HP 10500 series, Security Configuration Manual

Page: 469 / 596

455
{
If no, IPv6 uRPF discards the packet. A non-unicast source address matches a non-unicast
route.
3. IPv6 uRPF checks whether the matching route is to the host itself:
{
If yes, the output interface of the matching route is an InLoop interface. IPv6 uRPF checks
whether the receiving interface of the packet is an InLoop interface. If yes, IPv6 uRPF
permits the packet. If no, IPv6 uRPF discards the packet. If the source address is a link-local
address and is the receiving interface address, the packet is discarded.
{
If no, IPv6 uRPF proceeds to step 4.
4. IPv6 uRPF checks whether the receiving interface matches the output interface of the matching
FIB entry:
{
If yes, IPv6 uRPF proceeds to step 5.
{
If no, IPv6 uRPF checks whether the check mode is loose. If yes, IPv6 uRPF proceeds to
step 5. If no, IPv6 uRPF discards the packet.
5. IPv6 uRPF checks whether the matching route is a default route:
{
If yes, IPv6 uRPF checks whether the allow-default-route keyword is configured to allow
using the default route. If yes, the packet is forwarded. If no, the packet is discarded.
{
If no, IPv6 uRPF forwards the packet.
Network application
Figure 138 Network diagram
As shown in Figure 138 , strict IPv6 uRPF check is configured between an ISP network and a
customer network. Loose IPv6 uRPF check is configured between ISPs.
ISP A
IPv6 uRPF (loose)
IPv6 uRPF (strict)
ISP C
ISP B
User