H3C Technologies H3C S12500 Series Switches - Manual (Page 147)

131
To guard against C-RP spoofing, configure a legal C-RP address range and the range of multicast groups
to which the BSR is designated. In addition, because every C-BSR can become the BSR, you must
configure the same filtering policy on all C-BSRs in the PIM-SM domain.
When you configure a C-RP, ensure a relatively large bandwidth between this C-RP and the other devices
in the PIM-SM domain.
To configure a C-RP:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter public network PIM view
or VPN instance PIM view.
pim [ vpn-instance vpn-instance-name ] N/A
3. Configure an interface to be a
C-RP for PIM-SM.
c-rp interface-type interface-number
[ group-policy acl-number | priority
priority | holdtime hold-interval |
advertisement-interval adv-interval ] *
No C-RPs are configured by
default.
4. Configure a legal C-RP
address range and the range
of multicast groups to which
the C-RP is designated.
crp-policy acl-number
Optional.
No restrictions by default.
Enabling auto-RP
Auto-RP announcement and discovery messages are addressed to the multicast group addresses
224.0.1.39 and 224.0.1.40 respectively. With auto-RP enabled on a device, the device can receive these
two types of messages and record the RP information carried in such messages.
To enable auto-RP:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter public network PIM view
or VPN instance PIM view.
pim [ vpn-instance
vpn-instance-name ]
N/A
3. Enable auto-RP. auto-rp enable Disabled by default.
Configuring C-RP timers globally
To enable the BSR to distribute the RP-set information within the PIM-SM domain, C-RPs must periodically
send C-RP-Adv messages to the BSR. The BSR learns the RP-set information from the received messages,
and encapsulates its own IP address together with the RP-set information in its bootstrap messages. The
BSR then floods the bootstrap messages to all PIM routers in the network.
Each C-RP encapsulates a timeout value in its C-RP-Adv messages. After receiving a C-RP-Adv message,
the BSR obtains this timeout value and starts a C-RP timeout timer. If the BSR fails to hear a subsequent
C-RP-Adv message from the C-RP when this timer times out, the BSR assumes the C-RP to have expired or
become unreachable.
The C-RP timers need to be configured on C-RP routers.
To configure C-RP timers globally: