- Table of Contents
-
- 11-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X_Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05 Password Control Commands
- 06-Public Key Commands
- 07-IPsec Commands
- 08-SSH Commands
- 09-Blacklist Commands
- 10-TCP and ICMP Attack Protection Commands
- 11-IP Source Guard Commands
- 12-ARP Attack Protection Commands
- 13-ND Attack Defense Commands
- 14-URPF Commands
- 15-PKI Commands
- 16-SSL Commands
- Related Documents
-
Title | Size | Download |
---|---|---|
14-URPF Commands | 46.76 KB |
ip urpf strict
Syntax
ip urpf strict [ link-check ]
undo ip urpf
View
Interface view
Default level
2: System level
Parameters
link-check: Enables the link layer check.
Description
Use the ip urpf strict command to enable strict URPF check on the interface.
Use the undo ip urpf strict command to restore the default.
By default, strict URPF check is disabled.
To pass strict URPF check, the source address and receiving interface of a packet must match the destination address and output interface of a FIB entry.
|
NOTE: Strict URPF check can be configured only on the VLAN interfaces of an Ethernet interface card. |
Examples
# Enable strict URPF check on VLAN-interface 2.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] ip urpf strict