Login
- Table of Contents
-
- 10-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05-Password Control Commands
- 06-Public Key Commands
- 07-IPsec Commands
- 08-SSH Commands
- 09-Packet-Filter Firewall Commands
- 10-ALG Commands
- 11-Session Management Commands
- 12-TCP and ICMP Attack Protection Commands
- 13-IP Source Guard Commands
- 14-ARP Attack Protection Commands
- 15-URPF Commands
- 16-COPS Commands
- 17-FIPS Commands
- 18-PKI Commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 15-URPF Commands | 62.59 KB |
|
|
NOTE: In this documentation, SPC cards refer to the interface cards prefixed with SPC, for example, SPC-GT48L. |
ip urpf
Syntax
ip urpf { loose | strict } [ allow-default-route ]
undo ip urpf
View
Interface view
Default level
2: System level
Parameters
loose: Specifies the loose URPF check. This keyword is supported only in SPE working mode. For more information about the system working mode, see Fundamentals Configuration Guide.
strict: Specifies the strict URPF check.
allow-default-route: Allows use of the default route for URPF check. This keyword is supported only in SPE working mode.
Description
Use the ip urpf command to enable URPF check on an interface.
Use the undo ip urpf command to disable this function.
By default, URPF check is disabled.
This command is not supported on tunnel interfaces.
|
|
NOTE: · Strict URPF check is effective only on the VLAN interfaces of an SPC interface card. · In SPE working mode, IPv6 URPF automatically takes effect after URPF is enabled. |
Examples
# Enable strict URPF check on the interface GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface GigabitEthernet 3/1/1
[Sysname-GigabitEthernet3/1/1] ip urpf strict
