From: NET HE (he_net@hotmail.com)
Date: Fri Jan 30 2009 - 00:07:23 ARST
Hi,
Based on my understanding and lab result, cmd "IP PIM ACCEPT-RP" is used to
filter group join-message by any routers between RP and stream receivers. In
other words, the router will only allow accepted (RP, GROUP) join-message
sending toward the RP when it is configured to accept that specific RP for
that specific group.
Therefore, when you check RP mapping on the configured router, you are still
able to see all mappings advertised by MA. But when you check ip mroute, you
will see the accepted (RP, GROUP) showing the desired RP. For the unaccpted
(RP, GROUP), it shows RP as 0.0.0.0. And on the upstream router, Ip mroute
shows nothing for unaccepted (RP, GROUP) because the join-message is filtered
out by down stream router.Best Regards, Net (Xin) He > From:
jscrivener@ipexpert.com> To: ccie.tobe81@gmail.com> CC:
ccielab@groupstudy.com> Subject: RE: rp-announce-filter> Date: Thu, 29 Jan
2009 15:48:39 -0500> > Hey Raul,> > > > You could use the "ip pim accept-rp"
command on the clients if you wanted.> That gives the clients the option to
ignore certain RP announcements for> RP's that they don't trust.> > > > So to
sum up:> > > > An RP can filter which groups it will advertise (ip pim
send-rp-announce).> > A mapping agent can filter which RP's it will allow per
group (ip pim> rp-announce-filter).> > A client can filter which RP's it will
allow to be an RP (ip pim accept-rp).> > > > Cheers,> > > > Jared Scrivener
CCIE3 #16983 (R&S, Security, SP), CISSP> > Technical Instructor - IPexpert,
Inc.> > Telephone: +1.810.326.1444> > Fax: +1.810.454.0130> > Mailto:
<mailto:jscrivener@ipexpert.com> jscrivener@ipexpert.com> > From: CCIE To Be
[mailto:ccie.tobe81@gmail.com] > Sent: Thursday, 29 January 2009 3:34 PM> To:
jscrivener@ipexpert.com> Cc: Cisco certification> Subject: Re:
rp-announce-filter> > > > > > Hi Jared,> > > > Thanks for the response. So if
filtering is not particularly required on> mapping agent than we can ONLY
filter at RP ?> > > > > > HTH,> > On Thu, Jan 29, 2009 at 8:00 PM, Jared
Scrivener <jscrivener@ipexpert.com>> wrote:> > Hey Raul,> > In option 3 you
only need the "rp-announce-filter" if you are required to do> the filtering on
the mapping agent.> > If you used the "send-rp-announce" with a group-list
already on the RP> itself then the RP is only advertising itself for a finite
set of groups and> the mapping agent filtering would be unnecessary.> >
Cheers,> > Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP> Technical
Instructor - IPexpert, Inc.> Telephone: +1.810.326.1444> Fax: +1.810.454.0130>
Mailto: jscrivener@ipexpert.com> > > > -----Original Message-----> From:
nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of CCIE> To Be>
Sent: Thursday, 29 January 2009 4:36 AM> To: Cisco certification> Subject:
rp-announce-filter> > Hi All,> > My question is regarding filtering of groups
for RP. We have following> options according to mode of RP advertisment,> > 1)
ip pim rp-address 1.1.1.1 [ *access-list* ] ( On RP )> > 2) ip pim
rp-candidate loopback0 *group-list yy* ( On RP )> **> 3) ip pim
send-rp-announce loopback0 *group-list yy* ( On RP )> ip pim
rp-announce-filter *group-list yy* *rp-list xx * ( On Mapping> Agent )> > In
option 3 , rp-announce-filter is mandatory on MA ? I observerd that> without
using this we can get the same result untill and unless it is> specific
requirement in the task that we should filter on RP and MA as well.> > Need
you comments on this.> > HTH,> > Raul> > > > Blogs and organic groups at
http://www.ccie.net <http://www.ccie.net/> > >
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:40 ARST