No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CX11x, CX31x, CX710 (Earlier Than V6.03), and CX91x Series Switch Modules V100R001C10 Configuration Guide 13

The documents describe the configuration of various services supported by the CX11x&CX31x&CX91x series switch modules The description covers configuration examples and function configurations.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Examples

Configuration Examples

This section provides several URPF configuration examples, including networking requirements and configuration roadmap.

Example for Configuring URPF

Networking Requirements

As shown in Figure 12-59, the Switch Module is connected to the Internet Service Provider (ISP) router through 10GE1/17/1 and connected to user networks through 10GE2/17/1.The administrator hopes that the Switch Module can defend against source address spoofing attacks. If the Switch Module cannot provide this function, unauthorized users will occupy too many service resources by sending valid service requests, and authorized users cannot communicate with each other due to no response.

Figure 12-59 Networking diagram of URPF configuration

Configuration Roadmap

Configure URPF on the user-side interface 10GE2/17/1 of the device and to prevent source IP address spoofing attacks from users.

Route symmetry is ensured in this example, so the URPF strict check is used.

Procedure

  1. Configure the URPF check mode on the interface.

    <HUAWEI> system-view
    [~HUAWEI] sysname Switch
    [*HUAWEI] commit
    [~Switch] interface 10ge 2/17/1
    [*Switch-10GE2/17/1] ip urpf enable
    [*Switch-10GE2/17/1] ip urpf strict
    [*Switch-10GE2/17/1] commit
    [~Switch-10GE2/17/1] quit
    

  2. Verify the configuration.

    Run the display this command on 10GE2/17/1 to check the URPF configuration.

    [~Switch-10GE2/17/1] display this
    #
    interface 10GE2/17/1
     ip urpf enable   
     ip urpf strict
    #
    return 

Configuration Files

Configuration file of Switch

#
sysname Switch
#
interface 10GE2/17/1
 ip urpf enable   
 ip urpf strict
#
return 
Translation
Download
Updated: 2019-12-13

Document ID: EDOC1000041694

Views: 59973

Downloads: 3623

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next