Checking The Configuration; Configuring Pim Silent; Establishing The Configuration Task - Huawei Quidway s3700 series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Multicast

6.9.3 Checking the Configuration

After the control parameters for assert are adjusted, you can check information about the PIM
interface and the PIM routing table and statistics about PIM control messages through
commands.
Procedure
l
l
l
----End

6.10 Configuring PIM Silent

The interface directly connecting a multicast device to a user host needs to be enabled with PIM.
In this case, some malicious hosts may simulate a large number of PIM Hello messages and send
the messages to the interface for processing. As a result, the multicast device is suspended. To
avoid the preceding case, you can set the interface to be in the PIM Silent state.

6.10.1 Establishing the Configuration Task

After basic functions of PIM-DM and IGMP are configured, you can configure the PIM silent
function on the interface connected with the user host. This interface should be enabled with
PIM-DM and IGMP first.
Applicable Environment
On the access layer, the interface directly connected to hosts needs to be enabled with PIM. You
can set up the PIM neighbor relationship on the interface to process various PIM packets. The
configuration, however, has the security vulnerability. When a host maliciously generates PIM
Hello messages and sends many packets to a switch, the switch may fail.
Issue 01 (2011-10-26)
Run the display pim interface [ interface-type interface-number | up | down ]
[ verbose ] command to check PIM on an interface.
Run the display pim control-message counters [ message-type { assert | hello | join-
prune | state-refresh | } | interface interface-type interface-number ]
the number of sent or received PIM control messages.
Run the following commands to check the PIM routing table.
– display pim routing-table [ group-address [ mask { group-mask-length | group-
mask } ] | source-address [ mask { source-mask-length | source-mask } ] | incoming-
interface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | register | none } |
mode { sm | ssm } | flags flag-value | fsm ]
[ number ] ]
– display pim routing-table [ group-address [ mask { group-mask-length | group-
mask } ] | source-address [ mask { source-mask-length | source-mask } ] | incoming-
interface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | register | none } |
mode { sm | ssm } | flags flag-value | fsm ]
[ number ] ]
– display pim routing-table [ group-address [ mask { group-mask-length | group-
mask } ] | source-address [ mask { source-mask-length | source-mask } ] | incoming-
interface { interface-type interface-number | register } ]
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 PIM-DM (IPv4) Configuration
*
*
[ outgoing-interface-number
*
[ outgoing-interface-number
*
command to check
124