Configuring an ssh user, Displaying and maintaining urpf, Urpf configuration example – H3C Technologies H3C S12500-X Series Switches User Manual
Page 250
238
Step Command
Remarks
2.
Enable uRPF globally.
ip urpf { loose | strict }
By default, uRPF is disabled.
144B
Displaying and maintaining uRPF
Execute display commands in any view.
Task Command
Display uRPF configuration (in standalone
mode).
display ip urpf [ slot slot-number ]
Display uRPF configuration (in IRF mode).
display ip urpf [ chassis chassis-number slot slot-number ]
145B
uRPF configuration example
545B
Network requirements
As shown in
938H
Figure 78
, a client (Switch A) directly connects to an ISP switch (Switch B). Enable strict uRPF
check on Switch A and Switch B to prevent source address spoofing attacks.
Figure 78 Network diagram
546B
Configuration procedure
1.
Enable strict uRPF check on Switch A.
<SwitchA> system-view
[SwitchA] ip urpf strict
2.
Enable strict uRPF check on Switch B.
<SwitchB> system-view
[SwitchB] ip urpf strict