manualshive.com logo in svg

HP JH299A, Configuration Manual

Share
Download
HP JH299A Configuration Manual Download Page 329

 

320 

Device 

Interface 

IPv6 address 

Device 

Interface 

IPv6 address 

Router B 

GE 1/0/1 

2001::2/64 

Router D 

GE 1/0/1 

4001::2/64 

Router B 

GE 1/0/2 

1002::2/64 

Router D 

GE 1/0/2 

3002::2/64 

Router B 

GE 1/0/3 

2002::1/64 

Router D 

GE 1/0/3 

1003::2/64 

 

Configuration procedure 

1. 

Assign an IPv6 address and prefix length to each interface, as shown in 

Table 23

. (Details not 

shown.) 

2. 

Configure OSPFv3 on the routers in the IPv6 PIM-SM domain. (Details not shown.) 

3. 

Enable IPv6 multicast routing, IPv6 PIM-SM, and MLD: 

# On Router D, enable IPv6 multicast routing. 

<RouterD> system-view 

[RouterD] ipv6 multicast routing 

[RouterD-mrib6] quit 

# Enable MLDv2 on the receiver-side interface (GigabitEthernet 1/0/1). 

[RouterD] interface gigabitethernet 1/0/1 

[RouterD-GigabitEthernet1/0/1] mld enable 

[RouterD-GigabitEthernet1/0/1] mld version 2 

[RouterD-GigabitEthernet1/0/1] quit 

# Enable IPv6 PIM-SM on the other interfaces. 

[RouterD] interface gigabitethernet 1/0/2 

[RouterD-GigabitEthernet1/0/2] ipv6 pim sm 

[RouterD-GigabitEthernet1/0/2] quit 

[RouterD] interface gigabitethernet 1/0/3 

[RouterD-GigabitEthernet1/0/3] ipv6 pim sm 

[RouterD-GigabitEthernet1/0/3] quit 

# On Router A, enable IPv6 multicast routing. 

<RouterA> system-view 

[RouterA] ipv6 multicast routing 

[RouterA-mrib6] quit 

# Enable IPv6 PIM-SM on each interface. 

[RouterA] interface gigabitethernet 1/0/1 

[RouterA-GigabitEthernet1/0/1] ipv6 pim sm 

[RouterA-GigabitEthernet1/0/1] quit 

[RouterA] interface gigabitethernet 1/0/2 

[RouterA-GigabitEthernet1/0/2] ipv6 pim sm 

[RouterA-GigabitEthernet1/0/2] quit 

[RouterA] interface gigabitethernet 1/0/3 

[RouterA-GigabitEthernet1/0/3] ipv6 pim sm 

[RouterA-GigabitEthernet1/0/3] quit 

# Configure Router B and Router C in the same way Router A is configured. (Details not 
shown.) 

4. 

On Router D, configure GigabitEthernet 1/0/3 as a C-BSR and a C-RP. 

[RouterD] ipv6 pim 

[RouterD-pim6] c-bsr 1003::2 

[RouterD-pim6] c-rp 1003::2 

[RouterD-pim6] quit 

Summary of Contents for JH299A

Page 1: ...HPE FlexNetwork MSR Router Series Comware 7 IP Multicast Configuration Guide Part number 5200 2392 Software version MSR CMW710 R0411 Document version 6W101 20161114 ...

Page 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Page 3: ...s for dynamic ports 19 Configuring static ports 20 Configuring a port as a simulated member host 21 Enabling fast leave processing 21 Disabling a port from becoming a dynamic router port 22 Configuring the IGMP snooping querier 22 Configuration prerequisites 23 Enabling the IGMP snooping querier 23 Configuring parameters for IGMP general queries and responses 23 Configuring parameters for IGMP mes...

Page 4: ...Configuring IGMP 65 Overview 65 IGMPv1 overview 65 IGMPv2 enhancements 66 IGMPv3 enhancements 67 IGMP SSM mapping 68 IGMP proxying 69 IGMP support for VPNs 70 Protocols and standards 70 IGMP configuration task list 71 Configuring basic IGMP features 71 Enabling IGMP 71 Specifying an IGMP version 72 Configuring a static group member 72 Configuring a multicast group policy 72 Adjusting IGMP performa...

Page 5: ...on task list 117 Configuration prerequisites 117 Enabling PIM SM 117 Configuring the SSM group range 118 Configuring common PIM features 118 Configuration task list 118 Configuration prerequisites 118 Configuring a multicast source policy 119 Configuring a PIM hello policy 119 Configuring PIM hello message options 119 Configuring common PIM timers 121 Setting the maximum size of each join or prune...

Page 6: ...veraging static RPF peers 163 Anycast RP configuration 168 SA message filtering configuration 171 Troubleshooting MSDP 175 MSDP peers stay in disabled state 175 No SA entries exist in the router s SA message cache 175 No exchange of locally registered S G entries between RPs 175 Configuring multicast VPN 177 Overview 177 MD VPN overview 178 Protocols and standards 181 How MD VPN works 182 Default ...

Page 7: ...iguring parameters for MLD general queries and responses 268 Configuring parameters for MLD messages 269 Configuration prerequisites 269 Configuring source IPv6 addresses for MLD messages 269 Setting the 802 1p priority for MLD messages 270 Configuring MLD snooping policies 271 Configuring an IPv6 multicast group policy 271 Enabling IPv6 multicast source port filtering 272 Enabling dropping unknow...

Page 8: ...MLD proxying 314 Configuration prerequisites 314 Enabling MLD proxying 314 Enabling IPv6 multicast forwarding on a non querier interface 315 Configuring IPv6 multicast load splitting on an MLD proxy 315 Enabling MLD NSR 316 Displaying and maintaining MLD 316 MLD configuration examples 317 Basic MLD features configuration examples 317 MLD SSM mapping configuration example 319 MLD proxying configura...

Page 9: ...e 360 Enabling BFD for IPv6 PIM 361 Enabling IPv6 PIM passive mode 361 Enabling IPv6 PIM NSR 361 Enabling SNMP notifications for IPv6 PIM 362 Enabling NBMA mode for IPv6 ADVPN tunnel interfaces 362 Displaying and maintaining IPv6 PIM 363 IPv6 PIM configuration examples 364 IPv6 PIM DM configuration example 364 IPv6 PIM SM non scoped zone configuration example 367 IPv6 PIM SM admin scoped zone conf...

Page 10: ...ast Unicast In unicast transmission the information source must send a separate copy of information to each host that needs the information Figure 1 Unicast transmission In Figure 1 Host B Host D and Host E need the information A separate transmission channel must be established from the information source to each of these hosts In unicast transmission the traffic transmitted over the network is p...

