mask-length | source-mask } ] | incoming-interface { interface-type interface-number |
register } | outgoing-interface { include | exclude | match } { interface-type interface-
number | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
*
[ outgoing-
interface-number [ number ] ]
l display pim routing-table [ group-address [ mask { group-mask-length | group-mask } ] |
source-address [ mask { source-mask-length | source-mask } ] | incoming-interface
{ interface-type interface-number | register } | outgoing-interface { include | exclude |
match } { interface-type interface-number | vpn-instance vpn-instance-name | register |
none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
*
[ outgoing-interface-number
[ number ] ]
l display pim [ vpn-instance vpn-instance-name | all-instance ] routing-table brief [ group-
address [ mask { group-mask-length | group-mask } ] | source-address [ mask { source-
mask-length | source-mask } ] | incoming-interface { interface-type interface-number |
register } ]
*
----End
6.14 Configuring PIM Silent
The interface directly connecting a multicast device to a user host needs to be enabled with PIM.
In this case, some malicious hosts may simulate a large number of PIM Hello messages and send
the messages to the interface for processing. As a result, the multicast device is suspended. To
avoid the preceding case, you can set the interface to be in the PIM Silent state.
6.14.1 Establishing the Configuration Task
After basic functions of PIM-SM and IGMP are configured, you can configure the PIM silent
function on the interface connected with the user host. This interface should be enabled with
PIM-SM and IGMP first.
Applicable Environment
On the access layer, the interface directly connected to hosts needs to be enabled with PIM. You
can establish the PIM neighbor relationship on the interface to process various PIM packets. The
configuration, however, has potential risks of security. When a host maliciously generates PIM
Hello packets and sends the packets in large quantity, the switch may fail.
To solve the problem, set the status of the interface to PIM silent. When the interface is in PIM
silent state, the interface is prevented from receiving and forwarding any PIM packet. All PIM
neighbors and PIM state machines on the interface are deleted. The interface acts as the static
DR and immediately takes effect. At the same time, IGMP and MLD on the interface are not
affected.
PIM silent is applicable only to the interface directly connected to the host network segment that
is connected only to this switch.
Quidway S7700 Smart Routing Switch
Configuration Guide - Multicast 6 PIM-SM (IPv4) Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
190
To Next Page
Loading...
