HP 4800G Series Configuration Manual page 838

value of 1, the whole network will not be affected as long as the neighbor router discards these
bootstrap messages. Therefore, with a legal BSR address range configured on all routers in the
entire network, all these routers will discard bootstrap messages from out of the legal address
range.
The above-mentioned preventive measures can partially protect the security of BSRs in a network.
However, if a legal BSR is controlled by an attacker, the above-mentioned problem will still occur.
Follow these steps to configure a C-BSR:
To do...
Enter system view
Enter PIM view
Configure an interface as a
C-BSR
Configure a legal BSR address
range
Since a large amount of information needs to be exchanged between a BSR and the other devices
in the PIM-SM domain, a relatively large bandwidth should be provided between the C-BSRs and
the other devices in the PIM-SM domain.
For C-BSRs interconnected via a Generic Routing Encapsulation (GRE) tunnel, multicast static
routes need to be configured to ensure that the next hop to a C-BSR is a GRE interface. For more
information about multicast static routes, refer to Multicast Routing and Forwarding Configuration
in the IP Multicast Volume.
Configuring a PIM domain border
As the administrative core of a PIM-SM domain, the BSR sends the collected RP-Set information in the
form of bootstrap messages to all routers in the PIM-SM domain.
A PIM domain border is a bootstrap message boundary. Each BSR has its specific service scope. A
number of PIM domain border interfaces partition a network into different PIM-SM domains. Bootstrap
messages cannot cross a domain border in either direction
Perform the following configuration on routers that can become a PIM domain border.
Follow these steps to configure a PIM domain border:
To do...
Enter system view
Enter interface view
Use the command...
system-view
pim
c-bsr interface-type
interface-number [ hash-length
[ priority ] ]
bsr-policy acl-number
Use the command...
system-view
interface interface-type
interface-number
1-22
Remarks
—
—
Required
No C-BSRs are configured by
default.
Optional
No restrictions on BSR address
range by default
Remarks
—
—