F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Command Reference-6PW100

1002
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] pim ipv6 holdtime join-prune 280
Related commands
• holdtime assert
• holdtime join-prune
• pim ipv6 holdtime assert
pim ipv6 neighbor-policy
Use pim ipv6 neighbor-policy to configure a legal source address range for hello messages to guard
against hello message spoofing.
Use undo pim ipv6 neighbor-policy to restore the default.
Syntax
pim ipv6 neighbor-policy acl6-number
undo pim ipv6 neighbor-policy
Default
No source address range for hello messages is configured. That is, all the received hello messages are
considered legal.
Views
Interface view
Default command level
2: System level
Parameters
acl6-number: Specifies a basic IPv6 ACL number, in the range of 2000 to 2999. When the IPv6 ACL is
defined, the source keyword in the rule command specifies a legal source address range for hello
messages.
Examples
# Configure a legal source address range for hello messages on GigabitEthernet 0/1 so that only the
devices on the FE80:101::101/64 subnet can become PIM neighbors of this router.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source fe80:101::101 64
[Sysname-acl6-basic-2000] quit
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] pim ipv6 neighbor-policy 2000
pim ipv6 require-genid
Use the pim ipv6 require-genid command enable rejection of hello messages without Generation_ID.
Use undo pim ipv6 require-genid to restore the default.
Syntax
pim ipv6 require-genid