The router drops
the packet.
Use to enable source address validation. Source address validation verifies that a
packet has been sent from a valid source address.
Example
host1(config-if)#ipv6 sa-validate
Use the no version to disable source address validation.
See ipv6 sa-validate
You can set a destination to receive and send traffic by a specific route through the
network.
Use to establish a static IPv6 route.
You can set a destination to receive and send traffic from and to a network or to use
a specific route through the network.
Example
host1(config)#ipv6 route 7fff::0/16 1::1
Use the no version of this command to remove a static route from the routing table.
See ipv6 route
Chapter 2: Configuring IPv6
133
Advertisement
Table of Contents
