09-Security Command Reference

HomeSupportResource CenterH3C S5560S-EI&S5560S-SI&S5500V3-SI Switch Series Command References-R612x-6W10209-Security Command Reference
19-uRPF commands
Title Size Download
19-uRPF commands 32.16 KB

IPv4 uRPF commands

display ip urpf

Use display ip urpf to display uRPF configuration.


display ip urpf [ slot slot-number ]


Any view

Predefined user roles




slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays uRPF configuration for all member devices.


# Display uRPF configuration for the specified slot.

<Sysname> display ip urpf slot 1

Global uRPF configuration information(failed):

   Check type: strict

   Allow default route

# Display uRPF configuration on the specified interface.

<Sysname> display ip urpf interface vlan-interface 10 slot 1

uRPF configuration information of interface Vlan-interface10(failed):

   Check type: loose

   Allow default route

   Suppress drop ACL: 2000

Table 1 Command output




The system failed to deliver the uRPF configuration to the forwarding chip because of insufficient chip resources.

This field is not displayed if the delivery is successful.

Check type

uRPF check mode: loose or strict.


ip urpf

Use ip urpf to enable uRPF.

Use undo ip urpf to disable uRPF.


ip urpf { loose [ allow-default-route ] [ acl acl-number ] | strict [ allow-default-route ] [ acl acl-number ] [ link-check ] }

undo ip urpf


uRPF is disabled.


System view

Predefined user roles



loose: Enables loose uRPF check. To pass loose uRPF check, the source address of a packet must match the destination address of a FIB entry.

strict: Enables strict uRPF check. To pass strict uRPF check, the source address and receiving interface of a packet must match the destination address and output interface of a FIB entry. You can enable strict uRPF check only in VLAN interface view.

Usage guidelines

uRPF can be deployed on a PE connected to a CE or an ISP, or on a CE.


# Enable strict uRPF check globally.

<Sysname> system-view

[Sysname] ip urpf strict

# Configure loose uRPF check on VLAN-interface 10.

<Sysname> system-view

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] ip urpf loose

Related commands

display ip urpf