Filter
Top Products
DES-7200 Configuration Guide Chapter 6 URPF Configuration
6-14
is enabled on G3/1 and G3/2 connecting two ISPs, so as to isolate invalid messages
outside the user network.
# Configurations of device DES-7200-A:
DES-7200# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)# interface gigabitEthernet3/1
DES-7200(config-if)# ip address 195.52.1.2 255.255.255.252
DES-7200(config-if)# ip verify unicast source reachable-via any
DES-7200(config-if)# ip verify urpf drop-rate notify
DES-7200(config-if)# exit
DES-7200(config)# interface gigabitEthernet3/2
DES-7200(config-if)# ip address 152.95.1.2 255.255.255.252
DES-7200(config-if)# ip verify unicast source reachable-via any
DES-7200(config-if)# ip verify urpf drop-rate notify
DES-7200(config-if)# end
6.4.2.4 Verification
# Check URPF configurations of device DES-7200-A
DES-7200 #show ip urpf
IP verify URPF drop-rate compute interval is 300s
IP verify URPF drop-rate notify hold-down is 300s
Interface gigabitEthernet3/1
IP verify source reachable-via ANY
IP verify URPF drop-rate notify enabled
IP verify URPF notification threshold is 1000pps
Number of drop packets in this interface is 4121
Number of drop-rate notification counts in this interface is 2
Interface gigabitEthernet3/2
IP verify source reachable-via ANY
IP verify URPF drop-rate notify enabled
IP verify URPF notification threshold is 1000pps
Number of drop packets in this interface is 352
Number of drop-rate notification counts in this interface is 0