H3C Technologies H3C SecPath F1000-E User Manual
Page 698
673
[SecPathA-GigabitEthernet0/2] quit
[SecPathA] interface Gigabitethernet 0/3
[SecPathA-GigabitEthernet0/3] pim sm
[SecPathA-GigabitEthernet0/3] quit
[SecPathA] interface loopback 0
[SecPathA-LoopBack0] pim sm
[SecPathA-LoopBack0] quit
The configuration on SecPath B, SecPath C and SecPath D is similar to that on SecPath A. (Details
not shown.)
# Configure PIM domain borders on SecPath C.
[SecPathC] interface Gigabitethernet 0/3
[SecPathC-Gigabitethernet0/3] pim bsr-boundary
[SecPathC-Gigabitethernet0/3] quit
[SecPathC] interface Gigabitethernet 0/4
[SecPathC-Gigabitethernet0/4] pim bsr-boundary
[SecPathC-Gigabitethernet0/4] quit
[SecPathC] interface Gigabitethernet 0/2
[SecPathC-Gigabitethernet0/2] pim bsr-boundary
[SecPathC-Gigabitethernet0/2] quit
The configuration on SecPath A, SecPath B and SecPath D is similar to the configuration on
SecPath C. (Details not shown.)
3.
Configure C-BSRs and C-RPs:
# Configure Loopback 0 on SecPath A as a C-BSR and a C-RP.
[SecPathA] pim
[SecPathA-pim] c-bsr loopback 0
[SecPathA-pim] c-rp loopback 0
[SecPathA-pim] quit
The configuration on SecPath C and SecPath D is similar to the configuration on SecPath A.
(Details not shown.)
4.
Configure MSDP peers:
# Configure an MSDP peer on SecPath A.
[SecPathA] msdp
[SecPathA-msdp] peer 192.168.1.2 connect-interface Gigabitethernet 0/3
[SecPathA-msdp] quit
# Configure MSDP peers on SecPath C.
[SecPathC] msdp
[SecPathC-msdp] peer 192.168.1.1 connect-interface Gigabitethernet 0/3
[SecPathC-msdp] peer 10.110.5.2 connect-interface Gigabitethernet 0/2
[SecPathC-msdp] quit
# Configure an MSDP peer on SecPath D.
[SecPathD] msdp
[SecPathD-msdp] peer 10.110.5.1 connect-interface Gigabitethernet 0/3
[SecPathD-msdp] quit
5.
Configure SA message filtering rules:
# Configure an SA message filter on SecPath C so that SecPath C will not forward SA messages
for (Source 1, 225.1.1.0/30) to SecPath D.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer