bsr-policy (IPv6 PIM view)

Use bsr-policy to configure a BSR policy.

Use undo bsr-policy to restore the default.

Syntax

bsr-policy ipv6-acl-number

undo bsr-policy

Default

No BSR policy exists, and all bootstrap messages are regarded as legal.

Views

IPv6 PIM view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999.

Usage guidelines

A BSR policy filters bootstrap messages to guard against BSR spoofing.

When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:

• For the rule to take effect, do not specify the vpn-instance vpn-instance option.

• The source source-address source-prefix option specifies a BSR address.

• Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure a BSR policy on the public network so that only the devices on subnet 2001::2/64 can act as the BSR.

<Sysname> system-view
[Sysname] acl ipv6 basic 2000
[Sysname-acl-ipv6-basic-2000] rule permit source 2001::2 64
[Sysname-acl-ipv6-basic-2000] quit
[Sysname] ipv6 pim
[Sysname-pim6] bsr-policy 2000

Related commands

c-bsr (IPv6 PIM view)