H3C Technologies H3C SecPath F1000-E User Manual
Page 667
642
# On Router C, configure GigabitEthernet 0/1 and GigabitEthernet 0/5 as the boundary of
admin-scoped zone 2.
[RouterC] interface GigabitEthernet 0/1
[RouterC-GigabitEthernet0/1] multicast boundary 239.0.0.0 8
[RouterC-GigabitEthernet0/1] quit
[RouterC] interface GigabitEthernet 0/5
[RouterC-GigabitEthernet0/5] multicast boundary 239.0.0.0 8
[RouterC-GigabitEthernet0/5] quit
# On SecPath B, configure GigabitEthernet0/1 as the boundary of admin-scoped zone 2.
[SecPathB] interface GigabitEthernet 0/1
[SecPathB-GigabitEthernet0/1] multicast boundary 239.0.0.0 8
[SecPathB-GigabitEthernet0/1] quit
4.
Configure C-BSRs and C-RPs:
# On SecPath A, configure the service scope of RP advertisements and configure GigabitEthernet
0/4 as a C-BSR and C-RP of admin-scoped zone 1.
[SecPathA] acl number 2001
[SecPathA-acl-basic-2001] rule permit source 239.0.0.0 0.255.255.255
[SecPathA-acl-basic-2001] quit
[SecPathA] pim
[SecPathA-pim] c-bsr group 239.0.0.0 8
[SecPathA-pim] c-bsr GigabitEthernet 0/4
[SecPathA-pim] c-rp GigabitEthernet 0/4 group-policy 2001
[SecPathA-pim] quit
# On SecPath B, configure the service scope of RP advertisements and configure GigabitEthernet
0/3 as a C-BSR and C-RP of admin-scoped zone 2.
[SecPathB] acl number 2001
[SecPathB-acl-basic-2001] rule permit source 239.0.0.0 0.255.255.255
[SecPathB-acl-basic-2001] quit
[SecPathB] pim
[SecPathB-pim] c-bsr group 239.0.0.0 8
[SecPathB-pim] c-bsr GigabitEthernet 0/3
[SecPathB-pim] c-rp GigabitEthernet 0/3 group-policy 2001
[SecPathB-pim] quit
# On SecPath C, configure GigabitEthernet 0/1 as a C-BSR and C-RP in the global-scoped zone.
[SecPathC] pim
[SecPathC-pim] c-bsr global
[SecPathC-pim] c-bsr GigabitEthernet 0/1
[SecPathC-pim] c-rp GigabitEthernet 0/1
[SecPathC-pim] quit
5.
Verify the configuration:
To display BSR election information and C-RP information on a firewall, use the display pim
bsr-info command. For example:
# Display BSR information and the locally configured C-RP information on SecPath A.
[SecPathA] display pim bsr-info
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer