Enabling IPv6 uRPF
IPv6 uRPF checks only incoming packets on interfaces. You can enable IPv6 uRPF globally. Global IPv6 uRPF takes effect on all interfaces of the device.
Follow these guidelines when you enable IPv6 uRPF:
IPv6 uRPF is not supported on the LSUM1TGS48SG0 (JH197A and JH205A) module.
IPv6 uRPF does not check packets received on the SA interface modules if the source IPv6 addresses of the packets have a prefix length longer than 64.
IPv6 uRPF does not check tunneled packets. For more information about tunneling, see Layer 3—IP Services Configuration Guide.
In an MPLS network, an egress node cannot perform strict IPv6 uRPF check on packets from the penultimate hop to which the egress assigns an implicit null label. For more information about the implicit null label, see MPLS Configuration Guide.
Do not configure the allow-default-route keyword for loose IPv6 uRPF check. Otherwise, IPv6 uRPF might fail to work.
To enable IPv6 uRPF globally:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable IPv6 uRPF globally. | ipv6 urpf { loose | strict } [ allow-default-route ] | By default, IPv6 uRPF is disabled. |