ON THIS PAGE
rpf-check
Syntax (MX Series, SRX Series, M Series, T Series, PTX Series)
rpf-check {
fail-filter filter-name;
mode (strict | loose);
}
Syntax (ACX7k Series)
rpf-check {
fail-filter filter-name;
mode (loose);
}Syntax (EX Series and QFX Series)
rpf-check;
Hierarchy Level (MX Series, SRX Series, M Series, T Series, PTX Series)
[edit interfaces interface-name unit logical-unit-number family inet], [edit interfaces interface-name unit logical-unit-number family inet6], [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family inet], [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family inet6]
Hierarchy Level (EX Series and QFX Series)
[edit interfaces interface-name unit logical-unit-number family inet], [edit interfaces interface-name unit logical-unit-number family inet6]
Description
Enable a reverse-path forwarding (RPF) check on unicast traffic.
On EX3200 and EX4200 switches, enable a reverse-path forwarding (RPF) check on unicast traffic (except ECMP packets) on all ingress interfaces.
On EX4300 switches, enable a reverse-path forwarding (RPF) check on unicast traffic, including ECMP packets, on all ingress interfaces.
On EX8200 and EX6200 switches, enable an RPF check on unicast traffic, including ECMP packets, on the selected ingress interfaces.
On MX204 and ACX7k devices, strict is the default mode unless you
over-ride it by setting the option to loose.
On QFX Series switches, enable an RPF check on unicast traffic on the selected ingress interfaces. ECMP packets are checked by QFX5000 Series switches only.
The mode statement is explained separately.
Default
Unicast RPF is disabled on all interfaces.
Options
fail-filter—A filter to evaluate
when packets are received on the interface. If the RPF check fails,
this optional filter is evaluated. If the fail filter is not configured,
the default action is to silently discard the packet.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.
Support for interface ps0 (pseudowire subscriber
logical interface device) added in Junos OS Release 15.1.