Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Example: Configuring RPF Policies

Requirements

Before you begin:

• Configure the router interfaces. See the Junos® OS Network Interfaces.
• Configure an interior gateway protocol or static routing. See the Junos OS Routing Protocols Configuration Guide.

Overview

An RPF policy behaves like an import policy. If no policy term matches the input packet, the default action is to accept (that is, to perform the RPF check). The route-filter statement filters group addresses, and the source-address-filter statement filters source addresses.

This example shows how to configure each condition as a separate policy and references both policies in the rpf-check-policy statement. This allows you to associate groups in one policy and sources in the other.

Note: Be careful when disabling RPF checks on multicast traffic. If you disable RPF checks in some configurations, multicast loops can result.

Changes to an RPF check policy take effect immediately:

• If no policy was previously configured, the policy takes effect immediately.
• If the policy name is changed, the new policy takes effect immediately and any packets no longer filtered are subjected to the RPF check.
• If the policy is deleted, all packets formerly filtered are subjected to the RPF check.
• If the underlying policy is changed, but retains the same name, the new conditions take effect immediately and any packets no longer filtered are subjected to the RPF check.

Configuration

CLI Quick Configuration

To quickly configure this example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Step-by-Step Procedure

1. Configure a policy for group addresses.

   [edit policy-options]user@host# set policy-statement disable-RPF-for-group term first from route-filter 228.0.0.0/8 orlongeruser@host# set policy-statement disable-RPF-for-group term first then reject

2. Configure a policy for a source address.

   [edit policy-options]user@host# set policy-statement disable-RPF-for-source term first from source-address-filter 192.168.25.6/32 exactuser@host# set policy-statement disable-RPF-for-source term first then reject

3. Apply the policies.

   [edit routing-options]user@host# set multicast rpf-check-policy [ disable-RPF-for-group disable-RPF-for-source ]

4. If you are done configuring the device, commit the configuration.

   user@host# commit

Results

Confirm your configuration by entering the show policy-options and show routing-options commands.

Verification

To verify the configuration, run the show multicast rpf command.