Title | Size | Download |
---|---|---|
04-PIM Commands | 104.23 KB |
Chapter 1 PIM Configuration Commands
1.1 PIM Configuration Commands
1.1.11 display pim routing-table
1.1.20 pim-sm routing-table aging-time
1.1.23 reset pim routing-table
Chapter 1 PIM Configuration Commands
1.1 PIM Configuration Commands
1.1.1 bsr-policy
bsr-policy acl-number
undo bsr-policy
Parameters
acl-number: ACL number imported in BSR filtering policy, in the range of 2000 to 2999.
Use the bsr-policy command to limit the range of legal BSRs to prevent BSR spoofing.
Use the undo bsr-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.
In the PIM SM network using BSR mechanism, every C-BSR may win the BSR election and take the authority to advertise RP information in the network. The following are typical BSR spoofing cases and the corresponding preventive measures:
l Some maliciously configured hosts can forge bootstrap messages to fool routers and change RP mappings. As a bootstrap message is a multicast packet with a TTL of 1, such attacks often occur on border routers. Because a BSR is inside the network whereas hosts are outside the network, you can protect a BSR against attacks from external hosts by enabling the border routers to perform neighbor checks and RPF checks on bootstrap messages and discard unwanted messages.
l When a router in the network is controlled by an attacker or when an illegal router is present in the network, the attacker can configure this router as a C-BSR and make it win BSR election to control the right of advertising RP information in the network. After being configured as a C-BSR, a router automatically floods the network with bootstrap messages. As a bootstrap message has a TTL value of 1, the whole network will not be affected as long as the neighbor router discards these bootstrap messages. Therefore, with legal BSR address ranges, such as 1.1.1.1/32 and 1.1.1.2/32, configured on all routers in the entire network, all these routers will discard bootstrap messages from out of the address ranges of 1.1.1.1/32 and 1.1.1.2/32. Thus, routers beyond the configured address ranges will be unable to become the BSR.
The above-mentioned preventive measures can partially protect the security of BSRs in a network. However, if a legal BSR is controlled by an attacker, the above-mentioned problem will still occur.
The source parameter in the rule command is translated as BSR address in the bsr-policy command.
Related commands: acl, rule.
Examples
# Configure BSR filtering policy, only 101.1.1.1/32 can be BSR and all others are illegal.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] acl number 2000
[H3C-acl-basic-2000] rule 0 permit source 101.1.1.1 0
[H3C-acl-basic-2000] quit
[H3C] pim
[H3C-pim] bsr-policy 2000
1.1.2 c-bsr
c-bsr interface-type interface-number hash-mask-len [ priority ]
undo c-bsr
Parameters
interface-type interface-number:. Interface type and interface number, used to specify the interface. The candidate BSR is configured on the interface. PIM-SM must be enabled on the interface first.
hash-mask-len: Length of the mask. The value ranges from 0 to 32.
priority: Priority of the candidate BSR. The larger the value of the priority, the higher the priority of the BSR. The value ranges from 0 to 255. By default, the priority is 0.
Use the c-bsr command to configure a candidate BSR.
Use the undo c-bsr command to remove the candidate BSR configured.
By default, no candidate BSR is set.
When configuring the candidate BSR, make sure sufficient bandwidth to be reserved for information exchange between BSR and other devices in the PIM domain.
Related commands: pim sm.
Examples
# Configure the Ethernet switch as C-BSR with priority 2 (the C-BSR address is designated as the IP address of VLAN-interface 10 and the PIM SM protocol is enabled on VLAN-interface 10).
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim] c-bsr vlan-interface 10 24 2
1.1.3 c-rp
c-rp interface-type interface-number [ group-policy acl-number | priority priority-value ] *
undo c-rp { interface-type interface-number | all }
Parameters
interface-type interface-number: Interface type and interface number, used to specify the interface whose IP address is advertised as a candidate RP address.
acl-number: Number of the basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 2000 to 2999.
priority-value: Priority value of candidate RP, in the range of 0 to 255. By default, it is 0. The greatest value corresponds to the lowest priority level.
all: Removes all candidate RP configurations.