Page 11: ...n the same subnet Broadcast is disadvantageous in transmitting data to specific hosts Moreover broadcast transmission is a significant waste of network resources Multicast Multicast provides point to multipoint data transmissions with the minimum network consumption When some hosts on the network need multicast information the information sender or multicast source sends only one copy of the infor...

Page 12: ... is a multicast receiver set identified by an IP multicast address Hosts must join a multicast group to become members of the multicast group before they receive the multicast data addressed to that multicast group Typically a multicast source does not need to join a multicast group A multicast source is an information sender It can send data to multiple multicast groups at the same time Multiple ...

Page 13: ...est path tree SPT or a multicast packet that multicast source S sends to multicast group G S represents a specific multicast source and G represents a specific multicast group For more information about the concepts RPT and SPT see Configuring PIM and Configuring IPv6 PIM Multicast benefits and applications Multicast benefits Enhanced efficiency Reduces the processor load of information source ser...

Page 14: ...icated multicast forwarding paths are established between receivers and the specified multicast sources Multicast architecture IP multicast addresses the following issues Where should the multicast source transmit information to Multicast addressing What receivers exist on the network Host registration Where is the multicast source that will provide data to the receivers Multicast source discovery...

Page 15: ... can reuse them in domains administered by different organizations without causing conflicts For more information see RFC 2365 NOTE Glop is a mechanism for assigning multicast addresses between different ASs By filling an AS number into the middle two bytes of 233 0 0 0 you get 255 multicast addresses for that AS For more information see RFC 2770 Table 3 Common permanent multicast group addresses ...

Page 16: ...cast address not based on a unicast prefix When set to 1 this address is an IPv6 multicast address based on a unicast prefix The T bit must also be set to 1 T When set to 0 this address is an IPv6 multicast address permanently assigned by IANA When set to 1 this address is a transient or dynamically assigned IPv6 multicast address Scope The Scope field contains four bits which represent the scope ...

Page 17: ... Layer 2 processing which needs to be filtered by the upper layer IPv6 multicast MAC addresses As defined by IANA the most significant 16 bits of an IPv6 multicast MAC address are 0x3333 The least significant 32 bits are mapped from the least significant 32 bits of an IPv6 multicast address Therefore the problem of duplicate IPv6 to MAC address mapping also arises like IPv4 to MAC address mapping ...

Page 18: ...blish and maintain multicast group memberships Multicast routing protocols A multicast routing protocol runs on Layer 3 multicast devices to establish and maintain multicast routes and correctly and efficiently forward multicast packets Multicast routes constitute loop free data transmission paths also known as multicast distribution trees from a data source to multiple receivers In the ASM model ...

Page 19: ...group address as the destination address Multicast routers on the forwarding paths forward multicast packets that an incoming interface receives through multiple outgoing interfaces Compared to a unicast model a multicast model is more complex in the following aspects To ensure multicast packet transmission on the network different routing tables are used to guide multicast forwarding These routin...

Page 20: ...are called VPN instances Multicast application in VPNs A PE device that supports multicast for VPNs performs the following operations Maintains an independent set of multicast forwarding mechanisms for each VPN including the multicast protocols PIM neighbor information and multicast routing table In a VPN the device forwards multicast data based on the forwarding table or routing table for that VP...

Page 21: ...switch forwards multicast packets of known multicast groups to only the receivers Figure 10 Multicast packet transmission without and with IGMP snooping IGMP snooping ports As shown in Figure 11 IGMP snooping runs on Switch A and Switch B and Host A and Host C are receivers in a multicast group IGMP snooping ports are divided into member ports and router ports Multicast packet transmission without...

Page 22: ... in IGMP snooping is a Layer 2 interface Member ports On an IGMP snooping Layer 2 device the ports toward receiver hosts are called member ports In Figure 11 GigabitEthernet 1 0 2 and GigabitEthernet 1 0 3 of Switch A and GigabitEthernet 1 0 2 of Switch B are member ports Member ports contain the following types Dynamic member port When a port receives an IGMP report it is added to the associated ...

Page 23: ...ching forwarding entry does not contain the receiving port the Layer 2 device adds the receiving port to the outgoing interface list It also marks the receiving port as a dynamic member port and starts an aging timer for the port If a match is found and the matching forwarding entry contains the receiving port the Layer 2 device restarts the aging timer for the port In an application with a group ...

Page 24: ...a port the IGMP querier resolves the multicast group address in the message Then it sends an IGMP group specific query to the multicast group through the receiving port After receiving the IGMP group specific query the Layer 2 device forwards the query through all its router ports in the VLAN and all member ports of the multicast group Then it waits for the responding IGMP report from the directly...

Page 25: ... interval Configuring IGMP snooping port features Optional Setting aging timers for dynamic ports Optional Configuring static ports Optional Configuring a port as a simulated member host Optional Enabling fast leave processing Optional Disabling a port from becoming a dynamic router port Configuring the IGMP snooping querier Optional Enabling the IGMP snooping querier Optional Configuring paramete...

Page 26: ...at VLAN You can enable IGMP snooping for the specified VLANs in IGMP snooping view or for a VLAN in VLAN view For a VLAN the configuration in VLAN view has the same priority as the configuration in IGMP snooping view and the most recent configuration takes effect To enable IGMP snooping for the specified VLANs Step Command Remarks 1 Enter system view system view N A 2 Enable IGMP snooping globally...

Page 27: ...r system view system view N A 2 Enable IGMP snooping globally and enter IGMP snooping view igmp snooping N A 3 Specify an IGMP snooping version for the specified VLANs version version number vlan vlan list The default setting is 2 To specify an IGMP snooping version for a VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Specify an IGMP snooping ver...

Page 28: ...kes priority over the global configuration Setting the IGMP last member query interval globally Step Command Remarks 1 Enter system view system view N A 2 Enter IGMP snooping view igmp snooping N A 3 Set the IGMP last member query interval globally last member query interval interval The default setting is 1 second Setting the IGMP last member query interval in a VLAN Step Command Remarks 1 Enter ...

Page 29: ...r for dynamic member ports globally host aging time seconds The default setting is 260 seconds Setting the aging timers for dynamic ports in a VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Set the aging timer for dynamic router ports in the VLAN igmp snooping router aging time seconds The default setting is 260 seconds 4 Set the aging timer for ...

Page 30: ...d Remarks 1 Enter system view system view N A 2 Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number N A 3 Configure the port as a simulated member host igmp snooping host join group address source ip source address vlan vlan id By default the port is not a simulated member host Enabling fast leave processing This feature enables the d...

Page 31: ...ngs flows to the port Then the port forwards the data to attached receiver hosts The receiver hosts will receive multicast data that it does not want to receive The port forwards the IGMP general queries or PIM hello messages to its upstream multicast routers These messages might affect the multicast routing protocol state such as the IGMP querier or DR election on the multicast routers This might...

