ip sa-validate

Syntax

[ no ] ip sa-validate

Release Information

Command introduced before JunosE Release 7.1.0.

Description

Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the router performs a routing table lookup using the source address. The result from the routing table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the router drops the packet. By default, validation of IP source addresses is disabled for the particular interface or profile. The no version disables source address validation.

Mode

Interface Configuration, Profile Configuration