IP Spoofing

Hi WDNJSQ,

Firewall defend IP-spoofing enable

This command protects against single processing packets to connect to the server and perform unauthorized actions on it. if only certain IP addresses are allowed to connect to a certain server, which was previously connected to it (their routing through the firewall has already been done, and the firewall has recorded these routes). If a new host assigns itself to the IP address of the trusted host and tries to connect to the server, the packet will be discarded.

Please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100092598&id=EN-US_TASK_0178924091&lang=en

https://support.huawei.com/hedex/hdx.do?docid=EDOC1100092598&id=EN-US_CLIREF_0178918335&lang=en

IP urpf strict/loose

This command protects against multiple packets that can harm the destination host to disable it (lead to denial of service).

Please refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100092598&id=EN-US_CONCEPT_0178938699&lang=en

Conclusion:

Each of these teams carries a certain protection function. To protect against all unauthorized packages, you must configure both commands. However, it should be understood that if the authorization host is connected to the server for the first time, it is necessary to write a route on the firewall for it.

I hope it helps!