From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Wed Aug 16 2006 - 15:33:44 ART
Assuming that your RP address is learned via a dynamic routing
protocol you would first want to make sure that your routing domain is
secure. This would mean authentication, route filtering, URPF, etc.
As for preventing additional RPs from being learned via Auto-RP you can
use the "ip pim accept-rp" or the "ip pim rp-announce-filter" features.
You can also filter Auto-RP or BSR at the interface level with the "ip
multicast-boundary" command or the "ip pim bsr-border" commands. What
specifically are you trying to accomplish?
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
24/7 Support: http://forum.internetworkexpert.com
Live Chat: http://www.internetworkexpert.com/chat/
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> Patricia Loreal
> Sent: Wednesday, August 16, 2006 1:18 PM
> To: Cisco certification
> Subject: PIM Spoofing.
>
> Hello Dear,
>
> How to configure a PIM Sparse Multicast domain to prevent RP
spoofing.??
>
> Thanks
> Patri.
>
>
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART