Specifications

IP Switching Commands
ip verify unicast vrf
ISW-73
Cisco IOS IP Switching Command Reference
May 2008
ip verify unicast vrf
To enable Unicast Reverse Path Forwarding (Unicast RPF) verification for a specified VRF, use the ip
verify unicast vrf command in interface configuration mode. To disable the Unicast RPF check for a
VRF, use the no form of this command.
ip verify unicast vrf vrf-name {deny | permit}
no ip verify unicast vrf vrf-name {deny | permit}
Syntax Description
Command Default Unicast RPF verification is disabled.
Command Modes Interface configuration
Command History
Usage Guidelines Unicast RPF is configured to verify that the source address is in the Forwarding Information Base (FIB).
The ip verify unicast vrf command is configured in interface configuration mode and is enabled for each
VRF. This command has permit and deny keywords that are used to determine if traffic is forwarded or
dropped after Unicast RPF verification.
Examples The following example configures Unicast RPF verification for VRF GREEN and RED. VRF GREEN
traffic is forwarded. VRF RED traffic is dropped.
Router(config)# interface Ethernet 0
Router(config-if)# ip verify unicast vrf GREEN permit
Router(config-if)# ip verify unicast vrf RED deny
Router(config-if)# end
vrf-name Virtual Private Network (VPN) routing/forwarding (VRF) instance name.
deny Specifies that traffic associated with the specified VRF is dropped after it
passes the Unicast RPF verification.
permit Specifies that traffic associated with the specified VRF is forwarded after it
passes the Unicast RPF verification.
Release Modification
12.0(29)S This command was introduced.
12.2(25)S This command was integrated into Cisco IOS Release 12.2(25)S.
12.3(14)T This command was integrated into Cisco IOS Release 12.3(14)T.
12.2(28)SB This command was integrated into Cisco IOS Release 12.2(27)SBC.
12.2(33)SRA This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2(33)SXH This command was integrated into Cisco IOS Release 12.2(33)SXH.