Page 32: ... id N A 3 Enable the IGMP snooping querier igmp snooping querier By default the IGMP snooping querier is disabled Configuring parameters for IGMP general queries and responses CAUTION To avoid mistakenly deleting multicast group members make sure the IGMP general query interval is greater than the maximum response time for IGMP general queries You can modify the IGMP general query interval for a V...

Page 33: ...ng tasks Enable IGMP snooping for the VLAN Determine the source IP address of IGMP general queries Determine the source IP address of IGMP group specific queries Determine the source IP address of IGMP reports Determine the source IP address of IGMP leave messages Determine the 802 1p priority of IGMP messages Configuring source IP addresses for IGMP messages The IGMP snooping querier might send I...

Page 34: ...P address for IGMP reports igmp snooping report source ip ip address By default the source IP address of IGMP reports is the IP address of the current VLAN interface If the current VLAN interface does not have an IP address the source IP address is 0 0 0 0 6 Configure the source IP address for IGMP leave messages igmp snooping leave source ip ip address By default the source IP address of IGMP lea...

Page 35: ...using an ACL that specifies the multicast groups and the optional sources It is used to control the multicast groups that hosts can join Configuration restrictions and guidelines When you configure a multicast group policy follow these restrictions and guidelines This configuration takes effect only on the multicast groups that ports join dynamically You can configure a multicast group policy glob...

Page 36: ...e this feature for the specified ports in IGMP snooping view or for a port in interface view For a port the configuration in interface view has the same priority as the configuration in IGMP snooping view and the most recent configuration takes effect Enabling multicast source port filtering for the specified ports Step Command Remarks 1 Enter system view system view N A 2 Enter IGMP snooping view...

Page 37: ...ast group to its directly connected Layer 3 device Other reports for the same group in the same query interval are discarded Use this feature to reduce multicast traffic To enable IGMP report suppression Step Command Remarks 1 Enter system view system view N A 2 Enter IGMP snooping view igmp snooping N A 3 Enable IGMP report suppression report aggregation By default IGMP report suppression is enab...

Page 38: ... the multicast groups that a port joins dynamically You can enable this feature globally for all ports in IGMP snooping view or for a port in interface view For a port the port specific configuration takes priority over the global configuration Configuration procedure To enable the multicast group replacement feature globally Step Command Remarks 1 Enter system view system view N A 2 Enter IGMP sn...

Page 39: ...oup group address source address vlan vlan id verbose Display static IGMP snooping group entries Centralized devices in IRF mode distributed devices in standalone mode display igmp snooping static group group address source address vlan vlan id verbose slot slot number Display static IGMP snooping group entries Distributed devices in IRF mode display igmp snooping static group group address source...

Page 40: ... chassis chassis number slot slot number Display information about Layer 2 MAC multicast groups Centralized devices in standalone mode display l2 multicast mac mac address vlan vlan id Display information about Layer 2 MAC multicast groups Centralized devices in IRF mode distributed devices in standalone mode display l2 multicast mac mac address vlan vlan id slot slot number Display information ab...

Page 41: ... Configure a multicast group policy and simulated joining to meet the following requirements Host A and Host B receive only the multicast data addressed to multicast group 224 1 1 1 Multicast data can be forwarded through GigabitEthernet 1 0 3 and GigabitEthernet 1 0 4 of Switch A uninterruptedly even though Host A and Host B fail to receive the multicast data Switch A will drop unknown multicast ...

Page 42: ...ticast group policy so that hosts in VLAN 100 can join only multicast group 224 1 1 1 SwitchA acl basic 2001 SwitchA acl ipv4 basic 2001 rule permit source 224 1 1 1 0 SwitchA acl ipv4 basic 2001 quit SwitchA igmp snooping SwitchA igmp snooping group policy 2001 vlan 100 SwitchA igmp snooping quit Configure GigabitEthernet 1 0 3 and GigabitEthernet 1 0 4 as simulated member hosts of multicast grou...

Page 43: ...nsmission configure GigabitEthernet 1 0 3 and GigabitEthernet 1 0 5 on Switch C as static member ports for multicast group 224 1 1 1 Suppose the STP runs on the network To avoid data loops the forwarding path from Switch A to Switch C is blocked Multicast data flows to the receivers attached to Switch C only along the path of Switch A Switch B Switch C When this path is blocked a minimum of one IG...

Page 44: ...hernet 1 0 2 RouterA GigabitEthernet1 0 2 pim dm RouterA GigabitEthernet1 0 2 quit 3 Configure Switch A Enable IGMP snooping globally SwitchA system view SwitchA igmp snooping SwitchA igmp snooping quit Create VLAN 100 and assign GigabitEthernet 1 0 1 through GigabitEthernet 1 0 3 to the VLAN SwitchA vlan 100 SwitchA vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 3 Enable IGMP snooping ...

Page 45: ...hC vlan 100 SwitchC vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 5 Enable IGMP snooping for VLAN 100 SwitchC vlan100 igmp snooping enable SwitchC vlan100 quit Configure GigabitEthernet 1 0 3 and GigabitEthernet 1 0 5 as static member ports for the multicast group 224 1 1 1 SwitchC interface gigabitethernet 1 0 3 SwitchC GigabitEthernet1 0 3 igmp snooping static group 224 1 1 1 vlan 10...

Page 46: ...nooping Switch A which is close to the multicast sources acts as the IGMP snooping querier Configure the switches to meet the following requirements To prevent the switches from flooding unknown data in the VLAN enable all the switches to drop unknown multicast data A switch does not mark a port that receives an IGMP query with source IP address 0 0 0 0 as a dynamic router port This adversely affe...

Page 47: ...hA vlan100 igmp snooping special query source ip 192 168 1 1 SwitchA vlan100 quit 2 Configure Switch B Enable IGMP snooping globally SwitchB system view SwitchB igmp snooping SwitchB igmp snooping quit Create VLAN 100 and assign GigabitEthernet 1 0 1 through GigabitEthernet 1 0 4 to the VLAN SwitchB vlan 100 SwitchB vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 4 Enable IGMP snooping a...

Page 48: ...P leaves 0 Received IGMPv2 specific queries 0 Sent IGMPv2 specific queries 0 Received IGMPv3 reports 0 Received IGMPv3 reports with right and wrong records 0 Received IGMPv3 specific queries 0 Received IGMPv3 specific sg queries 0 Sent IGMPv3 specific queries 0 Sent IGMPv3 specific sg queries 0 Received PIMv2 hello 0 Received error IGMP messages 0 The output shows that all switches except Switch A...

Page 49: ...mmand to verify that the configured ACL meets the multicast group policy requirements 2 Use the display this command in IGMP snooping view or in a corresponding interface view to verify that the correct multicast group policy has been applied If it has not been applied use the group policy or igmp snooping group policy command to apply the correct multicast group policy 3 Use the display igmp snoo...

