R0106-HP MSR Router Series Security Configuration Guide(V7)

425

Network application

Figure 130 Network diagram

• Configure strict uRPF check between an ISP network and a customer network, and loose uRPF check

between ISPs.

• Configure ACLs for special packets or users.

Configuring uRPF

When you configure uRPF, follow these guidelines:

• uRPF checks only incoming packets on an interface.

• You can use the display ip interface command to display statistics about packets discarded by uRPF

(displayed as "Drops" and "Suppressed drops").

• Do not configure the allow-default-route keyword for loose uRPF check. Otherwise, uRPF might fail

to work.

To enable uRPF on an interface:

Ste

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enter interface view.

interface interface-type

interface-number

N/A

ISP A

uRPF (loose)

uRPF (strict)

ISP C

ISP B

User