Junos OS

Hi everyone,

In Cisco, we use "ip pim register-rate 10" to limit 10 REGISTER message  per ( S,G) in one sec,  Do we have equivalent command in Juniper to acheive the same goal?

Thanks and have a nice weekend!!

We have couple similar options to do that:

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

re1# set protocols pim sglimit ?  
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)
{master}[edit]

More Info Here:

Limiting Register:

• https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/register-limit-edit-protocols-pim.html

SG Limiting:

• https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/sglimit-edit-protocols-pim.html

Thanks for your response,

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

Above " maximum"  refers to over all limit on REGISTER message or does it refer to Limit for each ( S,G)  just like we see in Cisco?

Example:

set protocols pim rp register-limit 10

Are we saying please limit 10 Register message per second for each (S,G) or are we saying limit 10 REGISTER per seconds total for all (S,G)?

---

@sarahr202 wrote:

Thanks for your response,

 

re1# set protocols pim rp register-limit ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> family               Protocol family
  log-interval         Time between successive log messages (1..65535)
  maximum              Maximum limit above which additional entries are not accepted (1..65535)
  threshold            Percentage of maximum at which to start generating warnings (1..100)

 

Above " maximum"  refers to over all limit on REGISTER message or does it refer to Limit for each ( S,G)  just like we see in Cisco?

Example:

set protocols pim rp register-limit 10

 

Are we saying please limit 10 Register message per second for each (S,G) or are we saying limit 10 REGISTER per seconds total for all (S,G)?

 

---

• Each unique (S,G) join received by the RP counts as one group toward the configured register messages limit.

• Periodic register messages sent by the DR for existing or already known (S,G) entries do not count toward the configured register messages limit.

• Register messages are accepted until either the PIM register limit or the PIM join limit (if configured) is exceeded. Once either limit is reached, any new requests are dropped.

I don't think we have per second model for limiting register like Cisco. I checked Cisco's doc on "ip pim register-rate-limit 10" which basically sets a limit of 10 PIM sparse mode register messages SENT (outgoing) per second for each (S, G).

Whereas in Juniper, we rate limit on INCOMING register message (assuming Juniper node is RP and Cisco's DR)

But you can filter PIM register messages sent from the  DR or to the RP using firewall filters, A high degree of control over PIM register messages is provided by RP and DR register message filtering. Message filtering also prevents unauthorized groups and sources from registering with an RP router. More Info here:

• https://www.juniper.net/documentation/en_US/junos/topics/concept/multicast-rp-dr-register-filtering.html

Configuring Register Message Filters on a PIM RP and DR examples:

• https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/mcast-filter-pim-rp-dr.html

Thanks, 

Our goal is to rate limit  out going Register message  for ( S,G)  , filtering will  block all outgoing  register message. 

Looks like I am out of luck here.

Thanks for your help