Use the c-rp command to configure the device to advertise itself as a candidate RP.
Use the undo c-rp command to remove the configuration.
By default, no candidate RP is configured.
When configuring the candidate RP, a relatively large bandwidth should be reserved for the switch and other devices in the PIM domain.
Related commands: c-bsr.
Examples
# Configure the switch to advertise itself as a C-RP in the PIM domain to BSR. The standard access list 2000 defines the groups related to the RP. The address of C-RP is designated as the IP address of VLAN-interface 10.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
[H3C-acl-basic-2000] quit
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim] c-rp vlan-interface 10 group-policy 2000
1.1.4 crp-policy
crp-policy acl-number
undo crp-policy
Parameters
acl-number: ACL number imported in C-RP filtering policy, ranging from 3000 to 3999.
Use the crp-policy command to limit the range of legal C-RP, as well as target service group range of each C-RP, and prevent C-RP spoofing.
Use the undo crp-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.
In the PIM SM network using BSR mechanism, every router can set itself as C-RP (candidate rendezvous point) serving particular groups. If elected, a C-RP becomes the RP serving the current group.
In BSR mechanism, a C-RP router unicasts C-RP messages to the BSR, which then propagates the C-RP messages among the network by BSR message.
To prevent C-RP spoofing, you need to configure crp-policy on the BSR to limit legal C-RP range and their service group range. Since each C-BSR has the chance to become BSR, you must configure the same filtering policy on each C-BSR router.
This command uses the ACLs numbered between 3000 and 3999. The source parameter in the rule command is translated as C-RP address in the crp-policy command, and the destination parameter as the service group range of this C-RP address. For the C-RP messages received, only when their C-RP addresses match the source address and their server group addresses are subset of those in ACL, can the be considered as matched.
Related commands: acl, rule.
Examples
# Configure C-RP filtering policy on the C-BSR, allowing only 1.1.1.1/32 as C-RP and to serve only for the groups 225.1.0.0/16.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] acl number 3000
[H3C-acl-adv-3000] rule 0 permit source 1.1.1.1 0 destination 225.1.0.0 0.0.255.255
[H3C-acl-adv-3000] quit
[H3C] pim
[H3C-pim] crp-policy 3000
1.1.5 debugging pim common
debugging pim common { all | event | packet | timer }
undo debugging pim common { all | event | packet | timer }
Parameters
all: All the common debugging information of PIM.
event: Debugging information of common PIM events.
packet: Debugging information of PIM hello messages.
timer: Debugging information of common PIM timers.
Use the debugging pim common command to enable common PIM debugging functions.
Use the undo debugging pim common command to disable the debugging functions.
By default, common PIM debugging functions are disabled.
Examples
# Enable all common PIM debugging functions
<H3C> debugging pim common all
1.1.6 debugging pim dm
debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } }
undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } }
Parameters
alert: Interoperation event debugging information of PIM-DM
all: All the debugging information of PIM-DM.
mrt: Debugging information of PIM-DM multicast routing table.
timer: Debugging information of PIM-DM timers.
warning: Debugging information of PIM-DM warning message.
recv: Debugging information of PIM-DM receiving packets.
send: Debugging information of PIM-DM sending packets.
assert: Debugging for assert messages.
graft: Debugging for graft messages.
graft-ack: Debugging for graft-ack messages.
join: Debugging for join messages.
prune: Debugging for prune messages.
Use the debugging pim dm command to enable PIM-DM debugging functions.
Use the undo debugging pim dm command to disable the debugging functions.
By default, PIM-DM debugging functions are disabled.
