From: Jared Scrivener (jscrivener@ipexpert.com)
Date: Thu Jan 29 2009 - 18:48:39 ARST
Hey Raul,
You could use the "ip pim accept-rp" command on the clients if you wanted.
That gives the clients the option to ignore certain RP announcements for
RP's that they don't trust.
So to sum up:
An RP can filter which groups it will advertise (ip pim send-rp-announce).
A mapping agent can filter which RP's it will allow per group (ip pim
rp-announce-filter).
A client can filter which RP's it will allow to be an RP (ip pim accept-rp).
Cheers,
Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP
Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Mailto: <mailto:jscrivener@ipexpert.com> jscrivener@ipexpert.com
From: CCIE To Be [mailto:ccie.tobe81@gmail.com]
Sent: Thursday, 29 January 2009 3:34 PM
To: jscrivener@ipexpert.com
Cc: Cisco certification
Subject: Re: rp-announce-filter
Hi Jared,
Thanks for the response. So if filtering is not particularly required on
mapping agent than we can ONLY filter at RP ?
HTH,
On Thu, Jan 29, 2009 at 8:00 PM, Jared Scrivener <jscrivener@ipexpert.com>
wrote:
Hey Raul,
In option 3 you only need the "rp-announce-filter" if you are required to do
the filtering on the mapping agent.
If you used the "send-rp-announce" with a group-list already on the RP
itself then the RP is only advertising itself for a finite set of groups and
the mapping agent filtering would be unnecessary.
Cheers,
Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP
Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Mailto: jscrivener@ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of CCIE
To Be
Sent: Thursday, 29 January 2009 4:36 AM
To: Cisco certification
Subject: rp-announce-filter
Hi All,
My question is regarding filtering of groups for RP. We have following
options according to mode of RP advertisment,
1) ip pim rp-address 1.1.1.1 [ *access-list* ] ( On RP )
2) ip pim rp-candidate loopback0 *group-list yy* ( On RP )
**
3) ip pim send-rp-announce loopback0 *group-list yy* ( On RP )
ip pim rp-announce-filter *group-list yy* *rp-list xx * ( On Mapping
Agent )
In option 3 , rp-announce-filter is mandatory on MA ? I observerd that
without using this we can get the same result untill and unless it is
specific requirement in the task that we should filter on RP and MA as well.
Need you comments on this.
HTH,
Raul
Blogs and organic groups at http://www.ccie.net <http://www.ccie.net/>
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:40 ARST