From: The Great Ryan (pv.ryan@gmail.com)
Date: Thu Oct 20 2005 - 00:04:41 GMT-3
Ok. the "group-list" option in rp-announce-filter is used for security
reason. I want to know what is the use of "group-list" option in
rp-send-announce ?
I only know that group-list option is used to limit the join-group
access of RP. But not sure the result when use "group-list" in
"rp-announce-filter" and "rp-send-announce".
Thanks!
Ryan
2005/10/20, Jian Gu <guxiaojian@gmail.com>:
> ip pim rp-announce-filter should always be configured on mapping agents,
> what you've configured on RP (group-list etc) is irrelavent, the command is
> there mainly for security reason, immagine what will happen if a RP is
> adverstising bogus RP-address.
>
>
> On 10/19/05, The Great Ryan <pv.ryan@gmail.com> wrote:
> >
> > Hi, Group,
> >
> > ---(e0)R1(s1)------(s1)R2(e0)---
> >
> >
> > I setup a lab for RP Filtering by using Auto-RP
> > R1 acts as RP announcement
> > R2 acts as mapping agent
> >
> > In R1, I already limit the use of RP by access-list 11 (i.e. 224.0.0.0
> > 7.255.255.255)
> > Is it necessary to also set a RP-filter on the mapping agent to limit
> > the use of RP?
> > I have no idea where I should put "ip pim rp-announce-filter" in
> > multicast network. Thanks !
> >
> > Ryan
> > =======================================
> > R2#show ip pim rp mapping
> > PIM Group-to-RP Mappings
> > This system is an RP-mapping agent (Loopback0)
> >
> > Group(s) 224.0.0.0/5
> > RP 172.16.1.1 (?), v2v1
> > Info source: 172.16.1.1 (?), elected via Auto-RP
> > Uptime: 00:20:11, expires: 00:02:48
> >
> > ================R1 Config========================
> >
> > interface Loopback 0
> > ip address 172.16.1.1 255.255.255.0
> > interface serial 1
> > ip pim sparse-dense-mode
> > !
> > ip pim send-rp-announce Loopback0 scope 15 group-list 11
> > access-list 11 permit 224.0.0.0 7.255.255.255
> > ================R2 Config========================
> > R2
> >
> > interface s1
> > ip pim sparse-dense-mode
> > !
> > ip pim send-rp-discovery Loopback0 scope 15
> > ip pim rp-announce-filter rp-list 1 group-list 11
> > access-list 1 permit 172.16.1.1
> > access-list 11 permit 224.0.0.0 7.255.255.255
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:51 GMT-3