360
[Sysname-pim6] c-rp holdtime 200
crp-policy (IPv6 PIM view)
Syntax
crp-policy acl6-number
undo crp-policy
View
IPv6 PIM view
Default level
2: System level
Parameters
acl6-number: Advanced IPv6 ACL number, in the range of 3000 to 3999. When the IPv6 ACL is defined,
the source keyword in the rule command specifies the IPv6 address of a C-RP, and the destination
keyword specifies the IPv6 address range of the IPv6 multicast groups to which the C-RP is designated.
Description
Use crp-policy to configure a legal C-RP address range and the range of IPv6 multicast groups to which
the C-RP is designated, in order to guard against C-RP spoofing.
Use undo crp-policy to remove the restrictions in C-RP address ranges and the ranges of IPv6 multicast
groups to which the C-RP is designated.
By default, no restrictions are defined for C-RP address ranges and the address ranges of groups to which
the C-RP is designated. All received C-RP messages are regarded legal.
The crp-policy command filters the IPv6 multicast group ranges advertised by C-RPs based on the group
prefixes. For example, if the IPv6 multicast group range advertised by a C-RP is FF0E:0:1::/96 and the
legal IPv6 multicast group range defined by the crp-policy command is FF0E:0:1::/120, the IPv6
multicast groups in the range of FF0E:0:1::/96 can pass.
Related commands: c-rp.
Examples
# Configure a C-RP policy so that only devices in the IPv6 address range of 2001::2/64 can be C-RPs
that provides services for IPv6 multicast groups in the address range of FF03::101/64.
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule permit ipv6 source 2001::2 64 destination ff03::101 64
[Sysname-acl6-adv-3000] quit
[Sysname] pim ipv6
[Sysname-pim6] crp-policy 3000
display pim ipv6 bsr-info
Syntax
display pim ipv6 bsr-info [ | { begin | exclude | include } regular-expression ]
To Next Page
Loading...
Need help?
General