H3C Technologies H3C S12500 Series Switches - Manual (Page 405)

389
of advertising RP information in the network. After you configure a router as a C-BSR, the router
automatically floods the network with bootstrap messages. Because a bootstrap message has a
hop limit value of 1, the whole network will not be affected as long as the neighbor router discards
these bootstrap messages. Therefore, with a legal BSR address range configured on all routers in
the entire network, all these routers will discard bootstrap messages from out of the legal address
range.
The preventive measures can partially protect the security of BSRs in a network. However, if an attacker
controls a legal BSR, the preceding problem will also occur.
Because a large amount of information needs to be exchanged between a BSR and the other devices in
the IPv6 PIM-SM domain, a relatively large bandwidth should be provided between the C-BSR and the
other devices in the IPv6 PIM-SM domain.
To complete basic BSR configuration:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter IPv6 PIM view. pim ipv6 N/A
3. Configure an interface as a
C-BSR. c-bsr ipv6-address [ hash-length
[ priority ] ] No C-BSRs are configured by
default.
4. Configure a legal BSR
address range.
bsr-policy acl6-number
Optional.
No restrictions by default.
Configuring an IPv6 PIM domain border
As the administrative core of an IPv6 PIM-SM domain, the BSR sends the collected RP-set information in
the form of bootstrap messages to all routers in the IPv6 PIM-SM domain.
An IPv6 PIM domain border is a bootstrap message boundary. Each BSR has its specific service scope.
IPv6 PIM domain border interfaces partition a network into different IPv6 PIM-SM domains. Bootstrap
messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as an IPv6 PIM domain border.
To configure an IPv6 PIM border domain:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configuring an IPv6 PIM
domain border.
pim ipv6 bsr-boundary
No IPv6 PIM domain border is
configured by default.
Configuring C-BSR parameters globally
In each IPv6 PIM-SM domain, a unique BSR is elected from C-BSRs. The C-RPs in the IPv6 PIM-SM domain
send advertisement messages to the BSR. The BSR summarizes the advertisement messages to form an
RP-set and advertises it to all routers in the IPv6 PIM-SM domain. All the routers use the same hash
algorithm to get the RP address that corresponds to specific IPv6 multicast groups.
Perform the following configuration on C-BSR routers.
To configure C-BSR parameters globally: