3com S7906E Guide De Référence

 

1-8 

crp-policy acl6-number 

IPv6 PIM view 

2: System level 

acl6-number: Advanced IPv6 ACL number, in the range of 3000 to 3999. When the IPv6 ACL is defined, 

the source keyword in the rule command specifies the IPv6 address of a C-RP and the destination 

keyword specifies the IPv6 address range of the IPv6 multicast groups that the C-RP will serve.  

Use the crp-policy command to configure a legal C-RP address range and the range of served IPv6 

multicast groups, so as to guard against C-RP spoofing.  

Use the undo crp-policy command to remove the restrictions in C-RP address ranges and the ranges 

of served IPv6 multicast groups.  

By default, there are no restrictions on C-RP address ranges and the address ranges of served groups, 

namely all received C-RP messages are assumed to be legal. 

Note that the crp-policy command filters the IPv6 multicast group ranges advertised by C-RPs based 

on the group prefixes. For example, if the IPv6 multicast group range advertised by a C-RP is 

FF0E:0:1::/96 while the legal IPv6 multicast group range defined by the crp-policy command is 

FF0E:0:1::/120, the IPv6 multicast groups in the range of FF0E:0:1::/96 are allowed to pass. 

Related commands: c-rp. 

# Configure a C-RP address range so that only routers in the address range of 2001::2/64 can be 

C-RPs.  

<Sysname> system-view 

[Sysname] acl ipv6 number 3000 

[Sysname-acl6-adv-3000] rule permit ipv6 source 2001::2 64 

[Sysname-acl6-adv-3000] quit 

[Sysname] pim ipv6 

[Sysname-pim6] crp-policy 3000