Page 50: ...hat travels along the RPT the packet source is the RP For a bootstrap message originated from the BSR the packet source is the BSR For more information about the concepts of SPT RPT source side RPT RP and BSR see Configuring PIM 2 The router selects one of the three optimal routes as the RPF route as follows If the router uses the longest prefix match principle the route with the highest subnet ma...

Page 51: ...ute back to the packet source Then the router performs one of the following actions If the RPF interface is the incoming interface it means that the forwarding entry is correct but the packet traveled along a wrong path The packet fails the RPF check and the router discards the packet If the RPF interface is not the incoming interface it means that the forwarding entry has expired The router repla...

Page 52: ...path for multicast traffic that is different from the transmission path for unicast traffic Figure 16 Changing an RPF route As shown in Figure 16 when no static multicast route is configured Router C s RPF neighbor on the path back to the source is Router A The multicast data from the source travels through Router A to Router C You can configure a static multicast route on Router C and specify Rou...

Page 53: ...arding across unicast subnets Routers forward the multicast data from a multicast source hop by hop along the forwarding tree but some routers might not support multicast protocols in a network When the multicast data is forwarded to a router that does not support IP multicast the forwarding path is blocked In this case you can enable multicast forwarding across two unicast subnets by establishing...

Page 54: ...ers MSR1002 4 1003 8S MSR2003 MSR2004 24 2004 48 MSR3012 3024 3044 3064 MSR954 JH296A JH297A JH298A JH299A JH373A MSR958 JH300A JH301A Commands and descriptions for distributed devices apply to the following routers MSR4060 MSR4080 Configuration task list Tasks at a glance Required Enabling IP multicast routing Optional Configuring multicast routing and forwarding Optional Configuring static multi...

Page 55: ...ame By default IP multicast routing is disabled Configuring multicast routing and forwarding Before you configure multicast routing and forwarding complete the following tasks Configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer Enable PIM DM or PIM SM Configuring static multicast routes To configure a static multicast route for a given multi...

Page 56: ...ting vpn instance vpn instance name N A 3 Specify the longest prefix match principle longest match By default the route preference principle is used Configuring multicast load splitting You can enable the device to split multiple data flows on a per source basis or on a per source and group basis This optimizes the traffic delivery To configure multicast load splitting Step Command Remarks 1 Enter...

Page 57: ...this configuration The multicast MAC address that can be manually configured in the multicast MAC address entry must be unused A multicast MAC address is the MAC address in which the least significant bit of the most significant octet is 1 You can configure static multicast MAC address entries on the specified interfaces in system view or on the current interface in interface view To configure a s...

Page 58: ...ength mask incoming interface interface type interface number all N A Displaying and maintaining multicast routing and forwarding CAUTION The reset commands might cause multicast data transmission failures Execute display commands in any view and reset commands in user view Task Command Display static multicast MAC address entries display mac address mac address vlan vlan id multicast vlan vlan id...

Page 59: ...mask length mask group address mask mask length mask incoming interface interface type interface number outgoing interface exclude include match interface type interface number statistics Display multicast forwarding entries distributed devices in standalone mode centralized devices in IRF mode display multicast vpn instance vpn instance name forwarding table source address mask mask length mask g...

Page 60: ...roup address all chassis chassis number slot slot number Clear statistics for multicast forwarding events reset multicast vpn instance vpn instance name forwarding event Clear multicast forwarding entries reset multicast vpn instance vpn instance name forwarding table source address mask mask length mask group address mask mask length mask incoming interface interface type interface number all Cle...

Page 61: ...hernet1 0 1 quit Enable PIM DM on the other interfaces RouterB interface gigabitethernet 1 0 2 RouterB GigabitEthernet1 0 2 pim dm RouterB GigabitEthernet1 0 2 quit RouterB interface gigabitethernet 1 0 3 RouterB GigabitEthernet1 0 3 pim dm RouterB GigabitEthernet1 0 3 quit On Router A enable IP multicast routing RouterA system view RouterA multicast routing RouterA mrib quit Enable PIM DM on each...

Page 62: ... route on Router B and specify Router C as its RPF neighbor to Source RouterB ip rpf route static 50 1 1 100 24 20 1 1 2 Verifying the configuration Display RPF information for Source on Router B RouterB display multicast rpf info 50 1 1 100 RPF information about source 50 1 1 100 RPF interface GigabitEthernet1 0 2 RPF neighbor 20 1 1 2 Referenced route mask 50 1 1 0 24 Referenced route type multi...

Page 63: ...et1 0 2 pim dm RouterC GigabitEthernet1 0 2 quit On Router A enable IP multicast routing RouterA system view RouterA multicast routing RouterA mrib quit Enable PIM DM on each interface RouterA interface gigabitethernet 1 0 1 RouterA GigabitEthernet1 0 1 pim dm RouterA GigabitEthernet1 0 1 quit RouterA interface gigabitethernet 1 0 2 RouterA GigabitEthernet1 0 2 pim dm RouterA GigabitEthernet1 0 2 ...

Page 64: ...Referenced route type multicast static Route selection rule preference preferred Load splitting rule disable Display RPF information for Source 2 on Router C RouterC display multicast rpf info 50 1 1 100 RPF information about source 50 1 1 100 RPF interface GigabitEthernet1 0 2 RPF neighbor 20 1 1 2 Referenced route mask 50 1 1 0 24 Referenced route type multicast static Route selection rule prefe...

Page 65: ...rC system view RouterC interface tunnel 0 mode gre Assign an IP address to interface Tunnel 0 and specify its source and destination addresses RouterC Tunnel0 ip address 50 1 1 2 24 RouterC Tunnel0 source 30 1 1 2 RouterC Tunnel0 destination 20 1 1 1 RouterC Tunnel0 quit 4 Enable IP multicast routing PIM DM and IGMP On Router A enable IP multicast routing RouterA multicast routing RouterA mrib qui...

Page 66: ...PF neighbor to Source RouterC ip rpf route static 10 1 1 0 24 50 1 1 1 Verifying the configuration Send an IGMP report from Receiver to join multicast group 225 1 1 1 Details not shown Send multicast data from Source to multicast group 225 1 1 1 Details not shown Display PIM routing entries on Router C RouterC display pim routing table Total 1 G entry 1 S G entry 225 1 1 1 Protocol pim dm Flag WC ...

Page 67: ...multicast data from the source Figure 22 Network diagram Table 6 Interface and IP address assignment Device Interface IP address Device Interface IP address Hub 1 GE1 0 1 100 1 1 1 24 Spoke 1 GE1 0 1 100 1 1 3 24 Hub 1 Tunnel1 192 168 0 1 24 Spoke 1 Tunnel1 192 168 0 3 24 Hub 1 Loop0 1 1 1 1 32 Spoke 1 GE1 0 2 20 1 1 10 24 Hub 1 GE1 0 2 10 1 1 10 24 Spoke 2 GE1 0 1 100 1 1 4 24 Hub 2 GE1 0 1 100 1...

