(Optional) Enabling URPF for PPP Users
Enabling URPF for PPP users prevents source address spoofing attacks.
Procedure
- Enable the function in the virtual template view :
- Run system-view
The system view is displayed.
- Run interface virtual-template virtual-template-number
A virtual template is created and the virtual template view is displayed.
- Run ipv6 urpf strict enable [ check subnet ] command
IPv6 URPF for PPPoE users is enabled.
- Run commit
The configuration is committed.
Verifying the Configuration
- Run display ppp-user urpf discard statistics command to check the number of URPF-dropped PPPoE user packets.