Ip Pim Accept-Register - Cisco Catalyst 3650 series Command Reference Manual

ip pim accept-register

ip pim accept-register
To configure a candidate rendezvous point (RP) switch to filter Protocol Independent Multicast (PIM) register
messages, use the ip pim accept-register command in global configuration mode. To disable this function,
use the no form of this command.
ip pim [vrf vrf-name ] accept-register {list access-list}
no ip pim [vrf vrf-name ] accept-register
Syntax Description
vrf vrf-name
list access-list
Command Default
No PIM register filters are configured.
Command Modes
Global configuration
Command History
Release
Cisco IOS XE 3.3SE
Usage Guidelines
Use this command to prevent unauthorized sources from registering with the RP. If an unauthorized source
sends a register message to the RP, the RP will immediately send back a register-stop message.
The access list provided for the ip pim accept-register command should only filter on IP source addresses
and IP destination addresses. Filtering on other fields (for example, IP protocol or UDP port number) will not
be effective and may cause undesired traffic to be forwarded from the RP down the shared tree to multicast
group members. If more complex filtering is desired, use the ip multicast boundary command instead.
Examples The following example shows how to permit register packets for any source address sending to any group
range, with the exception of source address 172.16.10.1 sending to the SSM group range (232.0.0.0/8). These
are denied. These statements should be configured on all candidate RPs because candidate RPs will receive
PIM registers from first hop routers or switches.
Device(config)# ip pim accept-register list ssm-range
Device(config)# ip access-list extended ssm-range
Device(config-ext-nacl)# deny ip any 232.0.0.0 0.255.255.255
Device(config-ext-nacl)# permit ip any any
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
232
(Optional) Configures a PIM register filter on candidate RPs for (S, G) traffic
associated with the multicast Virtual Private Network (VPN) routing and forwarding
(MVRF) instance specified for the vrf-name argument.
Specifies the access-list argument as a number or name that defines the (S, G) traffic
in PIM register messages to be permitted or denied. The range is 100 to 199 and an
expanded range of 2000 to 2699. An IP-named access list can also be used.
Modification
This command was introduced.