Page 68: ...bc hub group 0 hub private address 192 168 0 1 Server vam server domain abc hub group 0 hub private address 102 168 0 2 Specify a private IPv4 address range for spokes in hub group 0 Server vam server domain abc hub group 0 spoke private address range 192 168 0 0 192 168 0 255 Server vam server domain abc hub group 0 quit Server vam server domain abc quit b Configure Hub 1 Create a VAM client name...

Page 69: ...domain abc for the VAM client Spoke2 vam client Spoke2 advpn domain abc Specify the VAM server Spoke2 vam client Spoke2 server primary ip address 100 1 1 100 Set the pre shared key to 123456 Spoke2 vam client Spoke2 pre shared key simple 123456 Enable the VAM client Spoke2 vam client Spoke2 client enable Spoke2 vam client Spoke2 quit f Configure ADVPN tunnel interfaces On Hub 1 configure GRE mode ...

Page 70: ...spf 1 area 0 0 0 0 network 1 1 1 1 0 0 0 255 Hub1 ospf 1 area 0 0 0 0 network 192 168 0 0 0 0 0 255 Hub1 ospf 1 area 0 0 0 0 quit Hub1 ospf 1 quit On Hub 2 configure OSPF Hub2 system view Hub2 ospf Hub2 ospf 1 area 0 0 0 0 Hub2 ospf 1 area 0 0 0 0 network 2 2 2 2 0 0 0 255 Hub2 ospf 1 area 0 0 0 0 network 192 168 0 0 0 0 0 255 Hub2 ospf 1 area 0 0 0 0 quit Hub2 ospf 1 quit On Spoke 1 configure OSP...

Page 71: ... C BSR and a C RP Hub1 system view Hub1 pim Hub1 pim c bsr 1 1 1 1 Hub1 pim c rp 1 1 1 1 Hub1 pim quit b Configure Hub 2 Enable IP multicast routing Hub2 system view Hub2 multicast routing Hub2 mrib quit Enable PIM SM on Loopback 0 Hub2 interface loopback 0 Hub2 LoopBack0 pim sm Hub2 LoopBack0 quit Enable PIM SM and NBMA mode on tunnel interface tunnel1 Hub2 interface tunnel 1 Hub2 Tunnel1 pim sm ...

Page 72: ...Tunnel1 quit Verifying the configuration Send an IGMP report from Spoke 1 to join multicast group 225 1 1 1 Details not shown Send multicast data from the source to the multicast group Details not shown Display PIM routing entries on Hub 1 Hub1 display pim routing table Total 1 G entries 1 S G entries 225 1 1 1 RP 1 1 1 1 local Protocol pim sm Flag WC UpTime 00 02 52 Upstream interface Register Tu...

Page 73: ...atus and link layer status of interfaces are both up but the static multicast route fails Solution To resolve the problem 1 Use the display multicast routing table static command to display information about static multicast routes Verify that the static multicast route has been correctly configured and that the route entry exists in the static multicast routing table 2 Check the type of interface...

Page 74: ...hat run IGMP on the same subnet can get IGMP membership report messages called reports from hosts However only one router can act as the IGMP querier to send IGMP query messages called queries The querier election mechanism determines which router acts as the IGMP querier on the subnet In IGMPv1 the DR elected by the multicast routing protocol such as PIM acts as the IGMP querier For more informat...

Page 75: ...tops sending reports to that multicast group If the subnet has no members for a multicast group the IGMP routers will not receive any report addressed to that multicast group In this case the routers clear the information for that multicast group after a period of time IGMPv2 enhancements Backwards compatible with IGMPv1 IGMPv2 has introduced a querier election mechanism and a leave group mechanis...

Page 76: ...icast sources When a host joins a multicast group one of the following occurs If the host expects to receive multicast data from specific sources like S1 S2 it sends a report with the Filter Mode denoted as Include Sources S1 S2 If the host expects to reject multicast data from specific sources like S1 S2 it sends a report with the Filter Mode denoted as Exclude Sources S1 S2 As shown in Figure 24...

Page 77: ...changed from Exclude to Include TO_EX The filtering mode has changed from Include to Exclude ALLOW The Source Address field contains a list of additional sources from which the receiver wants to obtain data If the current filtering mode is Include these sources are added to the multicast source list If the current filtering mode is Exclude these sources are deleted from the multicast source list B...

Page 78: ...range and matches IGMP SSM mappings Router A translates G in the report into G INCLUDE S1 S2 to provide SSM services NOTE The IGMP SSM mapping feature does not process IGMPv3 reports For more information about SSM group ranges see Configuring PIM IGMP proxying As shown in Figure 26 in a simple tree shaped topology it is not necessary to run multicast routing protocols such as PIM on edge devices I...

Page 79: ...n this membership database The host interfaces respond to queries according to the membership database or send join leave messages when the database changes The router interfaces participate in the querier election send queries and maintain memberships based on received IGMP reports IGMP support for VPNs IGMP maintains group memberships on a per interface basis After receiving an IGMP message on a...

Page 80: ...re you configure basic IGMP features complete the following tasks Configure any unicast routing protocol so that all devices can interoperate at the network layer Configure PIM Determine the IGMP version Determine the multicast group and multicast source addresses for static group member configuration Determine the ACL to be used in the multicast group policy Enabling IGMP Enable IGMP on the inter...

Page 81: ...a static group member has the following restrictions If the interface is IGMP and PIM SM enabled it must be a PIM SM DR If the interface is IGMP enabled but not PIM SM enabled it must be an IGMP querier For more information about PIM SM and DR see Configuring PIM Configuration procedure To configure a static group member Step Command Remarks 1 Enter system view system view N A 2 Enter interface vi...

Page 82: ...c queries after receiving a leave message In IGMPv3 it sets the interval at which a querier sends group and source specific queries after receiving a report that changes multicast source and group mappings IGMP last member query count In IGMPv2 it sets the number of group specific queries that a querier sends after receiving a leave message In IGMPv3 it sets the number of group and source specific...

Page 83: ... IGMP view igmp vpn instance vpn instance name N A 3 Set the IGMP querier s robustness variable robust count count By default the IGMP querier s robustness variable is 2 4 Set the IGMP startup query interval startup query interval interval By default the IGMP startup query interval equals one quarter of the IGMP general query interval 5 Set the IGMP startup query count startup query count count By...

