Enabling Source Address Validation

Source address validation verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the router performs a routing table lookup using the source address. The result from the routing table lookup is an interface to which packets destined for that address are routed. This interface must match the interface on which the packet arrived. If it does not match, the router drops the packet.

ip sa-validate

• Use to enable source address validation.
• Example

  host1(config-if)#ip sa-validate

• Use the no version to disable source address validation.
• See ip sa-validate

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.