Configure Reverse Path Checking on a VLAN
Before you begin
Before you can configure reverse path checking on a VLAN, you must assign a valid IP address to the selected VLAN.
About this task
Configure reverse path checking on a VLAN to determine if a packet IP address is verifiable. Use reverse path checking to reduce the problems that are caused by the introduction of malformed or forged (spoofed) IP source addresses into a network. After you enable reverse path checking, the switch performs a reverse path check to determine if the packet IP address is verifiable. If the address is not verifiable, the system discards the packet.
Reverse path checking operates in one of two modes:
exist-only mode
strict mode
Procedure
- In the navigation pane, expand .
- Select VLANs.
- Select the Basic tab.
- Select the VLAN on which you want to configure reverse path checking.
- Select IP.
- Select the Reverse Path Checking tab.
- Select Enable to enable reverse path checking.
- Select exist-only or strict.
- Select Apply.
Reverse Path Checking Field Descriptions
Use the data in the following table to use the Reverse Path Checking tab.
Name | Description |
---|---|
Enable | Enables reverse path checking on the selected VLAN. |
Mode | Specifies the mode for reverse path checking. The modes are
The default is exist-only. |