Page 84: ...ult the IGMP last member query count equals the IGMP querier s robustness variable 9 Set the maximum response time for IGMP general queries igmp max response time time By default the maximum response time for IGMP general queries is 10 seconds 10 Set the IGMP other querier present timer igmp other querier present interval interval By default the IGMP other querier present timer is calculated by us...

Page 85: ...proxying This section describes how to configure IGMP proxying Configuration prerequisites Before you configure the IGMP proxying feature complete the following tasks 1 Configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer 2 Determine the router interfaces and host interfaces based on the network topology 3 Enable IGMP on the router interfaces...

Page 86: ...ce failed in the querier election enable multicast forwarding on the interface to forward multicast data to attached receiver hosts Configuration restrictions and guidelines A shared media network might have multiple MLD proxies including one proxy acting as a querier To avoid duplicate multicast traffic do not enable multicast forwarding on any of the non querier MLD proxies for the network Confi...

Page 87: ...nformation without cooperation of other devices when an active standby switchover occurs Use this feature to prevent an active standby switchover from affecting the multicast service To enable IGMP NSR Step Command Remarks 1 Enter system view system view N A 2 Enable IGMP NSR igmp non stop routing By default IGMP NSR is disabled Displaying and maintaining IGMP CAUTION The reset igmp group command ...

Page 88: ... all interface interface type interface number all group address mask mask mask length source address mask mask mask length IGMP configuration examples Basic IGMP features configuration examples Network requirements As shown in Figure 27 OSPF and PIM DM run on the network VOD streams are sent to receiver hosts in multicast Receiver hosts of different organizations form stub networks N1 and N2 Host...

Page 89: ...1 quit Enable PIM DM on GigabitEthernet 1 0 2 RouterA interface gigabitethernet 1 0 2 RouterA GigabitEthernet1 0 2 pim dm RouterA GigabitEthernet1 0 2 quit On Router B enable IP multicast routing RouterB system view RouterB multicast routing RouterB mrib quit Enable IGMP on GigabitEthernet 1 0 1 RouterB interface gigabitethernet 1 0 1 RouterB GigabitEthernet1 0 1 igmp enable RouterB GigabitEtherne...

Page 90: ...erA GigabitEthernet1 0 1 quit Verifying the configuration Display IGMP information for GigabitEthernet 1 0 1 on Router B RouterB display igmp interface gigabitethernet 1 0 1 GigabitEthernet1 0 1 10 110 2 1 IGMP is enabled IGMP version 2 Query interval for IGMP 125s Other querier present time for IGMP 255s Maximum query response time for IGMP 10s Querier for IGMP 10 110 2 1 This router IGMP groups ...

Page 91: ...er D GE1 0 3 192 168 4 1 24 Configuration procedure 1 Assign an IP address and subnet mask to each interface as shown in Figure 28 Details not shown 2 Configure OSPF on the routers in the PIM SM domain Details not shown 3 Enable IP multicast routing PIM SM and IGMP On Router D enable IP multicast routing RouterD system view RouterD multicast routing RouterD mrib quit Enable IGMPv3 on the receiver ...

Page 92: ...e GigabitEthernet 1 0 3 as a C BSR and a C RP RouterD pim RouterD pim c bsr 192 168 4 1 RouterD pim c rp 192 168 4 1 RouterD pim quit 5 Configure the SSM group range On Router D specify 232 1 1 0 24 as the SSM group range RouterD acl basic 2000 RouterD acl ipv4 basic 2000 rule permit source 232 1 1 0 0 0 0 255 RouterD acl ipv4 basic 2000 quit RouterD pim RouterD pim ssm policy 2000 RouterD pim qui...

Page 93: ...4 2 Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protocol igmp UpTime 00 13 25 Expires 133 133 3 1 232 1 1 1 RP 192 168 4 1 Protocol pim ssm Flag UpTime 00 13 25 Upstream interface GigabitEthernet1 0 2 Upstream neighbor 192 168 3 1 RPF prime neighbor 192 168 3 1 Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protoc...

Page 94: ...tEthernet1 0 1 quit On Router B enable IP multicast routing RouterB system view RouterB multicast routing RouterB mrib quit Enable IGMP proxying on GigabitEthernet 1 0 1 RouterB interface gigabitethernet 1 0 1 RouterB GigabitEthernet1 0 1 igmp proxy enable RouterB GigabitEthernet1 0 1 quit Enable IGMP on GigabitEthernet 1 0 2 RouterB interface gigabitethernet 1 0 2 RouterB GigabitEthernet1 0 2 igm...

Page 95: ...hat the IGMP version on the interface is lower than that on the host 4 Use the display current configuration interface command to verify that no multicast group policies have been configured to filter IGMP reports for multicast group G 5 If the problem persists contact Hewlett Packard Enterprise Support Inconsistent membership information on the routers on the same subnet Symptom Different members...

Page 96: ...work Branches without downstream receivers are pruned from the forwarding trees When a pruned branch has new receivers the graft mechanism turns the pruned branch into a forwarding branch In PIM DM the multicast forwarding paths for a multicast group constitutes a forwarding tree The forwarding tree is rooted at the multicast source and has multicast group members as its leaves Because the forward...

Page 97: ... forwarding branches Graft A previously pruned branch might have new downstream receivers To reduce the latency for resuming the forwarding capability of this branch a graft mechanism is used as follows 1 The node that needs to receive the multicast data sends a graft message to its upstream node telling it to rejoin the SPT 2 After receiving this graft message on an interface the upstream node ad...

Page 98: ...uses the flood and prune cycles to build SPTs for multicast data forwarding Although an SPT has the shortest paths from the multicast source to the receivers it is built with a low efficiency Therefore PIM DM is not suitable for large and medium sized networks PIM SM uses the pull mode for multicast forwarding and it is suitable for large and medium sized networks with sparsely and widely distribu...

Page 99: ...is enough for multicast forwarding throughout the network In this case you can specify a static RP on each router in the PIM SM domain However in a PIM SM network that covers a wide area a huge amount of multicast data is forwarded by the RP To lessen the RP burden and optimize the topological structure of the RPT you can configure multiple candidate RPs C RPs in a PIM SM domain An RP is dynamical...

Page 100: ... redundancy backup among RPs by configuring multiple RPs with the same IP address A multicast source registers with the closest RP or a receiver joins the closest RP to implement source information synchronization Anycast RP has the following benefits Optimal RP path A multicast source registers with the closest RP to build an optimal SPT A receiver joins the closest RP to build an optimal RPT Red...

Page 101: ...iders that the register message is from the DR RP 1 changes the source IP address of the register message to its own address and sends the message to the other members RP 2 and RP 3 If a router acts as both a DR and an RP it creates a register message and then forwards the message to the other RP members b After receiving the register message RP 2 and RP 3 find out that the source address of the r...

