H3C Technologies H3C S10500 Series Switches - Manual (Page 178)

163
entire network, all these routers will discard bootstrap messages from out of the legal address
range.
The preventive measures can partially protect the security of BSRs in a network. If a legal BSR is controlled
by an attacker, the preceding problem will still occur.
Follow these steps to configure a C-BSR:
To do… Use the command… Remarks
Enter system view system-view —
Enter public network PIM view or
VPN instance PIM view pim [ vpn-instance
vpn-instance-name ]
—
Configure an interface as a C-BSR
c-bsr interface-type
interface-number [ hash-length
[ priority ] ]
Required
No C-BSRs are configured by
default.
Configure a legal BSR address
range
bsr-policy acl-number
Optional
No restrictions on BSR address
range by default
NOTE:
•
Because a large amount of information needs to be exchanged between a BSR and the other devices in
the BIDIR-PIM domain, a relatively large bandwidth should be provided between the C-BSRs and the
other devices in the BIDIR-PIM domain.
• For C-BSRs interconnected through a GRE tunnel, multicast static routes need to be configured to ensure
that the next hop to a C-BSR is a Tunnel interface. For more information about multicast static routes, see
the chapter “Multicast routing and forwarding configuration.”
Configuring a BIDIR-PIM domain border
As the administrative core of a BIDIR-PIM domain, the BSR sends the collected RP-Set information in the
form of bootstrap messages to all routers in the BIDIR-PIM domain.
A BIDIR-PIM domain border is a bootstrap message boundary. Each BSR has its specific service scope.
A number of BIDIR-PIM domain border interfaces partition a network into different BIDIR-PIM domains.
Bootstrap messages cannot cross a domain border in either direction.
Perform the following configuration on routers that you want to configure as the PIM domain border.
Follow these steps to configure a BIDIR-PIM domain border:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Configure a BIDIR-PIM domain
border
pim bsr-boundary
Required
By default, no BIDIR-PIM domain
border is configured.
Configuring global C-BSR parameters
In each BIDIR-PIM domain, a unique BSR is elected from C-BSRs. The C-RPs in the BIDIR-PIM domain send
advertisement messages to the BSR. The BSR summarizes the advertisement messages to form an RP-set