Configuring IPv6 PIM Silent
Context
On the access layer, if the IPv6 PIM protocol is enabled on the interfaces directly connected to user hosts, the interfaces can establish PIM neighbor relationships to process various IPv6 PIM packets. The configuration, however, brings security risks. When a host maliciously sends many IPv6 PIM Hello messages, the device may break down.
To prevent the preceding case, set the state of the device interface to IPv6 PIM silent. An interface in IPv6 PIM silent state is disabled from receiving and forwarding any IPv6 PIM packet. All IPv6 PIM neighbors and IPv6 PIM state machines on the interface are deleted, and the interface immediately becomes a static designated router (DR). The IPv6 PIM silent function does not affect the Multicast Listener Discovery (MLD) function on the interface.
IPv6 PIM silent takes effect on an interface only when the interface is directly connected to a user network segment and when the network segment is connected only to this IPv6 PIM device.
After you configure IPv6 PIM silent on an interface, the interface no longer receives or sends any IPv6 PIM packets and other IPv6 PIM functions on the interface become invalid. Exercise caution when configuring this function.
Procedure
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The interface view is displayed.
- (Optional) On an Ethernet interface, run undo portswitch
The interface is switched to Layer 3 mode.
By default, an Ethernet interface works in Layer 2 mode.
Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support switching between Layer 2 and Layer 3 modes.
- Run pim ipv6 silent
The IPv6 PIM silent function is enabled.