Command Manual - Multicast Protocol
Quidway S6500 Series Ethernet Switches Chapter 5 PIM Configuration Commands
Huawei Technologies Proprietary
5-2
z If a router in the network is manipulated by an attacker, or an illegal router is
accessed into the network, the attacker may set itself as C-BSR and try to win the
contention and gain authority to advertise RP information among the network.
Since the router configured as C-BSR shall propagate BSR messages, which are
multicast messages sent hop by hop with TTL as 1, among the network, then the
network cannot be affected as long as the peer routers do not receive these BSR
messages. One way is to configure bsr-policy on each router to limit legal BSR
range, for example, only 1.1.1.1/32 and 1.1.1.2/32 can be BSR, thus the routers
cannot receive or forward BSR messages other than these two. Even legal BSRs
cannot contest with them.
Problems may still exist if a legal BSR is attacked, though these two measures can
effectively guarantee high BSR security.
The source parameter in the rule command is translated as BSR address in the
bsr-policy command.
For the related commands, see acl and rule.
Example
# Configure BSR filtering policy on routers, only 101.1.1.1/32 can be BSR.
[Quidway-pim] bsr-policy 2000
[Quidway-pim] quit
[Quidway] acl number 2000
[Quidway-acl-basic-2000] rule 0 permit source 101.1.1.1 0
5.1.2 c-bsr
Syntax
c-bsr interface-type interface-number hash-mask-len [ priority ]
undo c-bsr
View
PIM view
Parameter
interface-type interface-number: Specifies the interface. The candidate BSR is
configured on the interface. PIM-SM must be enabled on the interface first.
hash-mask-len: Length of the mask. The value ranges from 0 to 32.
priority: Priority of the candidate BSR. The larger the value of the priority, the higher the
priority of the BSR. The value ranges from 0 to 255. By default, the priority is 0.
To Next Page
Loading...
Need help?
General
