R0106-HP MSR Router Series IP Multicast Command Reference(V7)

256
Syntax
crp-policy acl6-number
undo crp-policy
Default
No restrictions are defined for the legal C-RP address range and the IPv6 multicast group range, and all
received C-RP messages are regarded as legal.
Views
IPv6 PIM view
Predefined user roles
network-admin
Parameters
acl6-number: Specifies an IPv6 advanced ACL number in the range of 3000 to 3999.
Usage guidelines
To guard against C-RP spoofing, you can use this command to configure a legal C-RP address range and
the multicast group range to which the C-RP is designated.
In an ACL, the source keyword defines the legal C-RP IPv6 address range, and the destination keyword
defines the IPv6 multicast group range to which the C-RP is designated. If the source keyword is not
specified in the ACL, all C-RPs are considered to be legal. If the destination keyword is not specified in
the ACL, the C-RPs are supposed to be designated to all IPv6 multicast groups.
If you specify a VPN instance in the ACL, the ACL does not take effect. The other optional parameters
except the time-range keyword and the fragment keyword are ignored.
When the device compares the advertisement message against the destination field in the ACL, it uses
only the prefix of the IPv6 multicast group range in the advertisement message. For example, the IPv6
multicast group range specified in a C-RP advertisement message is FF0E:0:1::/96. If the prefix FF0E:0:1::
is in the IPv6 multicast group range specified in the destination field of the ACL, the advertisement
message passes the filtering. Otherwise, the advertisement message is discarded.
Examples
# On the public network, configure the legal C-RP address range to 2001::2/64 and the IPv6 multicast
group range to FF03::101/64, so that only devices in the address range of 2001::2/64 can be C-RPs for
the IPv6 multicast group range FF03::101/64.
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule permit ipv6 source 2001::2 64 destination ff03::101 64
[Sysname-acl6-adv-3000] quit
[Sysname] ipv6 pim
[Sysname-pim6] crp-policy 3000
Related commands
c-rp (IPv6 PIM view)
display ipv6 pim bsr-info
Use display ipv6 pim bsr-info to display BSR information in the IPv6 PIM-SM domain.