Examples
# Enable all PIM-DM debugging functions
<H3C> debugging pim dm all
1.1.7 debugging pim sm
debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } }
undo debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } }
View
Parameters
all: All debugging information of PIM-SM.
mbr: Debugging information of PIM-SM multicast border router event. Alert stands for debugging alert information of PIM-SM multicast border router fresh stands for debugging renew information of PIM-SM multicast.
verbose: Debugging detail information of PIM-SM.
mrt: Debugging information of PIM-SM multicast routing table.
msdp: Debugging information of correspondence between PIM SM and MSDP.
timer: Debugging information of PIM-SM timer.
assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt: PIM-SM timer type.
warning: Debugging information of PIM-SM warning message.
recv: Debugging information of PIM-SM receiving packets.
send: Debugging information of PIM-SM sending packets.
assert: Debugging for assert messages.
bootstrap: Debugging for bootstrap messages.
crpadv: Debugging for crpadv messages.
jp: Debugging for jp messages.
reg: Debugging for reg messages.
regstop: Debugging for register-stop messages.
Use the debugging pim sm command to enable PIM-SM debugging.
Use the undo debugging pim sm command to disable the debugging functions.
By default, PIM-SM debugging functions are disabled.
Examples
# Enable all PIM-SM debugging functions
<H3C> debugging pim sm all
1.1.8 display pim bsr-info
display pim bsr-info
Parameters
Use the display pim bsr command to view the BSR information.
Related commands: c-bsr, c-rp.
Examples
# Display the BSR information.
<H3C> display pim bsr-info
Current BSR Address: 192.168.1.1
Priority: 0
Mask Length: 30
Expires: 00:01:26
Bootstrap-Period: 60 seconds
Bootstrap-Timeout: 130 seconds
Local host is BSR
Table 1-1 Description on the fields of the display pim bsr command
Field |
Description |
Current BSR Address |
IP address of the BSR |
Priority |
Priority of BSR |
Mask Length: 30 |
Length of mask |
Expires: 00:01:55 |
Expire time |
Bootstrap-period: 60 seconds |
Bootstrap interval |
Bootstrap-timeout: 130 second |
Bootstrap timeout |
1.1.9 display pim interface
display pim interface [interface-type interface-number ]
Parameters
interface-type interface-number: Specify an interface by its type and number.
Use the display pim interface command to view the PIM interface configuration information.
If no interface type or interface number is specified, this command displays the PIM configurations on all interfaces. If the interface type and interface number are specified, only the PIM configuration on the specified interface is displayed.
Examples
# Display the PIM configuration information on an interface.
<H3C> display pim interface vlan-interface 2
PIM information of VLAN-interface 2:
IP address of the interface is 10.10.1.20
PIM is enabled on interface
PIM version is 2
PIM mode is Sparse
PIM query interval is 30 seconds
PIM neighbor hold-time is 105 seconds
PIM neighbor limit is 128
PIM neighbor policy is none
Total 1 PIM neighbor on interface
PIM DR(designated router) is 10.10.1.20
Table 1-2 Description on the fields of the display pim interface command
Field |
Description |
PIM version |
Version of PIM |
PIM mode |
PIM mode enabled on the interface (DM or SM) |
PIM query interval |
Hello interval |
PIM neighbor hold-time |
PIM neighbor hold time |
PIM neighbor limit |
Limit of the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached |
PIM neighbor policy |
Filtering policy of the PIM neighbors on the current interface |
PIM DR |
Designated router |
1.1.10 display pim neighbor
display pim neighbor [ interface interface-type interface-number ]
Parameters
interface interface-type interface-number: Interface type and interface number, used to specify the interface.
Use the display pim neighbor command to view the PIM neighbor information discovered by the switch interface. If the interface type and interface number are specified, this command only displays the PIM neighbor information on the specified interface.
Examples
# Display PIM neighbor information discovered by the switch interface.
<H3C> display pim neighbor
Neighbor's Address Interface Name Uptime Expires
90.0.0.2 Vlan-interface90 00:00:36 00:01:40
Table 1-3 Description on the fields of display pim neighbor command
Field |
Description |
Neighbor Address |
Neighbor address |
Interface |
Interface where the neighbor has been discovered |
Uptime |
Time passed since the multicast group has been discovered |
Expires |
Length of time in which the PIM neighbor will expire |
1.1.11 display pim routing-table
display pim routing-table [ { { *g [ group-address [ mask { mask-length | mask } ] ] | **rp [ rp-address [ mask { mask-length | mask } ] ] } | { group-address [ mask { mask-length | mask } ] | source-address [ mask { mask-length | mask } ] } * } | incoming-interface { interface-type interface-number | null } | { dense-mode | sparse-mode } ] *
Parameters
*g: (*, G) route entry.
mask: IP address mask.
mask-length: Length of the IP address mask.
