Configuring Unicast RPF for IPv6

This section contains payload examples and CLIs to demonstrate how to use the NX-API REST API to configure Unicast RPF on Cisco Nexus 3000 and 9000 Series switches and to show how the REST APIs correspond to the CLI commands. For more information, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide.

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-installation-and-configuration-guides-list.html/

Configuring Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9500 Series Switch with an -R Line Card

Configuring Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9500 Series Switch with an -R Line Card

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/1",
                              "urpf": "loose"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

{
    imdata:[]
}

<System>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/1</id>
              <urpf>loose</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.

interface Ethernet2/1
ipv6 address 2001:0DB8:c18:1::3/64
ipv6 verify unicast source reachable-via any

Note: The property information for this example was added in Release 9.3(3).

Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.

MO	DN
topSystem	sys
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

ipv6Dom Properties

The following table contains information about the ipv6Dom properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

The following table contains information about the ipv6If properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

The following table contains information about the ipv6Addr properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Disabling Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9500 Series Switch with an -R Line Card

Disabling Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9500 Series Switch with an -R Line Card

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/1",
                              "urpf": "disabled"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

{
    imdata:[]
}

<System>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/1</id>
              <urpf>disabled</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

interface Ethernet2/1
ipv6 address 2001:0DB8:c18:1::3/64
no ipv6 verify unicast source reachable-via any

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Configuring Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

Configuring Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

POST http://<mgmt0_IP>/api/mo/sys.json

{
{
  "topSystem": {
    "children": [
      {
        "platformEntity": {
          "attributes": {
            "urpfStatus": "disabled"
          }
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/1",
                              "urpf": "loose"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

{
    imdata:[]
}

<System>
  <pltfm-items>
    <urpfStatus>disabled</urpfStatus>
  </pltfm-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/1</id>
              <urpf>loose</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

system urpf disable
interface Ethernet2/1
ipv6 address 2001:0DB8:c18:1::3/64
ipv6 verify unicast source reachable-via any

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
platformEntity	sys/pltfm
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

platformEntity Properties

The following table contains information about the platformEntity properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.

Property Name	Data Type	Description	Values
urpfStatus	nw:AdminSt (scalar:Enum8)	Unicast Reverse Path Forwarding Status	SELECTION: 1 - enabled 2 - disabled DEFAULT: enabled

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Disabling Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

Disabling Loose Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "platformEntity": {
          "attributes": {
            "urpfStatus": "disabled"
          }
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/1",
                              "urpf": "disabled"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

{
    imdata:[]
}

<System>
  <pltfm-items>
    <urpfStatus>disabled</urpfStatus>
  </pltfm-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/1</id>
              <urpf>disabled</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

system urpf disable
interface Ethernet2/1
ipv6 address 2001:0DB8:c18:1::3/64
no ipv6 verify unicast source reachable-via any

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
platformEntity	sys/pltfm
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

platformEntity Properties

Property Name	Data Type	Description	Values
urpfStatus	nw:AdminSt (scalar:Enum8)	Unicast Reverse Path Forwarding Status	SELECTION: 1 - enabled 2 - disabled DEFAULT: enabled

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Configuring Strict Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

Configuring Strict Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "platformEntity": {
          "attributes": {
            "urpfStatus": "disabled"
          }
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/4",
                              "urpf": "strict"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

Response

{
    imdata:[]
}

{
    imdata:[]
}

<System>
  <pltfm-items>
    <urpfStatus>disabled</urpfStatus>
  </pltfm-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/4</id>
              <urpf>strict</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

system urpf disable
interface Ethernet2/4
ipv6 address 2001:0DB8:c18:1::3/64
ipv6 verify unicast source reachable-via rx

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
platformEntity	sys/pltfm
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

platformEntity Properties

Property Name	Data Type	Description	Values
urpfStatus	nw:AdminSt (scalar:Enum8)	Unicast Reverse Path Forwarding Status	SELECTION: 1 - enabled 2 - disabled DEFAULT: enabled

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Disabling Strict Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

Disabling Strict Unicast RPF for IPv6 Packets on a Cisco Nexus 9300 Series Switch

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "platformEntity": {
          "attributes": {
            "urpfStatus": "disabled"
          }
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth2/4",
                              "urpf": "disabled"
                            },
                            "children": [
                              {
                                "ipv6Addr": {
                                  "attributes": {
                                    "addr": "2001:db8:c18:1::3/64"
}}}]}}]}}]}}]}}]}}

