All things related to multicast

[Leonard Giuliano <>]

On Wed, 3 Sep 2003, David Farmer wrote:

-)
-) Does anyone have an opinion if just MSDP should be filter, or both
-) traffic and MSDP should be filtered at an Administrative Boundary?
-) Should traffic or PIM join state, etc... be filtered within an
-) Administrative Domain?
-)

If you are going to filter these groups for MSDP, it also makes sense to
block these for PIM state and data scoping as well for the same reasons.
MSDP filters, PIM filters and scopes each do something different, and
protect you from different attacks.  I think you definately want to do
this at your domain boundaries.  Within your domain, it's up to you.

Additionally, it might also be good to only define your RP for 224/8,
233/8 (and 239/8 if you support that).  This further prevents unwanted
state on your RPs, etc.


-Lenny