**rp: (*, *, P) route entry.
rp-address: Address of the RP.
group-address: Address of the multicast group.
source-address: IP address of the multicast source.
incoming-interface interface-type interface-number: Route entry with the specified incoming interface.
null: Specifies the incoming interface type as Null.
dense-mode: Specifies the multicast routing protocol as PIM-DM.
sparse-mode: Specifies the multicast routing protocol as PIM-SM.
Use the display pim routing-table command to view the contents of the PIM multicast routing table. The displayed information of the PIM multicast routing table includes the SPT and RPF information.
Examples
# View the contents of the PIM multicast routing table on the router.
<H3C> display pim routing-table
PIM-SM Routing Table
Total 0 (*,*,RP)entry, 0 (*,G)entry, 2 (S,G)entries
(192.168.1.2, 224.2.178.130),
Protocol 0x20: PIMSM, Flag 0x4: SPT
UpTime: 23:59, Timeout after 196 seconds
Upstream interface: VLAN-interface2, RPF neighbor: NULL
Downstream interface list: NULL
(192.168.1.2, 224.2.181.90),
Protocol 0x20: PIMSM, Flag 0x4: SPT
UpTime: 23:59, Timeout after 196 seconds
Upstream interface: VLAN-interface2, RPF neighbor: NULL
Downstream interface list: NULL
Table 1-4 Description on the fields of display pim routing-table
Field |
Description |
Total 0 (*,*,RP)entry, 0 (*,G)entry, 2 (S,G)entries |
Total number of (*,*, RP), (*, G), and (S, G) entries in the PIM routing table |
(192.168.1.2, 224.2.178.130) |
(S, G) entry in the PIM routing table |
Protocol |
PIM mode |
UpTime |
Length of time for which this entry has been up |
Upstream interface |
Incoming interface of this entry |
RPF prime neighbor |
RPF neighbor of this entry |
Downstream interface list |
Information of the downstream interfaces |
1.1.12 display pim rp-info
display pim rp-info [ group-address ]
Parameters
group-address: Group address to display. If no multicast group is specified, the RP information about all multicast groups will be displayed.
Use the display pim rp-info command to view the RP information of multicast group.
In addition, this command can also display the BSR and static RP information.
Examples
# View the RP information of multicast group.
<H3C> display pim rp-info
PIM-SM RP-SET information:
BSR is: 20.20.20.20
RP 20.20.20.20
Version: 2
Priority: 0
Uptime: 00:00:05
Expires: 00:02:25
Adv-Period: 60 seconds
Holdtime: 150 seconds
Table 1-5 Description on the fields of the display pim rp-info command
Field |
Description |
PIM-SM RP-SET information: |
RP information |
BSR is: 4.4.4.6 |
BSR is the virtual interface of the node 4.4.4.6. |
Group/MaskLen: 224.0.0.0/4 RP 4.4.4.6 Version: 2 Priority: 0 Uptime: 00:39:50 Expires: 00:01:40 Adv-Period: 60 seconds Holdtime: 150 seconds |
The RP with IP address 224.0.0.0 and mask length of 4 is the virtual interface of the node 4.4.4.6, in version 2 and priority 0; it has been active for 39 minutes and 50 seconds and shall expire in one minute and 40 seconds; the advertisement interval is 60 seconds and holdtime is 150 seconds. |
1.1.13 pim
pim
undo pim
Parameters
Use the pim command to enter PIM view.
Use the undo pim command to clear the PIM global parameters configured in PIM view and return back to system view.
This command takes effect only if IP multicast routing is enabled on the device.
Examples
# Enter PIM view.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim]
1.1.14 pim bsr-boundary
pim bsr-boundary
undo pim bsr-boundary
Parameters
Use the pim bsr-boundary command to configure an interface to be the PIM domain border.
Use the undo pim bsr-boundary command to remove the border.
