Enabling uRPF check on PE ports

To enable uRPF check, PE ports must be part of a VE interface. You cannot configure uRPF on physical PE ports.

You must enable uRPF globally using the reverse-path-check command before configuring uRPF on PE ports.

Enter VLAN configuration mode.

device(config)# vlan 460
device(config-vlan-460)#

Add tagged port 17/1/33 to port-vlan 460.

device(config-vlan-460)# tagged ethernet 17/1/33

Enter the router-interface command to create virtual interface 460.

device(config-vlan-460)# router-interface ve 460
        device(config-vlan-460)# interface ve 460

Enter the rpf-mode strict command.
```
device(config-vif-460)# rpf-mode strict
```
The other RPF modes that you can configure are rpf-mode loose, rpf-more strict exclude default, and rpf-mode loose exclude default.

Enter the show run interface ve command to verify the RPF mode configured on the device.

device(config-vif-460)# show run interface ve 460
    interface ve 460
    rpf-mode strict
    !