From: Scott Morris (swm@emanon.com)
Date: Wed Jul 19 2006 - 11:11:03 ART
For spoofing protection, there are constraints that can be placed on your
Mapping Agent.
Check out:
http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration
_guide_chapter09186a00801f0a4f.html#19721
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
smorris@ipexpert.com
http://www.ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Ivan
Sent: Wednesday, July 19, 2006 6:24 AM
To: ccielab@groupstudy.com; Stavros Filargyropoulos
Subject: Re: Multicast
Once task restrict using dense mode, you can't using ip pim
sparce-dense-mode.
Instead AutoRP need use BSR. As for RP spoofing, think that ip pim
bsr-border must be used at border routers.
> Hi,
>
> if a task tells you to configure so that RP spoofing should not
> happen; and one restriction tells that ip pim dense is not allowed but
> they are multicast groups that the RP does not covers, could I use ip
> pim sparse-dense-mode and ip pim rp-announce-filter announcements at
> the mapping agent?
>
> tia
> *Stav.
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
-- Ivan
This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:48 ART