Chapter 21 IPv6 URPF Configuration
interface
<
interface-name
>: name of the interface where the IPv6 URPF function is
configured.
ignore-default-route
: It is only available for loose mode.
2.
Verify the configurations.
Command
Function
ZXR10#
show running-config urpf
[
all
]
Displays all the URPF configurations.
ZXR10#
show running-config-interface
<
interface-name
>[
all
]
Displays URPF configuration of a
specified interface.
– End of Steps –
21.3 IPv6 URPF Configuration Instances
21.3.1 Example: Configuring IPv6 URPF (Strict)
Configuration Description
As shown in
, strict URPF is configured for the interface gei-2/1 on R1, which
prevents the network users coming from the network segment before 1:1::ad:ea/64 from
attacking the network connecting to R1, and permits the data flow from the network
segment 1:11::ad:ea/64 to pass through URPF inspection.
Figure 21-1 Topology of IPv6 URPF Configuration Example (Strict)
Configuration Flow
1.
Configure IPv6 address for the interface.
2.
Create ACL, add the ACL matching requirements. For example, permit the traffic
coming from 1:11::ad:ea/64 to pass.
3.
Bind strict IPv6 URPF with ACL list to the interface.
Configuration Commands
The configuration of R1 is as follows:
R1(config)#interface gei-2/1
R1(config-if-gei-2/1)#no shutdown
R1(config-if-gei-2/1)#ipv6 enable
R1(config-if-gei-2/1)#ipv6 address 1:1::ad:ea/64
21-3
SJ-20140504150128-018|2014-05-10 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXR10 ZSR
Страница 12: ...This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 306: ...Figures This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 308: ...This page intentionally left blank VI SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...