Page 102: ...aches the RP the RP forwards the data to the DR along the established RPT and finally to the receiver When a receiver is no longer interested in the multicast data addressed to the multicast group G the receiver side DR sends a prune message The prune message goes hop by hop along the RPT to the RP After receiving the prune message the upstream node deletes the interface that connects to this down...

Page 103: ... prevent the DR from unnecessarily encapsulating the data Switchover to SPT CAUTION If the switch is an RP disabling switchover to SPT might cause multicast traffic forwarding failures on the source side DR When disabling switchover to SPT be sure you fully understand its impact on your network In a PIM SM domain only one RP and one RPT provide services for a specific multicast group Before the sw...

Page 104: ...tchover to SPT PIM SM builds SPTs more economically than PIM DM does Assert PIM SM uses a similar assert mechanism as PIM DM does For more information see Assert BIDIR PIM overview In some many to many applications such as a multi side video conference multiple receivers of a multicast group might be interested in the multicast data from multiple multicast sources With PIM DM or PIM SM each router...

Page 105: ...IM routers 224 0 0 13 to initiate a DF election process The election message carries the RP s address and the route preference and the metric of the unicast route or static multicast route to the RP A DF is elected as follows 1 The router with a higher route preference becomes the DF 2 If the routers have the same route preference the router with a lower metric becomes the DF 3 If the routers have...

Page 106: ...ds a G entry to its forwarding table After a receiver host leaves the multicast group G the directly connected router multicasts a prune message to all PIM routers on the subnet The prune message goes hop by hop along the reverse direction of the RPT to the RP After receiving the prune message an upstream node removes the interface that connects to the downstream node from the outgoing interface l...

Page 107: ...M SM domain or a BIDIR PIM domain contains only one BSR which is responsible for advertising RP set information within the entire domain The information about all multicast groups is forwarded within the network that the BSR administers This is called the non scoped BSR mechanism Administrative scoping mechanism To implement refined management you can divide a PIM SM domain or BIDIR PIM domain int...

Page 108: ...l zone for particular multicast groups The multicast packets for such multicast groups are confined within the local admin scoped zone and cannot cross the boundary of the zone Figure 40 Relationship in view of geographical locations As shown in Figure 40 for the multicast groups in a specific group address range the admin scoped zones must be geographically separated and isolated A router cannot ...

Page 109: ...ual applications part of IGMPv3 and PIM SM techniques are adopted to implement the SSM model In the SSM model because receivers have located a multicast source no RP or RPT is required Multicast sources do not register with the RP and the MSDP is not needed for discovering multicast sources in other PIM domains Neighbor discovery PIM SSM uses the same neighbor discovery mechanism as PIM SM For mor...

Page 110: ...ld an SPT The SPT is rooted at the multicast source S and has the receivers as its leaves This SPT is the transmission channel in PIM SSM If the group address is not in the SSM group range the receiver side DR sends a G join message to the RP The multicast source registers with the source side DR In PIM SSM the term subscribe message refers to a join message Relationship among PIM protocols In a P...

Page 111: ...DM Protocol Specification Revised RFC 4601 Protocol Independent Multicast Sparse Mode PIM SM Protocol Specification Revised RFC 4610 Anycast RP Using Protocol Independent Multicast PIM RFC 5015 Bidirectional Protocol Independent Multicast BIDIR PIM RFC 5059 Bootstrap Router BSR Mechanism for Protocol Independent Multicast PIM RFC 4607 Source Specific Multicast for IP Draft ietf ssm overview 05 An ...

Page 112: ... the interfaces on a device must operate in the same PIM mode in the public network or the same VPN instance To enable PIM DM Step Command Remarks 1 Enter system view system view N A 2 Enable IP multicast routing and enter MRIB view multicast routing vpn instance vpn instance name By default IP multicast routing is disabled 3 Return to system view quit N A 4 Enter interface view interface interfac...

Page 113: ...tream node The state refresh message stops being forwarded when the TTL value comes down to 0 A state refresh message with a large TTL value might cycle on a small network To effectively control the propagation scope of state refresh messages configure an appropriate TTL value based on the network size on the router directly connected with the multicast source To configure state refresh parameters...

Page 114: ...sk of configuring a BSR on a network without C RPs Optional Configuring multicast source registration N A Optional Configuring the switchover to SPT N A Optional Configuring common PIM features N A Configuration prerequisites Before you configure PIM SM configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer Enabling PIM SM Enable IP multicast r...

Page 115: ...nd the BSR When you configure static RPs for PIM SM follow these restrictions and guidelines You can configure the same static RP for different multicast groups by using the same RP address but different ACLs You do not need to enable PIM for an interface to be configured as a static RP If you configure multiple static RPs for a multicast group only the static RP with the highest IP address takes ...

Page 116: ... This feature enables the device to receive Auto RP announcement and discovery messages and learn RP information The destination IP addresses for Auto RP announcement and discovery messages are 224 0 1 39 and 224 0 1 40 respectively To enable Auto RP listening Step Command Remarks 1 Enter system view system view N A 2 Enter PIM view pim vpn instance vpn instance name N A 3 Enable Auto RP listening...

Page 117: ...y with the priority carried in the message The C BSR with a higher priority wins the BSR election If a tie exists in the priority the C BSR with a higher IP address wins The loser uses the winner s BSR address to replace its own BSR address and no longer regards itself as the BSR The winner retains its own BSR address and continues to regard itself as the BSR The elected BSR distributes the RP set...

Page 118: ...border Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Configure a PIM domain border pim bsr boundary By default an interface is not a PIM domain border Disabling BSM semantic fragmentation BSM semantic fragmentation enables a BSR to split a BSM into multiple BSM fragments BSMFs if the BSM exceeds the MTU In this way a...

Page 119: ... checksum based on the entire register message to ensure information integrity of a register message in the transmission process If a device that does not support this feature is present on the network you can configure the device to calculate the checksum based on the register message header The RP sends a register stop message to the source side DR in either of the following conditions The RP st...

Page 120: ...res on the source side DR When disabling the switchover to SPT make sure you fully understand its impact on your network Both the receiver side DR and RP can monitor the traffic rate of passing by multicast packets and thus trigger a switchover from RPT to SPT The monitor function is not available on switches To configure the switchover to SPT Step Command Remarks 1 Enter system view system view N...

Page 121: ...col so that all devices in the domain can interoperate at the network layer Enabling BIDIR PIM Because BIDIR PIM is implemented on the basis of PIM SM you must enable PIM SM before you enable BIDIR PIM As a best practice enable PIM SM on all non border interfaces of routers when you deploy a BIDIR PIM domain IMPORTANT All interfaces on a device must be enabled with the same PIM mode To enable BIDI...

Page 122: ...uidelines You can configure the same static RP for different multicast groups by using the same RP address but different ACLs You do not need to enable PIM for an interface to be configured as a static RP If you configure multiple static RPs for a multicast group only the static RP with the highest IP address takes effect The static RP configuration must be the same on all routers in the BIDIR PIM...

