教程网络工作组p savolarfc5294 txt.pdfVIP

NetworkWorkingGroupP.Savola

RequestforComments:5294CSC/FUNET

Category:InformationalJ.Lingard

Arastra

August2008

HostThreatstoProtocoltMulticast(PIM)

StatusofThisMemo

ThismemoprovidesinformationfortheInternetcommunity.Itdoes

notspecifyanInternetstandardofanykind.Distributionofthis

memoisunlimited.

Thismemocomplementsthelistofmulticastinfrastructuresecurity

threatanalysisdocumentsbydescribingProtocolt

Multicast(PIM)threatsspecifictorouterinterfacesconnecting

hosts.

TableofContents

1.Introduction.........................2

2.Host-InterfacePIMVulnerabilities..............2

2.1.NodesMaySendIllegitimatePIMRegisterMessages....3

2.2.NodesMayBecomeIllegitimatePIMNeighbors.......3

2.3.RoutersMayAcceptPIMMessagesfromNon-Neighbors....3

2.4.AnIllegitimateNodeMayBeElectedasthePIMDRorDF.3

2.4.1.PIM-SMDesignatedRouterElection..........3

2.4.2.BIDIR-PIMDesignatedForwarderElection.......4

2.5.ANodeMayBecomeanIllegitimatePIMAsserted

Forwarder........................4

2.6.BIDIR-PIMDoesNotUseRPFCheck.............4

3.On-LinkThreats.......................5

3.1.Denial-of-ServiceAttackontheLink...........5

3.2.Denial-of-ServiceAttackontheOutside.........6

3.3.ity,Integrity,orAuthorizationViolations.6

4.MitigationMethods.....