Configuring Pim Join Policies - Alcatel-Lucent 7705 Configuration Manual

Configuring Route Policy Components

Configuring PIM Join Policies

Join policies are used in Protocol Independent Multicast (PIM) configurations to prevent the
transport of multicast traffic across a network and the dropping of packets at a router at the
edge of the network. PIM Join filters reduce the potential for denial of service (DoS) attacks
and PIM state explosion—large numbers of Join messages forwarded to each router on the
RPT, resulting in memory consumption. For information on importing a Join policy into a
PIM configuration, see the "Importing PIM Join Policies" section in the 7705 SAR OS
Routing Protocols Guide.
Configuring a PIM join policy follows the same process as that for any other policy.
However, when configuring an entry, include the entry>from>group-address and
entry>from>source-address commands. See
syntax.
The following example displays the command usage for a PIM join policy named "pim_join".
The policy will not allow Join messages for group 229.50.50.208/32 and source 192.168.0.0/
16, but will allow other Join messages. These commands are configured in the
config>router context. Note that config>router is not shown in the example
below.
Example:
The following example displays the PIM join policy configuration:
A:ALA-B>config>router>policy-options# info
----------------------------------------------
...
...
----------------------------------------------
444
policy-options# begin
policy-options# policy-statement pim_join
policy-options>policy-statement$ entry 10
policy-options>policy-statement>entry$ from
policy-options>policy-statement>entry>from$ group-
address 229.50.50.208/32
policy-options>policy-statement>entry>from$ source-
address 192.168.0.0
policy-options>policy-statement>entry>from$ exit
policy-options>policy-statement>entry# action reject
policy-options>policy-statement>entry#
policy-statement "pim_join"
entry 10
from
group-address "229.50.50.208/32"
source-address 192.168.0.0
exit
action reject
exit
exit
Configuring an Entry
7705 SAR OS Router Configuration Guide
for the CLI