Filter
Top Products
DES-7200 Configuration Guide Chapter 6 URPF Configuration
6-13
DES-7200(config)# interface gigabitEthernet0/1
DES-7200(config-if)# no switchport
DES-7200(config-if)# ip address 195.52.1.1 255.255.255.0
DES-7200(config-if)# ip verify unicast source reachable-via rx
DES-7200(config-if)# ip verify urpf drop-rate notify
The configurations to enable URPF strict mode are same on interface G0/2 of
DES-7200-A and G0/1 and G0/2 of DES-7200-B.
6.4.1.4 Verification
# Check URPF configurations of device DES-7200-A
DES-7200 #show ip urpf interface gigabitEthernet 0/1
IP verify source reachable-via RX
IP verify URPF drop-rate notify enabled
IP verify URPF notification threshold is 1000pps
Number of drop packets in this interface is 124
Number of drop-rate notification counts in this interface is 0
6.4.2 Example of loose
mode configuration
6.4.2.1 Networking requirements
The section of URPF loose mode describes the common application scenario of URPF loose
mode, including asymmetrical routing environment and multi-homed network environment.
This section describes the configurations of outlet device connecting ISP in the multi-homed
network as shown in Fig 3.
6.4.2.2 Network topology
See Fig 3: multi-homed network.
6.4.2.3 Configuration steps
As shown in Fig 3, on the outlet device of DES-7200-A in user network, in order
prevent invalid messages from attacking the interior user network, URPF loose mode