R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101
473
[FirewallB-GigabitEthernet0/3] quit
[FirewallB] interface gigabitethernet 0/4
[FirewallB-GigabitEthernet0/4] multicast boundary 239.0.0.0 8
[FirewallB-GigabitEthernet0/4] quit
# On Firewall C, configure GigabitEthernet0/3 and GigabitEthernet0/4 as the boundary of
admin-scope zone 2.
<FirewallC> system-view
[FirewallC] interface gigabitethernet 0/3
[FirewallC-GigabitEthernet0/3] multicast boundary 239.0.0.0 8
[FirewallC-GigabitEthernet0/3] quit
[FirewallC] interface gigabitethernet 0/4
[FirewallC-GigabitEthernet0/4] multicast boundary 239.0.0.0 8
[FirewallC-GigabitEthernet0/4] quit
# On Firewall D, configure GigabitEthernet0/3 as the boundary of admin-scope zone 2.
<FirewallD> system-view
[FirewallD] interface gigabitethernet 0/3
[FirewallD-GigabitEthernet0/3] multicast boundary 239.0.0.0 8
[FirewallD-GigabitEthernet0/3] quit
4. Configure C-BSRs and C-RPs
# On Firewall B, configure the service scope of RP advertisements and configure GigabitEthernet0/2 as
a C-BSR and C-RP of admin-scope zone 1.
[FirewallB] acl number 2001
[FirewallB-acl-basic-2001] rule permit source 239.0.0.0 0.255.255.255
[FirewallB-acl-basic-2001] quit
[FirewallB] pim
[FirewallB-pim] c-bsr group 239.0.0.0 8
[FirewallB-pim] c-bsr gigabitethernet 0/2
[FirewallB-pim] c-rp gigabitethernet 0/2 group-policy 2001
[FirewallB-pim] quit
# On Firewall D, configure the service scope of RP advertisements and configure GigabitEthernet0/1 as
a C-BSR and C-RP of admin-scope zone 2.
[FirewallD] acl number 2001
[FirewallD-acl-basic-2001] rule permit source 239.0.0.0 0.255.255.255
[FirewallD-acl-basic-2001] quit
[FirewallD] pim
[FirewallD-pim] c-bsr group 239.0.0.0 8
[FirewallD-pim] c-bsr gigabitethernet 0/1
[FirewallD-pim] c-rp gigabitethernet 0/1 group-policy 2001
[FirewallD-pim] quit
# On Firewall F, configure GigabitEthernet0/1 as a C-BSR and C-RP in the global scope zone.
<FirewallF> system-view
[FirewallF] pim
[FirewallF-pim] c-bsr global
[FirewallF-pim] c-bsr gigabitethernet 0/1
[FirewallF-pim] c-rp gigabitethernet 0/1
[FirewallF-pim] quit