R0106-HP MSR Router Series Security Configuration Guide(V7)
430
Figure 133 IPv6 uRPF work flow
1. IPv6 uRPF checks whether the received packet carries a multicast destination address:
{ If yes, permits the packet.
{ If no, proceeds to step 2.
2. IPv6 uRPF checks whether the source address matches a unicast route:
{ If yes, proceeds to step 3.
{ If no, proceeds to step 6. A non-unicast source address matches a non-unicast route.
3. IPv6 uRPF checks whether the matching route is to the host itself:
Checks the received
packet
Multicast
destination
address?
End
No
Uses source address to
look up the FIB table
No
Matching FIB
entry found?
InLoop interface
found?
Yes
Yes
InLoop receiving
interface?
No
Yes
Default route
found?
Do interfaces
match?
Loose check?
No
No
Yes
No
Yes
Default route
allowed?
Yes No
Yes
Discards the packet
No
Yes
Permitted by
ACL?
Yes
No