159
Parameters
acl-number: Basic ACL number, in the range of 2000 to 2999. When the ACL is defined, the source
keyword in the rule command specifies a legal source address range for hello messages.
Description
Use pim neighbor-policy to configure a legal source address range for hello messages to guard against
hello message spoofing.
Use undo pim neighbor-policy to restore the default.
By default, no source address range for hello messages is configured. That is, all the received hello
messages are considered legal.
Examples
# Configure a legal source address range for hello messages on VLAN-interface 100 so that only the
devices on the 10.1.1.0/24 subnet can become PIM neighbors of this switch.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] pim neighbor-policy 2000
pim require-genid
Syntax
pim require-genid
undo pim require-genid
View
Interface view
Default level
2: System level
Parameters
None
Description
Use pim require-genid to enable rejection of hello messages without Generation_ID.
Use undo pim require-genid to restore the default.
By default, hello messages without Generation_ID are accepted.
Examples
# Enable VLAN-interface 100 to reject hello messages without Generation_ID.
<Sysname> system-view
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] pim require-genid
To Next Page
Loading...
Need help?
General