Configuring Route Policy Components
444 7705 SAR OS Router Configuration Guide
Configuring PIM Join Policies
Join policies are used in Protocol Independent Multicast (PIM) configurations to prevent the
transport of multicast traffic across a network and the dropping of packets at a router at the
edge of the network. PIM Join filters reduce the potential for denial of service (DoS) attacks
and PIM state explosion—large numbers of Join messages forwarded to each router on the
RPT, resulting in memory consumption. For information on importing a Join policy into a
PIM configuration, see the “Importing PIM Join Policies” section in the 7705 SAR OS
Routing Protocols Guide.
Configuring a PIM join policy follows the same process as that for any other policy.
However, when configuring an entry, include the entry>from>group-address and
entry>from>source-address commands. See Configuring an Entry for the CLI
syntax.
The following example displays the command usage for a PIM join policy named “pim_join”.
The policy will not allow Join messages for group 229.50.50.208/32 and source 192.168.0.0/
16, but will allow other Join messages. These commands are configured in the
config>router context. Note that config>router is not shown in the example
below.
Example: policy-options# begin
policy-options# policy-statement pim_join
policy-options>policy-statement$ entry 10
policy-options>policy-statement>entry$ from
policy-options>policy-statement>entry>from$ group-
address 229.50.50.208/32
policy-options>policy-statement>entry>from$ source-
address 192.168.0.0
policy-options>policy-statement>entry>from$ exit
policy-options>policy-statement>entry# action reject
policy-options>policy-statement>entry#
The following example displays the PIM join policy configuration:
A:ALA-B>config>router>policy-options# info
----------------------------------------------
...
policy-statement "pim_join"
entry 10
from
group-address "229.50.50.208/32"
source-address 192.168.0.0
exit
action reject
exit
exit
...
----------------------------------------------
To Next Page
Loading...