{
    imdata:[]
}

<System>
  <pltfm-items>
    <urpfStatus>disabled</urpfStatus>
  </pltfm-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth2/4</id>
              <urpf>disabled</urpf>
              <addr-items>
                <Addr-list>
                  <addr>2001:db8:c18:1::3/64</addr>
                </Addr-list>
              </addr-items>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

system urpf disable
interface Ethernet2/4
ipv6 address 2001:0DB8:c18:1::3/64
no ipv6 verify unicast source reachable-via rx

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
platformEntity	sys/pltfm
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}
ipv6Addr	sys/ipv6/inst/dom-{name}/if-{[id]}/addr-{[addr]}

platformEntity Properties

Property Name	Data Type	Description	Values
urpfStatus	nw:AdminSt (scalar:Enum8)	Unicast Reverse Path Forwarding Status	SELECTION: 1 - enabled 2 - disabled DEFAULT: enabled

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

ipv6Addr Properties

Property Name	Data Type	Description	Values
addr	address:Ip	Address	Value must match ipv4 or ipv6 known format

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Configuring the Source as Reachable via the Interface on Which a Packet was Received

Configuring the Source as Reachable via the Interface on Which a Packet was Received

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "interfaceEntity": {
          "children": [
            {
              "l1PhysIf": {
                "attributes": {
                  "id": "eth1/4",
                  "layer": "Layer3",
                  "userCfgdFlags": "admin_layer"
                }
              }
            }
          ]
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth1/4",
                              "urpf": "strict"
                            }
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    ]
  }
}

{
    "imdata": []
}

<System>
  <intf-items>
    <phys-items>
      <PhysIf-list>
        <id>eth1/4</id>
        <layer>Layer3</layer>
        <userCfgdFlags>admin_layer</userCfgdFlags>
      </PhysIf-list>
    </phys-items>
  </intf-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth1/4</id>
              <urpf>strict</urpf>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

interface ethernet 1/2
no switchport
ipv6 verify unicast source reachable-via rx

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
interfaceEntity	sys/intf
l1PhysIf	sys/intf/phys-{[id]}
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}

l1PhysIf Properties

The following table contains information about the l1PhysIf properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
layer	l1:Layer (scalar:Enum8)	Administrative port layer	SELECTION: 1 - Layer2 2 - Layer3 DEFAULT: Layer2
userCfgdFlags	l1:userCfgdFlags (scalar:Bitmask8)	Port User Config Flags	SELECTION: 0 - none 1 - admin_state 2 - admin_layer 4 - admin_router_mac 8 - admin_dce_mode 16 - admin_mtu DEFAULT: none

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Deleting a Source Configured as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

Deleting a Source Configured as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "interfaceEntity": {
          "children": [
            {
              "l1PhysIf": {
                "attributes": {
                  "id": "eth1/4",
                  "layer": "Layer3",
                  "userCfgdFlags": "admin_layer"
                }
              }
            }
          ]
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth1/4",
                              "urpf": "disabled"
                            }
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    ]
  }
}

{
    "imdata": []
}

<System>
  <intf-items>
    <phys-items>
      <PhysIf-list>
        <id>eth1/4</id>
        <layer>Layer3</layer>
        <userCfgdFlags>admin_layer</userCfgdFlags>
      </PhysIf-list>
    </phys-items>
  </intf-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth1/4</id>
              <urpf>disabled</urpf>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

interface ethernet 1/2
no switchport
no ipv6 verify unicast source reachable-via rx

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
interfaceEntity	sys/intf
l1PhysIf	sys/intf/phys-{[id]}
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}

l1PhysIf Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
layer	l1:Layer (scalar:Enum8)	Administrative port layer	SELECTION: 1 - Layer2 2 - Layer3 DEFAULT: Layer2
userCfgdFlags	l1:userCfgdFlags (scalar:Bitmask8)	Port User Config Flags	SELECTION: 0 - none 1 - admin_state 2 - admin_layer 4 - admin_router_mac 8 - admin_dce_mode 16 - admin_mtu DEFAULT: none

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Configuring the Source as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

Configuring the Source as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "interfaceEntity": {
          "children": [
            {
              "l1PhysIf": {
                "attributes": {
                  "id": "eth1/4",
                  "layer": "Layer3",
                  "userCfgdFlags": "admin_layer"
                }
              }
            }
          ]
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth1/4",
                              "urpf": "loose-allow-default"
                            }
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    ]
  }
}

