Configure an RP filter to drop the register packets for multicast group range 224.1.1.0/24 from source address 10.10.94.1:
- protocols {
-
- pim {
-
- rp {
- rp-register-policy incoming-policy-for-rp;
-
- local {
- address 10.10.10.5;
- }
- }
- }
- }
- policy-options {
-
- policy-statement incoming-policy-for-rp {
-
- from {
- router-filter 224.1.1.0/24 orlonger;
- source-address-filter 10.10.94.2/32 exact;
- then reject;
- }
- }
- }
Configure a DR filter to prevent sending register packets for group range 224.1.1.0/24 and source address 10.10.10.1/32:
- protocols {
-
- pim {
-
- rp {
- dr-register-policy outgoing-policy-for-dr;
-
- static {
- address 10.10.10.3;
- }
- }
- }
- }
- policy-options {
-
- policy-statement outgoing-policy-for-rp {
-
- from {
- router-filter 224.1.1.0/24 orlonger;
- source-address-filter 10.10.10.1/32 exact;
- then reject;
- }
- }
- }
More complex register message filtering is possible. This example configures a policy expression to accept register messages for multicast group 224.1.1.5 but reject those for 224.1.1.1:
- protocols {
-
- pim {
-
- rp {
- rp-register-policy [ reject_224_1_1_1 | accept_224_1_1_5
];
-
- local {
- address 10.10.10.5;
- }
- }
- }
- }
- policy-options {
-
- policy-statement reject_224_1_1_1 {
-
- from {
- router-filter 224.1.1.0/24 orlonger;
- source-address-filter 10.10.94.2/32 exact;
- then reject;
- }
-
- policy-statement accept_224_1_1_5 {
-
- term one {
-
- from {
- router-filter 224.1.1.5/32 exact;
- source-address-filter 10.10.94.2/32 exact;
- }
- then accept;
- }
-
- term two {
- then reject;
- }
- }
- }
- }