R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

917
Related commands: holdtime assert, holdtime join-prune, and pim ipv6 holdtime assert.
Examples
# Set the join/prune timeout time to 280 seconds on GigabitEthernet 0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] pim ipv6 holdtime join-prune 280
pim ipv6 neighbor-policy
Syntax
pim ipv6 neighbor-policy acl6-number
undo pim ipv6 neighbor-policy
View
Interface view
Default level
2: System level
Parameters
acl6-number: Basic IPv6 ACL number, in the range of 2000 to 2999. When the IPv6 ACL is defined, the
source keyword in the rule command specifies a legal source address range for hello messages.
Description
Use pim ipv6 neighbor-policy to configure a legal source address range for hello messages to guard
against hello message spoofing.
Use undo pim ipv6 neighbor-policy to restore the default.
By default, no source address range for hello messages is configured. That is, all the received hello
messages are considered legal.
Examples
# Configure a legal source address range for hello messages on GigabitEthernet 0/1 so that only the
devices on the FE80:101::101/64 subnet can become PIM neighbors of this router.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source fe80:101::101 64
[Sysname-acl6-basic-2000] quit
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] pim ipv6 neighbor-policy 2000
pim ipv6 require-genid
Syntax
pim ipv6 require-genid
undo pim ipv6 require-genid
View
Interface view