validate-list enable

Function

The validate-list enable command enables a device to verify source IP addresses mapped to a specified destination IP address.

The undo validate-list enable command disables a device from verifying source IP addresses mapped to a specified destination IP address.

By default, this function is disabled.

Format

validate-list enable

undo validate-list enable

Parameters

None

Views

MPLS-in-UDP-list view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
mplsinudp	write

Usage Guidelines

Usage Scenario

Source address verification secures MPLS-in-UDP tunnels. After the validate-list enable command is run and the device receives an MPLS-in-UDP packet, the device verifies the source IP address. The device discards the packet if the verification fails.

Example

# Enable a device to verify source IP addresses mapped to a specified destination IP address.

<HUAWEI> system-view
[~HUAWEI] mpls-in-udp
[*HUAWEI-mpls-in-udp] source-ip-validate list destination-ip 1.1.1.1
[*HUAWEI-mpls-in-udp-list-1.1.1.1] validate-list enable