Enabling uRPF
uRPF checks only incoming packets on interfaces. You can enable uRPF globally. Global uRPF takes effect on all interfaces of the device.
Follow these guidelines when you enable uRPF:
uRPF is not supported on the LSUM1TGS48SG0 (JH197A and JH205A) module.
uRPF does not check tunneled packets. For more information about tunneling, see Layer 3—IP Services Configuration Guide.
In an MPLS network, an egress node cannot perform strict uRPF check on packets from the penultimate hop to which the egress assigns an implicit null label. For more information about the implicit null label, see MPLS Configuration Guide.
Do not configure the allow-default-route keyword for loose uRPF check. Otherwise, uRPF might fail to work.
To enable uRPF globally:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable uRPF globally. | ip urpf { loose [ allow-default-route ] | strict [ allow-default-route ] } | By default, uRPF is disabled. |