pim neighbor-policy
Use pim neighbor-policy to configure a PIM hello policy.
Use undo pim neighbor-policy to restore the default.
Syntax
pim neighbor-policy ipv4-acl-number
undo pim neighbor-policy
Default
No PIM hello policy exists on an interface, and all PIM hello messages are regarded as legal.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4-acl-number: Specifies an IPv4 basic ACL number in the range of 2000 to 2999.
Usage guidelines
A PIM hello policy filters PIM hello messages to guard against hello message spoofing.
When you configure a rule in the IPv4 basic ACL, follow these restrictions and guidelines:
For the rule to take effect, do not specify the vpn-instance vpn-instance option.
The source source-address source-wildcard option specifies a source IP address.
Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure a PIM hello policy on VLAN-interface 100 so that only the devices on subnet 10.1.1.0/24 can become PIM neighbors of this switch.
<Sysname> system-view [Sysname] acl basic 2000 [Sysname-acl-ipv4-basic-2000] rule permit source 10.1.1.0 0.0.0.255 [Sysname-acl-ipv4-basic-2000] quit [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] pim neighbor-policy 2000