From: Ubaid Iftikhar \(AU\) (Magmax@bigpond.net.au)
Date: Sat Oct 28 2006 - 21:31:32 ART
Very good resource for muticast
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Patricia Loreal
Sent: Thursday, 17 August 2006 5:52 AM
To: Brian McGahan
Cc: Cisco certification
Subject: Re: PIM Spoofing.
Brian,
http://www.cisco.com/en/US/tech/tk828/technologies_white_paper09186a00800d6b
63.shtml#wp1033721
Thanks I apreciate your help, I love you
Patricia
http://www.papeillot.nl/foto/bruidskapsel-patricia1-september-2005.jpg
On 8/16/06, Patricia Loreal <ploreal@gmail.com> wrote:
>
> Hi Brian,
>
> The term "spoofing" is generally regarded as slang, but refers to the act
> of fooling -- that is, presenting a false truth in a credible way. I'm
> looking for a AUTO-RP or BSR to prevent Rouge RPs to register to the
Mapping
> Agent
>
>
> Thanks
> Patricia
>
>
>
> On 8/16/06, Brian McGahan <bmcgahan@internetworkexpert.com> wrote:
> >
> > Define "spoofing" that you are trying to prevent.
> >
> >
> >
> > Brian McGahan , CCIE #8593
> >
> > bmcgahan@ internetworkexpert.com
> >
> >
> >
> > Internetwork Expert, Inc.
> >
> > http://www.InternetworkExpert.com <http://www.internetworkexpert.com/>
> >
> > Toll Free: 877-224-8987 x 705
> >
> > Outside US: 775-826-4344 x 705
> >
> > 24/7 Support: http://forum.internetworkexpert.com
> >
> > Live Chat: http://www.internetworkexpert.com/chat/
> >
> >
> > ------------------------------
> >
> > *From:* Patricia Loreal [mailto:ploreal@gmail.com]
> > *Sent:* Wednesday, August 16, 2006 1:56 PM
> > *To:* Brian McGahan
> > *Cc:* Cisco certification
> > *Subject:* Re: PIM Spoofing.
> >
> >
> >
> > Hello Dear Brian, thanks for your reply,
> >
> >
> >
> > I have 2 RPs in my network 200.1.1.1 and 200.5.5.5.5, and I want to
> > prevent spoofing of one of the RPs (only 200.1.1.1), but IGMP Groups
> > that are Registered with RP5 ( 200.5.5.5) should be still avertised by
> > the Mapping Agent.
> >
> >
> >
> > How can I do that Using BSR or Auto-RP,
> >
> > Thanks Patricia.
> >
> > On 8/16/06, *Brian McGahan* < bmcgahan@internetworkexpert.com> wrote:
> >
> > Assuming that your RP address is learned via a dynamic routing
> > protocol you would first want to make sure that your routing domain is
> > secure. This would mean authentication, route filtering, URPF, etc.
> > As for preventing additional RPs from being learned via Auto-RP you can
> > use the "ip pim accept-rp" or the "ip pim rp-announce-filter" features.
> > You can also filter Auto-RP or BSR at the interface level with the "ip
> > multicast-boundary" command or the "ip pim bsr-border" commands. What
> > specifically are you trying to accomplish?
> >
> >
> > HTH,
> >
> > Brian McGahan, CCIE #8593
> > bmcgahan@internetworkexpert.com
> >
> > Internetwork Expert, Inc.
> > http://www.InternetworkExpert.com
> > Toll Free: 877-224-8987 x 705
> > Outside US: 775-826-4344 x 705
> > 24/7 Support: http://forum.internetworkexpert.com
> > Live Chat: http://www.internetworkexpert.com/chat/
> >
> >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com ] On Behalf
> > Of
> > > Patricia Loreal
> > > Sent: Wednesday, August 16, 2006 1:18 PM
> > > To: Cisco certification
> > > Subject: PIM Spoofing.
> > >
> > > Hello Dear,
> > >
> > > How to configure a PIM Sparse Multicast domain to prevent RP
> > spoofing.??
> > >
> > > Thanks
> > > Patri.
> > >
> > >
> > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Nov 01 2006 - 07:29:07 ART
