363
The preventive measures can partially protect the security of BSRs in a network. However, if a legal BSR
is controlled by an attacker, the mentioned problem will still occur.
Follow these steps to configure a C-BSR:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter Ipv6 PIM view
pim ipv6
—
Configure an interface as a C-BSR
c-bsr
ipv6-address
[
hash-length
[
priority
] ]
Required
No C-BSRs are configured by
default.
Configure a legal BSR address
range
bsr-policy
acl6-number
Optional
No restrictions on BSR address
range by default
NOTE:
Because a large amount of information needs to be exchanged between a BSR and the other devices in
the IPv6 BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and
the other devices in the IPv6 BIDIR-PIM domain.
Configuring an IPv6 BIDIR-PIM domain border
As the administrative core of an IPv6 BIDIR-PIM domain, the BSR sends the collected RP-set information in
the form of bootstrap messages to all routers in the IPv6 BIDIR-PIM domain.
An IPv6 BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service
scope. A number of IPv6 BIDIR-PIM domain border interfaces partition a network into different IPv6
BIDIR-PIM domains. Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that are intended to form the IPv6 BIDIR-PIM domain
border.
Follow these steps to configure an IPv6 BIDIR-PIM domain border:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter interface view
interface
interface-type interface-
number
—
Configure an IPv6 BIDIR-PIM
domain border
pim ipv6 bsr-boundary
Required
By default, no IPv6 BIDIR-PIM
domain border is configured.
Configuring global C-BSR parameters
In each IPv6 BIDIR-PIM domain, a unique BSR is elected from C-BSRs. The C-RPs in the IPv6 BIDIR-PIM
domain send advertisement messages to the BSR. The BSR summarizes the advertisement messages to
form an RP-set and advertises it to all routers in the IPv6 BIDIR-PIM domain. All the routers use the same
hash algorithm to get the RP address corresponding to specific multicast groups.
Perform the following configuration on C-BSR routers.
Follow these steps to configure global C-BSR parameters:
Summary of Contents for A5500 EI Switch Series
Page 12: ...xii Conventions 425 Index 427 ...