R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

889
Description
Use c-rp holdtime to configure the global C-RP timeout time, namely, the length of time that the BSR waits
for a C-RP-Adv message from C-RPs.
Use undo c-rp holdtime to restore the default.
By default, the C-RP timeout time is 150 seconds.
Because a non-BSR router refreshes its C-RP timeout time through bootstrap messages, to prevent loss of
C-RP information in bootstrap messages, make sure that the C-RP timeout time is not smaller than the
interval at which the BSR sends bootstrap messages. The recommended C-RP timeout setting is 2.5 times
the BS period or longer.
Related commands: c-bsr interval and c-rp.
Examples
# Set the global C-RP timeout time to 200 seconds.
<Sysname> system-view
[Sysname] pim ipv6
[Sysname-pim6] c-rp holdtime 200
crp-policy (IPv6 PIM view)
Syntax
crp-policy acl6-number
undo crp-policy
View
IPv6 PIM view
Default level
2: System level
Parameters
acl6-number: Advanced IPv6 ACL number, in the range of 3000 to 3999. When the IPv6 ACL is defined,
the source keyword in the rule command specifies the IPv6 address of a C-RP and the destination
keyword specifies the IPv6 address range of the IPv6 multicast groups that the C-RP will serve.
Description
Use crp-policy to configure a legal C-RP address range and the range of served IPv6 multicast groups,
so as to guard against C-RP spoofing.
Use undo crp-policy to remove the restrictions in C-RP address ranges and the ranges of served IPv6
multicast groups.
By default, no restrictions are defined for C-RP address ranges and the address ranges of served groups.
Namely, all received C-RP messages are regarded legal.
The crp-policy command filters the IPv6 multicast group ranges advertised by C-RPs based on the group
prefixes. For example, if the IPv6 multicast group range advertised by a C-RP is FF0E:0:1::/96 and the
legal IPv6 multicast group range defined by the crp-policy command is FF0E:0:1::/120, the IPv6
multicast groups in the range of FF0E:0:1::/96 are allowed to pass.
Related commands: c-rp.