beautypg.com

Using acls to limit pim rp candidate advertisement – Brocade TurboIron 24X Series Configuration Guide User Manual

Page 885

background image

Brocade TurboIron 24X Series Configuration Guide

851

53-1003053-01

Using ACLs to control multicast features

The display shows the multicast group addresses covered by the RP candidate and the IP address
of the RP for the listed multicast group. In the example above, you see the following:

The first three lines show the multicast group addresses that are covered by the RP candidate.

The last three lines show the multicast group addresses covered by the static RP.

Using ACLs to limit PIM RP candidate advertisement

You can use standard ACLs to control the groups for which the candidate RP will send
advertisement messages to the bootstrap router. For example, ACL 5 can be configured to be
applied to the multicast groups within the IP address 239.x.x.x range. You can configure the Layer 3
Switch to advertise itself as a candidate RP to the bootstrap router only for groups in the range of
239.x.x.x. Enter commands such as the following.

TurboIron(config)#interface ethernet 1

TurboIron(config-if-1)#ip address 10.99.99.5 255.255.255.0

TurboIron(config-if-1)#ip pim-sparse

TurboIron(config-if-1)#exit

TurboIron(config)#access-list 5 deny host 239.255.162.2

TurboIron(config)#access-list 5 permit 239.0.0.0 0.0.255.255

TurboIron(config)#router pim

TurboIron(config-pim-router)#bsr-candidate ethernet 1 32 100

TurboIron(config-pim-router)#rp-candidate ethernet 1 group-list 5

The example above shows a configuration for an Ethernet interface. To configure ACLs that are
applied to a virtual routing interface, enter commands such as the following.

TurboIron(config)#interface ve 16

TurboIron(config-vif-16)#ip address 10.16.16.1 255.255.255.0

TurboIron(config-vif-16)#ip pim-sparse

TurboIron(config-vif-16)#exit

TurboIron(config)#access-list 5 deny host 239.255.162.2

TurboIron(config)#access-list 5 permit 239.255.0.0 0.0.255.255

TurboIron(config)#router pim

TurboIron(config-pim-router)#bsr-candidate ve 16 32 100

TurboIron(config-pim-router)#rp-candidate ve 16 group-list 5

To configure ACLs that are applied to a loopback interface, enter commands such as the following.

TurboIron(config)#interface loopback 1

TurboIron(config-lbif-1)#ip address 10.88.88.8 255.255.255.0

TurboIron(config-lbif-1)#ip pim-sparse

TurboIron(config-lbif-1)#exit

TurboIron(config)#access-list 5 deny host 239.255.162.2

TurboIron(config)#access-list 5 permit 239.255.0.0 0.0.255.255

TurboIron#show ip pim rp-map

Number of group-to-RP mappings: 6

Group address RP address

-------------------------------

1 239.255.163.1 10.43.43.1

2 239.255.163.2 10.43.43.1

3 239.255.163.3 10.43.43.1

4 239.255.162.1 10.99.99.5

5 239.255.162.2 10.99.99.5

6 239.255.162.3 10.99.99.5