H3C S5500-EI - Page 410

391
To guard against C-RP spoofing, you need to configure a legal C-RP address range and the range of IPv6
multicast groups to which the C-RP is designated on the BSR. In addition, because every C-BSR has a
chance to become the BSR, you need to configure the same filtering policy on all C-BSRs in the IPv6
PIM-SM domain.
When you configure a C-RP, ensure a relatively large bandwidth between this C-RP and the other devices
in the IPv6 PIM-SM domain.
To configure a C-RP:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter IPv6 PIM view.
pim ipv6 N/A
3. Configure an interface to be a
C-RP for IPv6 PIM-SM.
c-rp ipv6-address [ { group-policy
acl6-number | scope scope-id } | priority
priority | holdtime hold-interval |
advertisement-interval adv-interval ] *
No C-RPs are configured by
default.
4. Configure a legal C-RP
address range and the range
of IPv6 multicast groups to
which the C-RP is designated.
crp-policy acl6-number
Optional.
No restrictions by default.
Enabling embedded RP
With the embedded RP feature enabled, the router can resolve the RP address directly from the IPv6
multicast group address of an IPv6 multicast packets. This RP can replace the statically configured RP or
the RP dynamically calculated based on the BSR mechanism. Therefore, the DR does not need to identify
the RP address beforehand.
Perform this configuration on all routers in the IPv6 PIM-SM domain.
To enable embedded RP:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter IPv6 PIM view.
pim ipv6 N/A
3. Enable embedded RP.
embedded-rp [ acl6-number ]
Optional.
By default, embedded RP is enabled for IPv6
multicast groups in the default embedded RP
address scopes.
The default embedded RP address scopes are
FF7x::/12 and FFFx::/12. Here "x" refers to
any legal address scope. For more information
about the Scope field, see "Multicast
overview."