Network application
Figure 127 Network diagram
Configure strict URPF between each ISP and its connected users, and loose URPF between ISPs.
Configuring URPF
To configure URPF globally:
Step
1.
Enter system view.
2.
Enable URPF check globally.
NOTE:
The routing table size decreases by half when URPF is enabled on HP 3600 v2 Switch Series.
•
To prevent loss of routes and packets, URPF cannot be enabled if the number of route entries the switch
•
maintains exceeds half the routing table size.
URPF configuration example
Network requirements
As shown in
check on Switch A and Switch B to prevent source address spoofing attacks.
Command
Figure
128, a client (Switch A) directly connects to the ISP switch (Switch B). Enable URPF
system-view
ip urpf { loose | strict }
400
Remarks
N/A
Disabled by default