Configure Unicast RPF on a VPN

You can configure unicast RPF on a VPN interface by enabling unicast RPF on the interface and including the interface statement at the [edit routing-instances routing-instance-name] hierarchy level.

You can configure unicast RPF only on the interfaces you specify in the routing instance. This means the following:

• For Layer 3 VPNs, unicast RPF is supported on the CE router interface.
• Unicast RPF is not supported on core-facing interfaces.
• For virtual-router routing instances, unicast RPF is supported on all interfaces you specify in the routing instance.
• If an input filter forwards packets anywhere other than the routing instance the input interface is configured for, the unicast RPF check is not performed.

For unicast RPF configuration guidelines, see Configure Unicast RPF. For more information about VPNs and virtual-router routing instances, see the JUNOS Internet Software VPNs Configuration Guide. For more information about filter-based forwarding (FBF), see the JUNOS Internet Software Routing Protocols Configuration Guide.

Example: Configure Unicast RPF on a VPN

Configure unicast RPF on a Layer 3 VPN interface:

[edit interfaces] 

so-0/0/0 {

    unit 0 {

        family inet {

            rpf-check;

        }

    }

}

[edit routing-instance]

VPN-A {

    interface so-0/0/0.0;

}