bsr } | interface interface-type interface-number ]
*
command to check the number of sent
or received PIM control messages.
l Run the following commands to check the PIM routing table.
– display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ group-
address [ mask { group-mask-length | group-mask } ] | source-address [ mask { source-
mask-length | source-mask } ] | incoming-interface { interface-type interface-
number | register } | outgoing-interface { include | exclude | match } { interface-type
interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
*
[ outgoing-interface-number [ number ] ]
– display pim routing-table [ group-address [ mask { group-mask-length | group-
mask } ] | source-address [ mask { source-mask-length | source-mask } ] | incoming-
interface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpn-
instance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
*
[ outgoing-interface-number [ number ] ]
– display pim [ vpn-instance vpn-instance-name | all-instance ] routing-table brief
[ group-address [ mask { group-mask-length | group-mask } ] | source-address
[ mask { source-mask-length | source-mask } ] | incoming-interface { interface-type
interface-number | register } ]
*
----End
5.10 Configuring PIM Silent
The interface directly connecting a multicast device to a user host needs to be enabled with PIM.
In this case, some malicious hosts may simulate a large number of PIM Hello messages and send
the messages to the interface for processing. As a result, the multicast device is suspended. To
avoid the preceding case, you can set the interface to be in the PIM Silent state.
5.10.1 Establishing the Configuration Task
After basic functions of PIM-DM and IGMP are configured, you can configure the PIM silent
function on the interface connected with the user host. This interface should be enabled with
PIM-DM and IGMP first.
Applicable Environment
On the access layer, the interface directly connected to hosts needs to be enabled with PIM. You
can set up the PIM neighbor relationship on the interface to process various PIM packets. The
configuration, however, has the security vulnerability. When a host maliciously generates PIM
Hello messages and sends many packets to a switch, the switch may fail.
To prevent the preceding case, you can set the status of the interface to PIM silent. When the
interface is in the PIM silent state, the interface is prevented from receiving and forwarding any
PIM packet. All PIM neighbor relationships and PIM state machines on the interface are deleted.
At the same time, IGMP and MLD on the interface are not affected.
To enable PIM silent, the network environment must meet the following conditions:
l The network supports IPv4 and IPv6 simultaneously.
Quidway S7700 Smart Routing Switch
Configuration Guide - Multicast 5 PIM-DM (IPv4) Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
132
To Next Page
Loading...
