IPv6 PIM Join and Prune Policy
The IPv6 PIM Join and Prune Policy
provides the capability for the following options to be configured:
- (RP, G) J/P filtering: Permit or deny PIM (*, G) J/P messages for IP multicast group addresses with a given RP.
- (*, G) J/P filtering: Permit or deny PIM (*, G) J/P messages for IP multicast group addresses independent of RP.
- (S, G) J/P filtering: Permit or deny PIM (S, G) J/P messages for IP multicast sources and group addresses.
Access control lists (ACLs) are used to define the policy.
By default, all PIM routers accept Join and Prune messages for all the multicast group addresses and for all source addresses. When the IPv6 PIM Join and Prune policy is configured, a PIMv6 network is prevented from forwarding multicast traffic for reserved or unauthorized groups, which could lead to the overuse of available bandwidth of the links and the overuse of software or hardware resources on PIM routers.
With the IPv6 PIM Join and Prune policy, a device can be configured to drop PIM J/P messages of: the following types:
- (*, G) sent to a given RP for unauthorized groups.
- (*, G) for unauthorized groups independent of RP.
- (S, G) for unauthorized groups and sources.
Configuration Notes and Feature Limitations
- A (RP, G) configuration is limited to 64 IPv4 RPs and 64 IPv6 RPs per VRF. Although ICX can support more than 64 RPs (learned dynamically through Bootstrap Protocol), there is a limited number of RPs generally in a given network.
- ACL rules are used to configure which multicast group addresses (*, G) are sent to the RP, and which are to be dropped or allowed. Multicast group address and prefixes are configured as destination IP addresses and prefixes in the extended ACL rules. Because this ACL is used for (RP, G) filtering, the source IP address and prefixes in the case of extended ACL rules are ignored.
- Only one ACL can be applied to an RP address.
- If the specified ACL is not configured, then the (*, G) Join and Prune messages sent to that RP for all multicast group addresses are dropped.
- Only one ACL can be applied to both (*, G) and (S, G) Join and Prune filtering at a time.