Optional) Configuring The Range Of Valid C-Rp Addresses; Checking The Configuration - Huawei Quidway s3700 series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Multicast

7.5.6 (Optional) Configuring the Range of Valid C-RP Addresses

ACL-based policies can be set on all C-BSRs to filter C-RP addresses and addresses of the groups
that the C-RPs serve. The BSR adds C-RP information to the RP-set only when the addresses
are in the set legal address range. Thus, C-RP spoofing is avoided.
Context
Do as follows on all the C-BSRs in the PIM-SM domain:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
pim
The PIM view is displayed.
Step 3 Run:
crp-policy advanced-acl-number
The range of the valid C-RP addresses and the range of the multicast group addresses that a
switch serves are specified. When receiving an Advertisement message, the switch checks the
C-RP address and the addresses of the groups that the C-RP serves in the message. The C-RP
address and the addresses of the groups that the C-RP serves are added to the RP-Set only when
they are in the valid address range. The C-RP spoofing can thus be prevented.
----End

7.5.7 Checking the Configuration

After the control parameters of C-RPs and C-BSRs are adjusted, you can check information
about the BSR and RP and check whether a BSR boundary is configured on the interface through
commands.
Procedure
l
l
----End
Issue 01 (2011-10-26)
NOTE
This configuration is optional. By default, a switch does not check the C-RP address and the group address
contained in a received Advertisement message and adds them to the RP-set.
Run the display pim bsr-info command to check the BSR in a PIM-SM domain.
Run the display pim rp-info [ group-address ] command to check the RP in a PIM-SM
domain.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 PIM-SM (IPv4) Configuration
152