This read-create flag enables or disables source-address validation on an IP interface built from this profile, where the router looks up the packet's source IP in its routing table and checks that it arrived on the expected interface. Admins enable it, off by default, as an anti-spoofing measure, discarding packets whose source address wouldn't route back out the interface they actually arrived on. For example, enabling juniIpProfileSrcAddrValidEnable would cause the router to drop a packet whose source address the routing table says should arrive on a different interface, a classic reverse-path-forwarding check.