The pim ipv6 neighbor-policy command configures a policy for filtering PIM neighbors on an interface.
The undo pim ipv6 neighbor-policy command restores the default setting.
By default, PIM neighbors on the interface are not filtered.
Parameter | Description | Value |
---|---|---|
basic-acl6-number | Specifies the basic ACL number. | The value is an integer that ranges from 2000 to 2999. |
GE interface view, XGE interface view, MultiGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, VLANIF interface view, loopback interface view
Usage Scenario
To prevent unauthorized neighbors from being involved in the PIM protocol, run the pim ipv6 neighbor-policy command to configure a policy for filtering PIM neighbors and set the address range of PIM neighbors. The switch sets up neighbor relationships with the addresses matching the filtering rules and deletes the neighbors that do not match the filtering rules.
Prerequisites
IPv6 multicast routing has been enabled globally using the multicast ipv6 routing-enable command in the system view.
Configuration Impact
The pim ipv6 neighbor-policy command and the acl ipv6 command are used together. In the ACL view, set the address range of PIM neighbors by specifying source in the rule command.
Precautions
This command is valid for both PIM-DM (IPv6) and PIM-SM (IPv6).
When configuring the neighbor filtering function on the interface, you must also configure the neighbor filtering function correspondingly on the PIM neighbor of the interface.
If the IPv6 address of a PIM neighbor that has established a neighbor relationship with the device is not in the configured range of valid neighbor IPv6 addresses, the device will no longer receive Hello messages from this PIM neighbor. When the holdtime of Hello messages expires, the neighbor relationship between the PIM device and the device is terminated.
<HUAWEI> system-view [HUAWEI] acl ipv6 number 2001 [HUAWEI-acl6-basic-2001] rule permit source fc00:0:0:2000::1 128 [HUAWEI-acl6-basic-2001] quit [HUAWEI] multicast ipv6 routing-enable [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] pim ipv6 neighbor-policy 2001
<HUAWEI> system-view [HUAWEI] acl ipv6 number 2001 [HUAWEI-acl6-basic-2001] rule permit source fc00:0:0:2000::1 128 [HUAWEI-acl6-basic-2001] quit [HUAWEI] multicast ipv6 routing-enable [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] undo portswitch [HUAWEI-GigabitEthernet0/0/1] pim ipv6 neighbor-policy 2001