425
information. For security purposes, you can configure a legal BSR address range on all routers
on the network. Therefore, all routers can discard BSMs that are out of the legal address range.
These preventive measures can partially protect the security of BSRs in a network. However, if an
attacker controls a legal BSR, the problem still exists.
Because a large amount of information needs to be exchanged between a BSR and the other
devices in the IPv6 PIM-SM domain, a relatively large bandwidth should be provided between the
C-BSR and the other devices in the IPv6 PIM-SM domain.
To complete basic BSR configuration:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public network IPv6
PIM view or VPN instance
IPv6 PIM view.
pim ipv6
[
vpn-instance
vpn-instance-name
]
N/A
3.
Configure an interface as a
C-BSR.
c-bsr
ipv6-address
[
hash-length
[
priority
] ]
No C-BSRs are configured by
default.
4.
Configure a legal BSR
address range.
bsr-policy
acl6-number
Optional.
No restrictions by default.
Configuring an IPv6 PIM domain border
As the administrative core of an IPv6 PIM-SM domain, the BSR sends the collected RP-set
information in the form of bootstrap messages to all routers in the IPv6 PIM-SM domain.
An IPv6 PIM domain border is a bootstrap message boundary. Each BSR has its specific service
scope. IPv6 PIM domain border interfaces partition a network into different IPv6 PIM-SM domains.
Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as an IPv6 PIM domain
border.
To configure an IPv6 PIM border domain:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface
interface-type
interface-number
N/A
3.
Configuring an IPv6 PIM
domain border.
pim ipv6 bsr-boundary
No IPv6 PIM domain border is
configured by default.
Configuring C-BSR parameters globally
In each IPv6 PIM-SM domain, a unique BSR is elected from C-BSRs. The C-RPs in the IPv6
PIM-SM domain send advertisement messages to the BSR. The BSR summarizes the
advertisement messages to form an RP-set and advertises it to all routers in the IPv6 PIM-SM
domain. All the routers use the same hash algorithm to get the RP address that corresponds to
specific IPv6 multicast groups.
Perform the following configuration on C-BSR routers.
To configure C-BSR parameters globally:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A