By default, no domain border is set.
You can use this command to set border of bootstrap messages, that is to say, bootstrap messages cannot pass interfaces that are configured with the pim bsr-boundary command while other PIM messages can. In this way, the network is divided into different BSR domains. Each domain uses a different bootstrap router.
Caution:
The pim bsr-boundary command cannot build a multicast boundary. It just sets up a PIM bootstrap message boundary.
Related commands: c-bsr.
Examples
# Configure domain border on VLAN-interface 10.
System View: return to User View with Ctrl+Z.
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim bsr-boundary
1.1.15 pim dm
pim dm
undo pim dm
Parameters
Use the pim dm command to enable PIM-DM.
Use the undo pim dm command to disable PIM-DM.
By default, PIM-DM is disabled.
Before enabling PIM-DM, you must execute the multicast routing-enable command in system view to enable IP multicast routing first.
Examples
# Enable PIM-DM on VLAN-interface 10 of the Ethernet switch.
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim dm
1.1.16 pim neighbor-limit
pim neighbor-limit limit
undo pim neighbor-limit
Parameters
limit: Limits of PIM neighbors on the interface, in the range of 0~128.
Use the pim neighbor-limit command to limit the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached.
Use the undo pim neighbor-limit command to restore the default setting.
By default, the PIM neighbors on the interface are limited to 128.
If the existing PIM neighbors exceed the configured value during configuration, they will not be deleted.
Examples
# Limit the PIM neighbors on the Vlan-interface10 to 50.
System View: return to User View with Ctrl+Z.
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim neighbor-limit 50
1.1.17 pim neighbor-policy
pim neighbor-policy acl-number
undo pim neighbor-policy
Parameters
acl-number: Basic ACL number, in the range of 2000 to 2999.
Use the pim neighbor-policy command to set to filter the PIM neighbors on the current interface.
Use the undo pim neighbor-policy command to remove the setting.
Only the routers that match the filtering rule in the ACL can serve as a PIM neighbor of the current interface.
The new configuration overwrites the old one if you run the command for a second time.
Examples
# Configure that 10.10.1.2 can serve as a PIM neighbor of the Vlan-interface 10, but not 10.10.1.1.
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 10.10.1.2 0
[H3C-acl-basic-2000] rule deny source 10.10.1.1 0
[H3C-acl-basic-2000] quit
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim neighbor-policy 2000
1.1.18 pim sm
pim sm
undo pim sm
Parameters
Use the pim sm command to enable the PIM-SM protocol on an interface.
Use the undo pim sm command to disable the PIM-SM protocol.
By default, PIM-SM is disabled.
Users need to configure the PIM-SM protocol on each interface. Generally, the PIM-SM protocol needs to be enabled on each interface.
Related commands: multicast routing-enable.
Examples
# Enable PIM-SM on VLAN-interface 10.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim sm
1.1.19 pim timer hello
Syntax
pim timer hello seconds
undo pim timer hello
View
Interface view
Parameters
seconds: Hello interval, in the range of 1 to 18,000 (in seconds). By default, the interval is 30 seconds.
Description
Use the pim timer hello command to configure the interval between Hello messages.
Use the undo pim timer hello command to restore the default Hello interval.
After PIM is enabled on an interface, the switch sends Hello messages periodically to all PIM-capable devices to discover neighbors. If the interface receives Hello messages, it indicates the interface has a PIM-capable neighbor, and the interface adds the neighbor to its PIM neighbor list. If the interface does not receive Hello messages from an existing neighbor in its PIM neighbor list within the PIM neighbor hold time, the device deems that the neighbor is down or no longer reachable.
& Note:
l You must enable PIM-DM or PIM-SM in interface view before you can proceed with this configuration.
l When you configure the Hello interval on an interface, the PIM neighbor hold time value is automatically set to 3.5 times the Hello interval. Therefore you need not configure the PIM neighbor hold time separately.
