Configuring The Msdp Active Source Limit (Nsm Procedure); Table 175: Msdp Configuration Details - Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1 Manual

M-series and MX-series Devices

Configuring the MSDP Active Source Limit (NSM Procedure)

322
Click the Configuration tab. In the configuration tree, expand Protocols.
3.
Select MSDP.
4.
Add or modify settings as specified in Table 175 on page 322.
5.
Click one:
6.
OK—Saves the changes.
Cancel—Cancels the modifications.

Table 175: MSDP Configuration Details

Task
Enable MSDP on the router.
A router interested in MSDP messages, such as a rendezvous point (RP), might have to
process a large number of MSDP messages, especially source-active messages, arriving
from other routers. Because of the potential need for a router to examine, process, and
create state tables for many MSDP packets, there is a possibility of an MSDP-based DoS
attack on a router running MSDP. To minimize this possibility, you can configure the router
to limit the number of source active messages the router accepts. Also, you can configure
a threshold for applying random early discard (RED) to drop some but not all MSDP
active source messages.
To configure the MSDP active source limit on the router in NSM:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the device to select it.
2.
Click the Configuration tab. In the configuration tree, expand Protocols.
3.
Select Msdp.
4.
Add or modify settings as specified in Table 176 on page 323.
5.
Click one:
6.
OK—Saves the changes.
Cancel—Cancels the modifications.
Your Action
1. In the Comment box, enter the comment.
2. From the Data Encapsulation list, select one of the following:
disable—Do not use MSDP data encapsulation.
enable—Use MSDP data encapsulation.
3. Select the Disable check box to disable MSDP.
4. In the Local Address box, enter the IP address of the local end
of the connection.
Copyright © 2010, Juniper Networks, Inc.