Brocade Multi-Service IronWare Multicast Configuration Guide (Supporting R05.6.00) - Manual (Page 51)

Multi-Service IronWare Multicast Configuration Guide 39
53-1003032-02
PIM Dense
1
Limitation and prerequisites
Following are the behavior of ACL which affect PIM-neighbor filtering process.
1. All ACLs have an implicit deny all clause unless overridden by an explicit permit all clause.
Brocade devices override it for an ACL without any clauses.When you apply an empty ACL to an
interface, one without any clauses, it allows all traffic on the interface to pass through without
filtering.
2. There are no checks to validate if an ACL applied to an interface already exists. A non-existent
ACL is considered to be equivalent to an empty ACL without any filtering capacity. A warning
message is issued on the console.
3. Only one ACL can be bound to any interface.
4. It supports maximum of 128 PIM neighbor filters for both IPv4 and IPv6.
Configuring neighbor filtering
When you apply the neighbor filter on the router, use the access-list command to define an
access-list that defines the routers you want to permit and deny to participate in PIM.The CLI
options available to bind an ACL as neighbor filter are as follows:
<1-99> Standard IP access list
ASCII string Access List Name
<100-199> Extended IP access list
Defining an IPv4 standard ACL:
Brocade(config)# access-list 10 deny host 10.10.10.2
Brocade(config)# access-list 10 permit any
For IPv6 ACL:
Brocade(config)# ipv6 access-list f10
Brocade(config-ipv6-access-list f10)# deny ipv6 host fe80::102 any
Brocade(config-ipv6-access-list f10)# permit ipv6 any any
Here fe80::102 is Link Local address of that interface.
Brocade(config-if-1/3)# ip|ipv6 pim ?
neighbor-filter filters neighbor to participate in PIM.
Syntax: [no] [ip|ipv6] pim
Use the pim neighbor-filter command on an interface to filter the neighbor routers.
Brocade(config)# interface ethernet 1/3
Brocade(config-if-e1000-1/3)# ip pim neighbor-filter 10
Brocade(config-if-e1000-1/3)# ipv6 pim neighbor-filter f10
This command prevents the host 10.10.10.2 as specified in access-list from becoming a PIM
neighbor on interface eth 1/3.
Syntax: [no] [ip|ipv6] pim neighbor-filter acl name
This command applies an ACL as a rule for neighbor-filter to an interface. The ACL can either be
named or numbered (standard, extended) for IPv4 and named for IPv6.