bsr-policy (IPv6 PIM view)
Use bsr-policy to configure a BSR policy.
Use undo bsr-policy to restore the default.
Syntax
bsr-policy ipv6-acl-number
undo bsr-policy
Default
No BSR policy exists, and all bootstrap messages are regarded as legal.
Views
IPv6 PIM view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv6-acl-number: Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999.
Usage guidelines
A BSR policy filters bootstrap messages to guard against BSR spoofing.
When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:
For the rule to take effect, do not specify the vpn-instance vpn-instance option.
The source source-address source-prefix option specifies a BSR address.
Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure a BSR policy on the public network so that only the devices on subnet 2001::2/64 can act as the BSR.
<Sysname> system-view [Sysname] acl ipv6 basic 2000 [Sysname-acl-ipv6-basic-2000] rule permit source 2001::2 64 [Sysname-acl-ipv6-basic-2000] quit [Sysname] ipv6 pim [Sysname-pim6] bsr-policy 2000
Related commands
c-bsr (IPv6 PIM view)