{
    "imdata": []
}

<System>
  <intf-items>
    <phys-items>
      <PhysIf-list>
        <id>eth1/4</id>
        <layer>Layer3</layer>
        <userCfgdFlags>admin_layer</userCfgdFlags>
      </PhysIf-list>
    </phys-items>
  </intf-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth1/4</id>
              <urpf>loose-allow-default</urpf>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

interface ethernet 1/2
no switchport
ipv6 verify unicast source reachable-via any allow-default

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
interfaceEntity	sys/intf
l1PhysIf	sys/intf/phys-{[id]}
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}

l1PhysIf Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
layer	l1:Layer (scalar:Enum8)	Administrative port layer	SELECTION: 1 - Layer2 2 - Layer3 DEFAULT: Layer2
userCfgdFlags	l1:userCfgdFlags (scalar:Bitmask8)	Port User Config Flags	SELECTION: 0 - none 1 - admin_state 2 - admin_layer 4 - admin_router_mac 8 - admin_dce_mode 16 - admin_mtu DEFAULT: none

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html

Deleting a Source Configured as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

Deleting a Source Configured as Reachable Via Any Interface With Loose Default Route Unicast Reverse Path Forwarding

POST http://<mgmt0_IP>/api/mo/sys.json

{
  "topSystem": {
    "children": [
      {
        "interfaceEntity": {
          "children": [
            {
              "l1PhysIf": {
                "attributes": {
                  "id": "eth1/4",
                  "layer": "Layer3",
                  "userCfgdFlags": "admin_layer"
                }
              }
            }
          ]
        }
      },
      {
        "ipv6Entity": {
          "children": [
            {
              "ipv6Inst": {
                "children": [
                  {
                    "ipv6Dom": {
                      "attributes": {
                        "name": "default"
                      },
                      "children": [
                        {
                          "ipv6If": {
                            "attributes": {
                              "id": "eth1/4",
                              "urpf": "disabled"
                            }
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    ]
  }
}

{
    "imdata": []
}

<System>
  <intf-items>
    <phys-items>
      <PhysIf-list>
        <id>eth1/4</id>
        <layer>Layer3</layer>
        <userCfgdFlags>admin_layer</userCfgdFlags>
      </PhysIf-list>
    </phys-items>
  </intf-items>
  <ipv6-items>
    <inst-items>
      <dom-items>
        <Dom-list>
          <name>default</name>
          <if-items>
            <If-list>
              <id>eth1/4</id>
              <urpf>disabled</urpf>
            </If-list>
          </if-items>
        </Dom-list>
      </dom-items>
    </inst-items>
  </ipv6-items>
</System>

CLI Commands

interface ethernet 1/2
no switchport
no ipv6 verify unicast source reachable-via any allow-default

Note: The property information for this example was added in Release 9.3(3).

MO	DN
topSystem	sys
interfaceEntity	sys/intf
l1PhysIf	sys/intf/phys-{[id]}
ipv6Entity	sys/ipv6
ipv6Inst	sys/ipv6/inst
ipv6Dom	sys/ipv6/inst/dom-{name}
ipv6If	sys/ipv6/inst/dom-{name}/if-{[id]}

l1PhysIf Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
layer	l1:Layer (scalar:Enum8)	Administrative port layer	SELECTION: 1 - Layer2 2 - Layer3 DEFAULT: Layer2
userCfgdFlags	l1:userCfgdFlags (scalar:Bitmask8)	Port User Config Flags	SELECTION: 0 - none 1 - admin_state 2 - admin_layer 4 - admin_router_mac 8 - admin_dce_mode 16 - admin_mtu DEFAULT: none

ipv6Dom Properties

Property Name	Data Type	Description	Values
name	naming:Name256 (string:Basic)	The name of the object.	MAX SIZE: 63

ipv6If Properties

Property Name	Data Type	Description	Values
id	nw:IfId (base:IfIndex)	An identifier .	Must match first field in the output of `show intf brief`. Example: Eth1/1 or Vlan100
urpf	ip:UrpfT (scalar:Enum8)	IPv6 URPF Info	SELECTION: 0 - disabled 1 - strict 2 - loose 3 - loose-allow-default 4 - strict-allow-vni-hosts DEFAULT: disabled

Related Documentation

For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:

https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/

For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:

https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html