3com S7906E Manuel De Montage

 

1-29 

z 

Maximum number of (S, G) entries in a join/prune message  

No matter in an IPv6 PIM-DM domain or an IPv6 PIM-SM domain, routers can check passing-by IPv6 

multicast data based on the configured filtering rules and determine whether to continue forwarding the 

IPv6 multicast data. In other words, IPv6 PIM routers can act as IPv6 multicast data filters. These filters 

can help implement traffic control on one hand, and control the information available to downstream 

receivers to enhance data security on the other hand. 

Follow these steps to configure an IPv6 multicast data filter:  

To do... 

Use the command... 

Remarks 

Enter system view 

— 

Enter IPv6 PIM view 

pim ipv6 

— 

Configure an IPv6 multicast 
group filter  

source-policy acl6-number 

Required 

No IPv6 multicast data filter by 
default  

 

z 

Generally, a smaller distance from the filter to the IPv6 multicast source results in a more 

remarkable filtering effect. 

z 

This filter works not only on independent IPv6 multicast data but also on IPv6 multicast data 

encapsulated in register messages.  

 

Along with the wide applications of IPv6 PIM, the security requirement for the protocol is becoming 

more and more demanding. The establishment of correct IPv6 PIM neighboring relationships is a 

prerequisite for secure application of IPv6 PIM. You can configure a legal source address range for hello 

messages on interfaces of routers to ensure the correct IPv6 PIM neighboring relationships and thus to 

guide against IPv6 PIM message attacks.  

Follow these steps to configure a hello message filter:  

Enter system view 

— 

Enter interface view 

interface interface-type 
interface-number 

— 

Configure a hello message 
filter 

pim ipv6 neighbor-policy 
acl6-number 

Required 

No hello message filter by 
default.