HPE Aruba CX
TMA-ARUBA-CX-3.3.5
MSDP Authentication & SA Filtering
Opis
The Multicast Source Discovery Protocol (MSDP) connects multiple PIM-SM domains, enabling RPs to share multicast source information using SA messages over TCP. It simplifies interdomain multicast routing by supporting an interdomain source tree instead of a shared tree.
Kako se proverava
Metod provere: Ručni pregled
Where MSDP runs, run 'show run msdp' and confirm every peer has a password and SA filters in and out ('sa-filter in/out access-list <acl>').
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Configuration to enable Authentication - router msdp ip msdp peer <ip-address> password plaintext <password> User can prevent the incoming and outgoing SA messages on MSDP router by creating incoming and outgoing filter lists using an ACL. Configuration to associate ACL - sa-filter in access-list <acl-name> sa-filter out access-list <acl-name>
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- aruba-cxauthentication
- Referenca
- CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 3.3.5 MSDP Authentication & SA Filtering