HP A6600 Configuration Manual page 135

The preventive measures can partially protect the security of BSRs in a network. If a legal BSR is controlled
by an attacker, the preceding problem will still occur.
To do...
1. Enter system view.
2. Enter public network PIM view
or VPN instance PIM view.
3. Configure an interface as a
C-BSR.
4. Configure a legal BSR
address range.
Because a large amount of information needs to be exchanged between a BSR and the other devices in
the BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and the other
devices in the BIDIR-PIM domain.
For C-BSRs interconnected through a GRE tunnel, multicast static routes need to be configured to ensure
that the next hop to a C-BSR is a Tunnel interface. For more information about multicast static routes, see
"Multicast routing and forwarding configuration."
Configuring a PIM domain border
As the administrative core of a BIDIR-PIM domain, the BSR sends the collected RP-Set information in the
form of bootstrap messages to all routers in the BIDIR-PIM domain.
A BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service scope. A
number of BIDIR-PIM domain border interfaces partition a network into different BIDIR-PIM domains.
Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as the PIM domain border.
To do...
1. Enter system view.
2. Enter interface view.
3. Configure a BIDIR-PIM
domain border.
Configuring global C-BSR parameters
In each BIDIR-PIM domain, a unique BSR is elected from C-BSRs. The C-RPs in the BIDIR-PIM domain send
advertisement messages to the BSR. The BSR summarizes the advertisement messages to form an RP-set
and advertises it to all routers in the BIDIR-PIM domain. All the routers use the same hash algorithm to get
the RP address corresponding to specific multicast groups.
To do...
1. Enter system view.
2. Enter public network PIM view
or VPN instance PIM view.
Use the command...
system-view
pim [ vpn-instance
vpn-instance-name ]
c-bsr interface-type
interface-number [ hash-length
[ priority ] ]
bsr-policy acl-number
Use the command...
system-view
interface interface-type
interface-number
pim bsr-boundary
Use the command...
system-view
pim [ vpn-instance
vpn-instance-name ]
124
Remarks
—
—
Required.
No C-BSRs are configured by
default.
Optional.
No restrictions on BSR address
range by default.
Remarks
—
—
Required.
By default, no BIDIR-PIM domain
border is configured.
Remarks
—
—