HPE 5820X Series, Configuration Manual

Page: 435 / 512

423
To guard against C-RP spoofing, you must configure a legal C-RP address range and the range of
IPv6 multicast groups to be served on the BSR. In addition, because every C-BSR has a chance to
become the BSR, you need to configure the same filtering policy on all C-BSRs in the IPv6 PIM-SM
domain.
When configuring a C-RP, ensure a relatively large bandwidth between this C-RP and the other
devices in the IPv6 PIM-SM domain.
To configure a C-RP:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public network IPv6
PIM view or VPN instance
IPv6 PIM view.
pim ipv6
[
vpn-instance
vpn-instance-name
]
N/A
3.
Configure an interface to be
a C-RP for IPv6 PIM-SM.
c-rp ipv6-address
[ {
group-policy
acl6-number
|
scope scope-id
} |
priority priority
|
holdtime
hold-interval
|
advertisement-interval
adv-interval
] *
No C-RPs are configured by
default.
4.
Configure a legal C-RP
address range and the range
of IPv6 multicast groups to
be served.
crp-policy acl6-number
Optional.
No restrictions by default.
Enabling embedded RP
When the embedded RP feature is enabled, the router can resolve the RP address directly from the
IPv6 multicast group address of an IPv6 multicast packets. This RP can replace the statically
configured RP or the RP dynamically calculated based on the BSR mechanism. Thus, the DR does
not need to know the RP address beforehand.
Perform this configuration on all routers in the IPv6 PIM-SM domain.
To enable embedded RP:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public network IPv6
PIM view or VPN instance
IPv6 PIM view.
pim ipv6
[
vpn-instance
vpn-instance-name
]
N/A
3.
Enable embedded RP.
embedded-rp
[
acl6-number
]
Optional.
By default, embedded RP is enabled for
IPv6 multicast groups in the default
embedded RP address scopes.
The default embedded RP address scopes
are FF7x::/12 and FFFx::/12. Here "x"
refers to any legal address scope. For more
information about the Scope field, see
"
Multicast overview ."
Configuring C-RP timers globally
To enable the BSR to distribute the RP-set information within the IPv6 PIM-SM domain, C-RPs must
periodically send C-RP-Adv messages to the BSR. The BSR learns the RP-set information from the
received messages, and encapsulates its own IPv6 address together with the RP-set information in