HP A8800 Configuration Manual page 419

The above-mentioned preventive measures can partially protect the security of BSRs in a network.
However, if a legal BSR is controlled by an attacker, the above-mentioned problem still occurs.
Because a large amount of information is to be exchanged between a BSR and the other devices in the
IPv6 BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and the
other devices in the IPv6 BIDIR-PIM domain.
To configure a C-BSR:
Step
1. Enter system view.
2. Enter IPv6 PIM view.
3. Configure an interface as a
C-BSR.
4. Configure a legal BSR
address range.
Configuring an IPv6 BIDIR-PIM domain border
As the administrative core of an IPv6 BIDIR-PIM domain, the BSR sends the collected RP-Set information
in the form of bootstrap messages to all routers in the IPv6 BIDIR-PIM domain.
An IPv6 BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service
scope. A number of IPv6 BIDIR-PIM domain border interfaces partition a network into different IPv6
BIDIR-PIM domains. Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as the IPv6 BIDIR-PIM domain
border.
To configure an IPv6 BIDIR-PIM domain border:
Step
1. Enter system view.
Enter interface view.
2.
3. Configure an IPv6 BIDIR-PIM
domain border.
Configuring global C-BSR parameters
In each IPv6 BIDIR-PIM domain, a unique BSR is elected from C-BSRs. The C-RPs in the IPv6 BIDIR-PIM
domain send advertisement messages to the BSR. The BSR summarizes the advertisement messages to
form an RP-set and advertises it to all routers in the IPv6 BIDIR-PIM domain. All the routers use the same
Hash algorithm to get the RP address corresponding to specific multicast groups.
Perform the following configuration on C-BSR routers.
To configure global C-BSR parameters:
Step
1. Enter system view.
Command
system-view
pim ipv6
c-bsr ipv6-address [ hash-length
[ priority ] ]
bsr-policy acl6-number
Command
system-view
interface interface-type
interface-number
pim ipv6 bsr-boundary
Command
system-view
407
Remarks
N/A
N/A
No C-BSRs are configured by
default.
Optional.
No restrictions on BSR address
range by default.
Remarks
N/A
N/A
By default, no IPv6 BIDIR-PIM
domain border is configured.
Remarks
N/A