Enabling URPF on an Interface
Context
When configuring the URPF check function, you need to enable URPF on the interface.
For ED and EF cards:
If URPF is enabled on an interface in a card, and the IPv4 unicast routing entry specifications are configured in the external TCAM resource template bound to the card using the external tcam u4router upper-limit command, the external tcam urpf enable command must also be configured in this template to allocate external TCAM resources to the URPF function. Otherwise, the URPF function becomes unavailable on this card. After the external tcam urpf enable command has been configured, the actual IPv4 unicast routing entry specification is half of the configured value.
For EG-E cards:
If URPF is enabled on an interface in a card, and the IPv6 unicast routing entry specifications are configured in the external TCAM resource template bound to the card using the external tcam u6router upper-limit command, the external tcam urpf enable command must also be configured in this template to allocate external TCAM resources to the URPF function. Otherwise, the URPF function becomes unavailable on this card. After the external tcam urpf enable command has been configured, the actual IPv6 unicast routing entry specification is half of the configured value.
For FG and FG1 cards:
If URPF is enabled on an interface in a card, and the external TCAM resources used by IPv4/IPv6 services are configured in the external TCAM resource template bound to the card using the external tcam { u4router | u6router } enable command, the external tcam urpf enable command must also be configured in this template to assign external TCAM resources to the URPF function. Otherwise, the URPF function does not take effect on this card. After the configuration is complete, the actual IPv4/IPv6 unicast routing entry specifications will reduce.
For details, see Configuring the Resource Upper Limit of an External TCAM in the CloudEngine 12800 and 12800E Series Switches Configuration Guide - Device Management Configuration.
Procedure
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The interface view is displayed.
- On an Ethernet interface, run undo portswitch
The interface is switched to Layer 3 mode.
By default, an Ethernet interface works in Layer 2 mode.
If an Ethernet interface already has Layer 2 configuration, this command fails to be executed on the interface. Before running this command on the interface, delete all the Layer 2 configuration of the interface.
If many Ethernet interfaces need to be switched to Layer 3 mode, run the undo portswitch batch interface-type { interface-number1 [ to interface-number2 ] } &<1-10> command in the system view to switch these interfaces to Layer 3 mode in batches.
- Run ip urpf enable
URPF is enabled on the interface.
By default, URPF check is disabled on an interface.
- Run commit
The configuration is committed.