From: Dillon Yang (gzdillon@hotmail.com)
Date: Tue Mar 08 2005 - 12:21:47 GMT-3
Hi, Tony:
There are a group of routers that use only one RP and want to prevent incoming multicast flood attack.
In other words, these router should allow any multicast packets out and prohibit the other multicast source. Should I do a boundary at the edge of these routers?
TIA
dillon
----- Original Message -----
From: "Tony Schaffran" <groupstudy@cconlinelabs.com>
To: "'Dillon Yang'" <gzdillon@hotmail.com>; "'Group Study'" <ccielab@groupstudy.com>
Sent: Tuesday, March 08, 2005 10:25 PM
Subject: RE: multicast flood attack
> Is this for a switch or router?
>
> If it is for the 3550, have you looked up storm-control?
>
> Tony Schaffran
> Network Analyst
> CCIE #11071
> CCNP, CCNA, CCDA,
> NNCDS, NNCSS, CNE, MCSE
>
> www.cconlinelabs.com
> Your #1 choice for online Cisco rack rentals.
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Dillon Yang
> Sent: Tuesday, March 08, 2005 6:03 AM
> To: Group Study
> Subject: multicast flood attack
>
>
> Hi, all:
>
> In a case if you are asked to prevent multicast flood attack, how can you
> perform it?
> Is it enough that comand "ip multicast boundary" and command "ip pim
> bsr-candidate"?
> TIA
> dillon
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Apr 03 2005 - 17:56:43 GMT-3