H3C Technologies H3C SecPath F1000-E - Manual (Page 937)

912
Enable IPv6 forwarding on routers and the firewall, and configure an IPv6 address and prefix
length for each interface as shown in Figure 403 . (Details not shown.)
Configure OSPF on the routers and the firewall to make sure the network-layer in the IPv6 PIM-SM
domain is interoperable and routing information among the routers and the firewall can be
dynamically updated. (Details not shown.)
2. Enable IPv6 multicast routing, enable IPv6 PIM-SM on each interface and enable MLD and MLD
SSM mapping on the host-side interface:
# Enable IPv6 multicast routing on SecPath, enable IPv6 PIM-SM on each interface and enable
MLD (version 2) and MLD SSM mapping on GigabitEthernet 0/1.
system-view
[SecPath] multicast ipv6 routing-enable
[SecPath] interface GigabitEthernet 0/1
[SecPath-GigabitEthernet0/1] mld enable
[SecPath-GigabitEthernet0/1] mld version 2
[SecPath-GigabitEthernet0/1] mld ssm-mapping enable
[SecPath-GigabitEthernet0/1] pim ipv6 sm
[SecPath-GigabitEthernet0/1] quit
[SecPath] interface GigabitEthernet 0/2
[SecPath-GigabitEthernet0/2] pim ipv6 sm
[SecPath-GigabitEthernet0/2] quit
[SecPath] interface GigabitEthernet 0/3
[SecPath-GigabitEthernet0/3] pim ipv6 sm
[SecPath-GigabitEthernet0/3] quit
# Enable IPv6 multicast routing on Router A, and enable IPv6 PIM-SM on each interface.
system-view
[RouterA] multicast ipv6 routing-enable
[RouterA] interface GigabitEthernet 1/1
[RouterA-GigabitEthernet1/1] pim ipv6 sm
[RouterA-GigabitEthernet1/1] quit
[RouterA] interface GigabitEthernet 1/2
[RouterA-GigabitEthernet1/2] pim ipv6 sm
[RouterA-GigabitEthernet1/2] quit
[RouterA] interface GigabitEthernet 1/3
[RouterA-GigabitEthernet1/3] pim ipv6 sm
[RouterA-GigabitEthernet1/3] quit
The configuration on Router B and Router C is similar to that on Router A.
3. Configure a C-BSR and a C-RP:
# Configure C-BSR and C-RP interfaces on SecPath.
[SecPath] pim ipv6
[SecPath-pim6] c-bsr 1003::2
[SecPath-pim6] c-rp 1003::2
[SecPath-pim6] quit
4. Configure the IPv6 SSM group range:
# Configure the IPv6 SSM group range FF3E::/64 on SecPath.
[SecPath] acl ipv6 number 2000
[SecPath-acl6-basic-2000] rule permit source ff3e:: 64
[SecPath-acl6-basic-2000] quit