Examples
# Set the Hello interval to 40 seconds on VLAN-interface 10.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface vlan-interface 10
[H3C-Vlan-interface10] pim timer hello 40
1.1.20 pim-sm routing-table aging-time
pim-sm routing-table aging-time time-value
undo pim-sm routing-table aging-time
View
PIM view
Parameters
time-value: Aging time of PIM-SM routing table entries, in seconds, with an effective range of 45 to 255.
Description
Use the pim-sm routing-table aging-time command to configure the aging time of PIM-SM routing table entries.
Use the undo pim-sm routing-table aging-time command to restore the default value.
In case that no multicast streams are being forwarded, if the aging time of PIM-SM routing table entries expires, the device will delete PIM-SM routing entries.
By default, the aging time of PIM-SM routing table entries is 210 seconds.
Caution:
l If no PIM-SM-enabled interface is configured, you cannot use this command.
l After you use the undo pim command, disable multicast globally, or delete the last PIM-SM-enabled interface, the device resets the configured aging time of PIM-SM routing entries to the default value (210 seconds).
Examples
# Configure the aging time of PIM-SM routing entries as 100 seconds.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] vlan 100
[H3C-vlan100] port ethernet 2/1/1
[H3C-vlan100] interface Vlan-interface 100
[H3C-Vlan-interface100] ip address 100.1.1.1 24
[H3C-Vlan-interface100] pim sm
[H3C-Vlan-interface100] pim
[H3C-pim] pim-sm routing-table aging-time 100
1.1.21 register-policy
register-policy acl-number
undo register-policy
Parameters
acl-number: Number of IP advanced ACL, defining the rule of filtering the source and group addresses. The value ranges from 3000 to 3999.
Use the register-policy command to configure an RP to filter the register messages sent by the DR in the PIM-SM network so that only specific messages are accepted.
Use the undo register-policy command to remove the configured message filter.
Examples
# If the local device is the RP in the network, using the following command can only accept multicast message register of the source sending multicast address in the range of 225.1.0.0/16 on network segment 10.10.0.0/16.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 3010
[H3C-acl-adv-3010] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255
[H3C-acl-adv-3010] quit
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim] register-policy 3010
1.1.22 reset pim neighbor
reset pim neighbor { all | { neighbor-address | interface interface-type interface-number } * }
Parameters
all: All PIM neighbors
neighbor-address: Neighbor address.
interface interface-type interface-number: Specifies interface.
Use the reset pim neighbor command to clear a PIM neighbor or all PIM neighbors.
Related commands: multicast routing-enable.
Examples
# Clear the PIM neighbor 25.5.4.3.
<H3C> reset pim neighbor 25.5.4.3
1.1.23 reset pim routing-table
reset pim routing-table { all | { group-address [ mask group-mask | mask-length group-mask-length ] | source-address [ mask source-mask | mask-length source-mask-length ] | { incoming-interface interface-type interface number | null } } * }
Parameters
all: All PIM neighbors.
group-address: Group address.
mask group-mask: Specifies group mask.
mask-length group-mask-length: Mask length of the group address.
source-address: Source address.
mask source-mask: Specifies source mask.
mask-length source-mask-length: Specifies mask length of the group address.
incoming-interface: Specifies incoming interface for the route entry in PIM routing table.
interface-type interface-number: Interface type and interface number, used to specify the interface.
Use the reset pim routing-table command to clear a PIM route entry.
You can type in source address first and group address after in the command, as long as they are valid. Error information will be given if you type in invalid addresses.
If in this command, the group-address is 224.0.0.0/24 and source-address is the RP address (where group address can have a mask, but the resulted IP address must be 224.0.0.0, and source address has no mask), then it means only the (*, *, RP) item will be cleared.
If in this command, the group-address is any group address, and source-address is 0 (where group address can have a mask, and source address has no mask), then only the (*, G) item will be cleared.
This command shall clear not only multicast route entries from PIM routing table, but also the corresponding route entries and forward entries in the multicast core routing table and MFC.
Related commands: reset multicast routing-table, reset multicast forwarding-table, display pim routing-table.
Examples
# Clear the route entries with group address 225.5.4.3 from the PIM routing table.
<H3C> reset pim neighbor 25.5.4.3
1.1.24 source-policy
source-policy acl-number
undo source-policy
Parameters
acl-number: Basic or advanced ACL, in the range of 2000 to 3999.
