HP MSR2003 User Manual

100
These preventive measures can partially protect the BSR in a network. However, if an attacker controls a
legal BSR, the problem still exists.
When you configure a C-BSR, reserve a relatively large bandwidth between the C-BSR and the other
devices in the PIM-SM domain.
When C-BSRs connect to other PIM routers through tunnels, static multicast routes must be configured to
make sure the next hop to a C-BSR is a tunnel interface. Otherwise, RPF check is affected. For more
information about static multicast routes, see "Configuring multicast routing and forwarding."
To configure a C-BSR:
Ste
p
Command Remarks
1. Enter system view.
system-view
N/A
2. Enter PIM view.
pim [ vpn-instance
vpn-instance-name ]
N/A
3. Configure a C-BSR.
c-bsr ip-address [ scope
group-address { mask-length |
mask } ] [ hash-length hash-length
| priority priority ] *
By default, no C-BSR is configured.
4. (Optional.) Configure a legal
BSR address range.
bsr-policy acl-number
By default, no restrictions are
defined.
Configuring a PIM domain border
As the administrative core of a PIM-SM domain, the BSR sends the collected RP-set information in the form
of bootstrap messages to all routers in the PIM-SM domain.
A PIM domain border is a bootstrap message boundary. Each BSR has its specific service scope. A
number of PIM domain border interfaces partition a network into different PIM-SM domains. Bootstrap
messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as a PIM domain border.
To configure a PIM domain border:
Ste
p
Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure a PIM domain
border.
pim bsr-boundary
By default, no PIM domain border
is configured.
Disabling the BSM semantic fragmentation function
Generally, a BSR periodically advertises the RP-set information in BSMs within the PIM-SM domain. It
encapsulates a BSM in an IP datagram. When a BSM exceeds the MTU, it is split into multiple BSM
fragments (BSMFs). The loss of a single IP fragment leads to unavailability of the entire message.
Semantic fragmentation of BSMs can solve this issue. When a non-BSR receives a BSMF, it examines the
RP-set information for a multicast group range:
• If the RP-set information is carried in one BSMF, the router directly updates the RP-set information for
the group range.

HP MSR2003 Specifications

General

Brand	HP
Model	MSR2003
Category	Network Router
Language	English