PIM

Dear User,

On the access layer, if the interface directly connected to a host is enabled with the PIM protocol, PIM neighbors can be established on this interface to process various PIM protocol packets. Such configuration, however, may bring security problems. For example, when malicious hosts send a large number of pseudo PIM Hello packets, it may lead to the collapse of the device. To avoid the preceding problem, you can run the pim silent command on the interface to set the interface to work in PIM silent state. After the interface enters the PIM silent state, it is forbidden to receive or forward any PIM protocol packet. All PIM neighbors and the PIM state machine on this interface are deleted and the interface automatically becomes a DR. Meanwhile, the PIM silent function does not affect the IGMP function on the interface. The PIM silent function is applicable only to the interface that is directly connected to the network segment of user hosts, and only one PIM device can be connected to this network segment.

Thanks!

Hi, friend!
A PIM-SM protocol is used in daily multicast protocols. Before PIM-SM is used, PIM is enabled on the routers on the network to establish PIM neighbor relationships. If an attack occurs on the network, a hacker simulates a host to send PIM hello packets to another PIM device to establish a PIM neighbor relationship. Devices on the network may fail to process data, or the performance may reach a bottleneck, causing breakdown. Then, you can configure the PIM silent command on the interface connected to the host. It deletes the PIM neighbor of the interface so that the interface does not receive or forward PIM packets. In this way, attacks can be prevented. A security mechanism is added.