Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
441442443444445446447448449450
Table Of Contents
436
View
Public instance PIM view
Default level
2: System level
Parameters
acl-number: Advanced ACL number, in the range of 3000 to 3999. When the ACL is defined, the source
keyword in the rule command specifies the address of a C-RP and the destination keyword specifies the
address range of the multicast groups that the C-RP will serve.
Description
Use the crp-policy command to configure a legal C-RP address range and the range of served multicast
groups, so as to guard against C-RP spoofing.
Use the undo crp-policy command to remove the restrictions in C-RP address ranges and the ranges of
served multicast groups.
By default, there are no restrictions on C-RP address ranges and the address ranges of served groups,
namely all received C-RP messages are accepted.
The crp-policy command filters the multicast group ranges advertised by C-RPs based on the group
prefixes. For example, if the multicast group range advertised by a C-RP is 224.1.0.0/16 while the legal
group range defined by the crp-policy command is 224.1.0.0/30, the multicast groups in the range of
224.1.0.0/16 are allowed to pass.
Related commands: c-rp.
Examples
# In the public instance, configure a C-RP address range so that only routers in the address range of
1.1.1.1 / 24 c a n b e C - R Ps .
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit ip source 1.1.1.1 0.0.0.255
[Sysname-acl-adv-3000] quit
[Sysname] pim
[Sysname-pim] crp-policy 3000
display pim bsr-info
Syntax
display pim bsr-info
View
Any view
Default level
1: Monitor level
Parameters
None