R0106-HP MSR Router Series Security Configuration Guide(V7)

432
Configuring IPv6 uRPF
When you configure IPv6 uRPF, follow these restrictions and guidelines:
• IPv6 uRPF checks only incoming packets on an interface.
• You can use the display ipv6 interface command to display statistics about packets discarded by
IPv6 uRPF (displayed as "Drops" and "Suppressed drops").
• Do not configure the allow-default-route keyword for loose IPv6 uRPF check. Otherwise, IPv6 uRPF
might fail to work.
To enable IPv6 uRPF on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Enable IPv6 uRPF on the
interface.
ipv6 urpf { loose | strict }
[ allow-default-route ] [ acl
acl-number ]
By default, uRPF is disabled.
Displaying and maintaining IPv6 uRPF
Execute display commands in any view.
Task Command
Display IPv6 uRPF configuration
(MSR2000/MSR3000).
display ipv6 urpf [ interface interface-type interface-number ]
Display IPv6 uRPF configuration (MSR4000).
display ipv6 urpf [ interface interface-type interface-number ]
[ slot slot-number ]
IPv6 uRPF configuration example
Network requirements
As shown in Figure 135, configure strict IPv6 uRPF check on GigabitEthernet 2/1/1 of Router B and
permit packets from network 1010::/64.
Configure strict IPv6 uRPF check on GigabitEthernet 2/1/1 of Router A and allow using the default route
for IPv6 uRPF check.
Figure 135 Network diagram
Configuration procedure
1. Configure Router B: