All things related to multicast

[John Meylor <>]

Bill Nickless wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> At 09:42 PM 1/17/2001 -0500, Marshall Eubanks wrote:
> >One thing that's not clear to me is - was the RP in the afflicted
> >domains involved ?
> 
> Yes.  The RP was involved, as it converted the PIM Register packets into
> MSDP SAs for redistribution.
> 
> A rate limit (set on the RP) on the number of MSDP SAs generated would have
> reduced the impact of this event.

Also, its possible, and recommended to utilize
a register accept filter on any RP.  This restricts
acceptance of registers based on source and group,
and thus restricts the creation of SAs from random
sources.
Attacks could occur from authorized sources, but
this is theoretically a much different problem to
track down and address.

 John