Use the source-policy command to set the router to filter the multicast data packets based on source (or group) address.
Use the undo static-rp command to remove the configuration.
If resource address filtering is configured, as well as basic ACLs, then the router filters the resource addresses of all multicast data packets received. Those not matched will be discarded.
If resource address filtering is configured, as well as advanced ACLs, then the router filters the resource and group addresses of all multicast data packets received. Those not matched will be discarded.
When this feature is configured, the router filters not only multicast data, but the multicast data encapsulated in the registration packets.
The new configuration overwrites the old one if you run the command for a second time.
Examples
# Set to receive the multicast data packets from source address 10.10.1.2, but discard those from 10.10.1.1.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 10.10.1.2 0
[H3C-acl-basic-2000] rule deny source 10.10.1.1 0
[H3C-acl-basic-2000] quit
[H3C] pim
[H3C-pim] source-policy 2000
1.1.25 spt-switch-threshold
Syntax
spt-switch-threshold [ value | infinity ] [ group-policy acl-number [ order order-value ] ]
undo spt-switch-threshold [ group-policy acl-number ]
View
PIM view
Parameters
value: Statistics of data packets, which is currently not supported.
acl-number: Basic ACL, ranging from 2000 to 2999. Currently, this parameter is not supported in the spt-switch-threshold command.
order-value: Specifies the sequence number of the ACL in the group policy list, which is currently not supported.
Description
Use the spt-switch-threshold command to disable the device from switching from RPT to SPT.
Use the undo spt-switch-threshold command to remove the configuration.
By default, the S9500 series routing switches switch from RPT to SPT upon receiving the first multicast data packet.
Caution:
Do not disable RPT-to-SPT switchover on a static RP or C-RP; otherwise, the device will fail to forward multicast packets.
Examples
# Disable RPT-to-SPT switchover.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] pim
[H3C-pim] spt-switch-threshold infinity
1.1.26 ssm-mapping
Syntax
ssm-mapping group-address { mask | mask-length } source-address
undo ssm-mapping { group-address { mask | mask-length } source-address | all }
View
System view
Parameters
group-address: Specifies the multicast group address, in the range of 232.0.0.0 to 232.255.255.255.
mask: Specifies the group mask.
mask-length: Specifies the length of the group mask, in the range of 8 to 32.
source-address: Specifies the multicast source address.
all: Clears all SSM mapping rules.
Description
Use the ssm-mapping command to configure an SSM mapping rule.
Use the undo ssm-mapping command to restore the default.
No SSM mapping rule is configured by default.
Examples
# Configure an SSM mapping rule with the multicast group address being 232.1.1.1/24 and the source address being 125.1.1.1.
<H3C> system-view
[H3C] ssm-mapping 232.1.1.1 24 125.1.1.1
1.1.27 static-rp
static-rp rp-address [ acl-number ]
undo static-rp
Parameters
rp-address: Static RP address, only being legal unicast IP address.
acl-number: Basic ACL, used to control the range of multicast group served by static RP, which ranges from 2000 to 2999. If an ACL is not specified upon configuration, static RP will serve all multicast groups; if an ACL is specified, static RP will only serve the multicast group passing the ACL.
Use the static-rp command to configure static RP.
Use the undo static-rp command to remove the configuration.
Static RP functions as the backup of dynamic RP so as to improve the network robustness.
Caution:
l When the BSR-elected RP is effective, the static RP does not work.
l All routers in the PIM domain must be configured with this command simultaneously, with the same RP address specified.
l The system supports up to ten different static RP addresses. When more than ten static RP addresses are configured, the system will give this prompt information: “Cannot config static-rp, exceeded static-rp limit 10”.
Related commands: display pim rp-info.
Examples
# Configure 10.110.0.6 as a static RP.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim] static-rp 10.110.0.6
# Remove the static RP with the IP address of 10.110.0.6.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] multicast routing-enable
[H3C] pim
[H3C-pim] undo static-rp 10.110.0.6