R21xx-HP FlexFabric 11900 Security Configuration Guide

141
{ Discards packets with an all-zero source address but a non-broadcast destination address. (A
packet with source address 0.0.0.0 and destination address 255.255.255.255 might be a
DHCP or BOOTP packet and cannot be discarded.)
{ Proceeds to step 2 for other packets.
2. uRPF checks whether the source address matches a FIB entry:
{ If yes, proceeds to step 3.
{ If not, proceeds to step 6.
3. uRPF checks whether the check mode is loose:
{ If yes, proceeds to step 8.
{ If not, uRPF checks whether the matching route is a direct route: if yes, proceeds to step 5. If not,
proceeds to step 4.
4. uRPF checks whether the receiving interface matches the output interface of the matching FIB entry:
{ If yes, proceeds to step 8.
{ If not, proceeds to step 9.
5. uRPF checks whether the source IP address matches an ARP entry:
{ If yes, proceeds to step 8.
{ If not, proceeds to step 9.
6. uRPF checks whether the FIB table has a default route:
{ If yes, proceeds to step 7.
{ If not, proceeds to step 9.
7. uRPF checks whether the check mode is loose:
{ If yes, proceeds to step 8.
{ If not, uRPF checks whether the output interface of the default route matches the receiving
interface of the packet: if yes, proceeds to step 8. If not, proceeds to step 9.
8. The packet passes the check and is forwarded.
9. The packet is discarded.