H3C S5500-EI - Page 423

404
the right of advertising RP information in the network. After being configured as a C-BSR, a router
automatically floods the network with bootstrap messages. Because a bootstrap message has a
hop limit value of 1, the whole network will not be affected as long as the neighbor router discards
these bootstrap messages. Therefore, with a legal BSR address range configured on all routers in
the entire network, all these routers will discard bootstrap messages from out of the legal address
range.
The preventive measures can partially protect the security of BSRs in a network. However, if a legal BSR
is controlled by an attacker, the preceding problem will still occur.
IMPORTANT:
Because a large amount of information will be exchan
g
ed between a BSR and the other devices in the IPv6
BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and the other
devices in the IPv6 BIDIR-PIM domain.
To configure a C-BSR:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter IPv6 PIM view.
pim ipv6 N/A
3. Configure an interface
as a C-BSR.
c-bsr ipv6-address
[ hash-length [ priority ] ]
No C-BSRs are configured by default.
4. Configure a legal BSR
address range.
bsr-policy acl6-number
Optional.
No restrictions on BSR address range by
default.
Configuring an IPv6 BIDIR-PIM domain border
As the administrative core of an IPv6 BIDIR-PIM domain, the BSR sends the collected RP-Set information
in the form of bootstrap messages to all routers in the IPv6 BIDIR-PIM domain.
An IPv6 BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service
scope. A number of IPv6 BIDIR-PIM domain border interfaces partition a network into different IPv6
BIDIR-PIM domains. Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as the IPv6 BIDIR-PIM domain
border.
To configure an IPv6 BIDIR-PIM domain border:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure an IPv6 BIDIR-PIM
domain border.
pim ipv6 bsr-boundary
By default, no IPv6 BIDIR-PIM
domain border is configured.