HP A5500 SI Switch Series User Manual

363
The preventive measures can partially protect the security of BSRs in a network. However, if a legal BSR
is controlled by an attacker, the mentioned problem will still occur.
Follow these steps to configure a C-BSR:
To do… Use the command… Remarks
Enter system view system-view —
Enter Ipv6 PIM view pim ipv6 —
Configure an interface as a C-BSR
c-bsr ipv6-address [ hash-length [
priority ] ]
Required
No C-BSRs are configured by
default.
Configure a legal BSR address
range
bsr-policy acl6-number
Optional
No restrictions on BSR address
range by default
NOTE:
Because a lar
g
e amount of information needs to be exchan
g
ed between a BSR and the other devices in
the IPv6 BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and
the other devices in the IPv6 BIDIR-PIM domain.
Configuring an IPv6 BIDIR-PIM domain border
As the administrative core of an IPv6 BIDIR-PIM domain, the BSR sends the collected RP-set information in
the form of bootstrap messages to all routers in the IPv6 BIDIR-PIM domain.
An IPv6 BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service
scope. A number of IPv6 BIDIR-PIM domain border interfaces partition a network into different IPv6
BIDIR-PIM domains. Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that are intended to form the IPv6 BIDIR-PIM domain
border.
Follow these steps to configure an IPv6 BIDIR-PIM domain border:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type interface-
number
—
Configure an IPv6 BIDIR-PIM
domain border
pim ipv6 bsr-boundary
Required
By default, no IPv6 BIDIR-PIM
domain border is configured.
Configuring global C-BSR parameters
In each IPv6 BIDIR-PIM domain, a unique BSR is elected from C-BSRs. The C-RPs in the IPv6 BIDIR-PIM
domain send advertisement messages to the BSR. The BSR summarizes the advertisement messages to
form an RP-set and advertises it to all routers in the IPv6 BIDIR-PIM domain. All the routers use the same
hash algorithm to get the RP address corresponding to specific multicast groups.
Perform the following configuration on C-BSR routers.
Follow these steps to configure global C-BSR parameters:

HP A5500 SI Switch Series Specifications

General

Brand	HP
Model	A5500 SI Switch Series
Category	Switch
Language	English