The checkspoof feature verifies that the source address of the packet received on the interface is reachable from the receiving interface or any interface depending upon the checkspoof configuration. This feature helps protect against attacks where the source of the attack is unknown to the router. The checkspoof feature can be configured on any interface.
Use the ip checkspoof or ipv6 checkspoof command in tunnel configuration mode to configure checkspoofing on the tunnel interface for the specified IP type.
See the Routing Interface Commands section of the S-, K-, and 7100 Series CLI Reference Guide for details on the ip checkspoof command and the IPv6 Interface Commands sectcion of the S-, K-, and 7100 Series CLI Reference Guide for details on the ipv6 checkspoof command.