- 积分
- 439
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 最后登录
- 1970-1-1
- 阅读权限
- 30
- 听众
- 收听
初级工程师
  
|
发表于 2017-6-10 16:31:48
|
显示全部楼层
首先是松散模式
. |/ z9 h0 Z/ }% l4 F# W
' f. G$ U* e1 W8 v6 I& y3 ]: DThe any option enables a Loose Mode uRPF on the router. 3 _# m' e. W5 G8 X8 ]- [' T
Y: ?- n, w! }! {# u' W" I8 ]1.This mode allows the router to reach the source address via any interface.5 T& ^/ X$ b6 z+ P9 O1 ?* ~
( b" n$ I( Z: d/ D+ ?6 B: [2.only check if the router has a matching entry for the source in the routing table
& C, E, f! P5 [8 | T
( X) i5 U9 {7 ~9 [$ x1 }3.In loose mode each incoming packet's source address is tested against the FIB. The packet is dropped only if the source address is not reachable via any interface on that router." x: n: W* }& E- z+ m
' j+ g4 n2 I, }+ a- p下面是严格模式$ O3 H. i7 V3 y* Z( M
2 u5 [. @1 k3 r# C- l! Z, n
The rx option enables a Strict Mode uRPF on the router. * D$ N- G; S. q& U0 h, p* e' z1 ~
6 z) v$ E2 t0 Y+ Y( z
1.This mode ensures that the router reaches the source address only via the interface on which the packet was received.
. A$ t; H$ Q) G: n, e& j" P$ L, g" T" F- F+ e* }
2.router will perform two checks for all incoming packets on a certain interface. 7 l+ H( P2 [5 h+ S( o% R
: D% S8 s$ ?& Y3.First check is if the router has a matching entry for the source in the routing table.
3 t3 ^1 I7 b% ~4 i$ Q" e4 N! b0 _! n: x0 R
4.Second check is if the router uses the same interface to reach this source as where it received this packet on.
! d4 d% Z' g7 h+ r8 _" c6 N* k+ v; d
5.In strict mode each incoming packet is tested against the FIB and if the incoming interface is not the best reverse path the packet check will fail. By default failed packets are discarded.
2 D7 E6 u0 P% t0 A. G# X! W7 Q- M5 {. i
区分概念主要是这些,不知道拖图里面有几项,楼主能否还可以想起来 |
6#
2017-6-10 16:31:48
回复(0)
收起回复
|