Login
- Table of Contents
-
- 11-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05 Password Control Commands
- 06-Public Key Commands
- 07-IPsec Commands
- 08-SSH Commands
- 09-Blacklist Commands
- 10-TCP and ICMP Attack Protection Commands
- 11-IP Source Guard Commands
- 12-ARP Attack Protection Commands
- 13-ND Attack Defense Commands
- 14-URPF Commands
- 15-PKI Commands
- 16-SSL Commands
- 17-FIPS Commands
- 18-Attack Detection and Protection Commands
- Related Documents
-
14-URPF Commands
| Title | Size | Download |
|---|---|---|
| 14-URPF Commands | 46.77 KB |
ip urpf strict
Syntax
ip urpf strict [ link-check ]
undo ip urpf
View
Interface view
Default level
2: System level
Parameters
link-check: Enables the link layer check.
Description
Use ip urpf strict to enable strict URPF check on the interface.
Use undo ip urpf strict to restore the default.
By default, strict URPF check is disabled.
To pass strict URPF check, the source address and receiving interface of a packet must match the destination address and output interface of a FIB entry.
|
|
NOTE: Strict URPF check can be configured only on the VLAN interfaces. |
Examples
# Enable strict URPF check on VLAN-interface 2.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] ip urpf strict