Page 123: ...The destination IP addresses for Auto RP announcement and discovery messages are 224 0 1 39 and 224 0 1 40 respectively To enable Auto RP listening Step Command Remarks 1 Enter system view system view N A 2 Enter PIM view pim vpn instance vpn instance name N A 3 Enable Auto RP listening auto rp enable By default Auto RP listening is disabled Setting the maximum number of BIDIR PIM RPs In a BIDIR P...

Page 124: ...rs in the BIDIR PIM domain All routers use the same hash algorithm to select an RP for a specific multicast group A BSR policy enables the router to filter BSR messages by using an ACL that specifies the legal BSR addresses It is used to guard against the following BSR spoofing cases Some maliciously configured hosts can forge BSMs to fool routers and change RP mappings Such attacks often occur on...

Page 125: ...ins If the BIDIR SM domain contains a device that does not support this feature you must disable this feature on all C BSRs If you do not disable this feature such a device regards a BSMF as a BSM and updates the RP set information each time it receives a BSMF It learns only part of the RP set information which further affects the RP election To disable BSM semantic fragmentation Step Command Rema...

Page 126: ...figure PIM SSM configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer Enabling PIM SM Before you configure PIM SSM you must enable PIM SM because the implementation of the SSM model is based on subsets of PIM SM When you deploy a PIM SSM domain enable PIM SM on non border interfaces of the routers IMPORTANT All the interfaces on a device must b...

Page 127: ...in Configuration procedure To configure an SSM group range Step Command Remarks 1 Enter system view system view N A 2 Enter PIM view pim N A 3 Configure the SSM group range ssm policy ipv4 acl number By default the SSM group range is 232 0 0 0 8 Configuring common PIM features Configuration task list Tasks at a glance Optional Configuring a multicast source policy Optional Configuring a PIM hello ...

Page 128: ...the policy the neighbor is automatically removed when its aging timer expires To configure a PIM hello policy Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Configure a PIM hello policy pim neighbor policy ipv4 acl number By default no PIM hello policies exist on an interface and all PIM hello messages are regarded le...

Page 129: ...th PIM The generation ID is a random value but only changes when the status of the router changes If a PIM router finds that the generation ID in a hello message from the upstream router has changed it assumes that the status of the upstream router has changed In this case it sends a join message to the upstream router for status update You can configure an interface to drop hello messages without...

Page 130: ...ed by simultaneous hello messages After receiving a hello message a PIM router waits for a random time before sending a hello message This random time is in the range of 0 to the triggered hello delay Join Prune interval Interval at which a PIM router sends join prune messages to its upstream routers for state update Joined Pruned state holdtime Time for which a PIM router keeps the joined pruned ...

Page 131: ... setting is 210 seconds Setting the maximum size of each join or prune message The loss of an oversized join or prune message might result in loss of massive information You can set a small value for the size of each join or prune message to reduce the impact To set the maximum size of each join or prune message Step Command Remarks 1 Enter system view system view N A 2 Enter PIM view pim vpn inst...

Page 132: ...d on the interface To avoid duplicate multicast data transmission and flow loop do not enable this feature on a shared media LAN with multiple PIM routers Configuration procedure To enable PIM passive mode on an interface Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Enable PIM passive mode on the interface pim passi...

Page 133: ...ons for PIM are enabled Enabling NBMA mode for ADVPN tunnel interfaces This feature allows ADVPN tunnel interfaces to forward multicast data to target spokes and hubs For more information about ADVPN see Layer 3 IP Services Configuration Guide Configuration restrictions and guidelines When you enable NBMA mode follow these restrictions and guidelines This feature is not available for PIM DM This f...

Page 134: ...play PIM routing entries display pim vpn instance vpn instance name routing table group address mask mask length mask source address mask mask length mask flags flag value fsm incoming interface interface type interface number mode mode type outgoing interface exclude include match interface type interface number proxy Display RP information in the PIM SM domain display pim vpn instance vpn instan...

Page 135: ...igure OSPF on the routers in the PIM DM domain Details not shown 3 Enable IP multicast routing IGMP and PIM DM On Router A enable IP multicast routing RouterA system view RouterA multicast routing RouterA mrib quit Enable IGMP on the receiver side interface GigabitEthernet 1 0 1 RouterA interface gigabitethernet 1 0 1 RouterA GigabitEthernet1 0 1 igmp enable RouterA GigabitEthernet1 0 1 quit Enabl...

Page 136: ...n Display PIM information on Router D RouterD display pim interface Interface NbrCnt HelloInt DR Pri DR Address GE1 0 1 0 30 1 10 110 5 1 local GE1 0 2 1 30 1 192 168 1 2 local GE1 0 3 1 30 1 192 168 2 2 local GE1 0 4 1 30 1 192 168 3 2 local Display the PIM neighboring relationships on Router D RouterD display pim neighbor Total Number of Neighbors 3 Neighbor Interface Uptime Expires Dr Priority ...

Page 137: ... of downstreams 2 1 GigabitEthernet1 0 2 Protocol pim dm UpTime 00 03 27 Expires 2 GigabitEthernet1 0 4 Protocol pim dm UpTime 00 03 27 Expires The output shows the following information Routers on the SPT path Router A and Router D have the correct S G entries Router A has the correct G entry PIM SM non scoped zone configuration example Network requirements As shown in Figure 45 OSPF runs on the ...

Page 138: ...4 Router C GE1 0 2 192 168 3 1 24 Router E GE1 0 4 192 168 4 1 24 Configuration procedure 1 Assign an IP address and subnet mask to each interface as shown in Figure 45 Details not shown 2 Configure OSPF on all routers in the PIM SM domain Details not shown 3 Enable IP multicast routing IGMP and PIM SM On Router A enable IP multicast routing RouterA system view RouterA multicast routing RouterA mr...

Page 139: ...225 1 1 0 0 0 0 255 RouterE acl ipv4 basic 2005 quit Configure GigabitEthernet 1 0 3 as a C BSR and a C RP and configure GigabitEthernet 1 0 2 of Router D as the static RP RouterE pim RouterE pim c bsr 192 168 9 2 RouterE pim c rp 192 168 9 2 group policy 2005 RouterE pim static rp 192 168 1 2 RouterE pim quit On Router A configure GigabitEthernet 1 0 2 of Router D as the static RP RouterA pim Rou...

Page 140: ...in scoped zone 1 admin scoped zone 2 and the global scoped zone Router B Router C and Router D are ZBRs of the three zones respectively Source 1 and Source 2 send different multicast data to multicast group 239 1 1 1 Host A receives the multicast data only from Source 1 and Host B receives the multicast data only from Source 2 Source 3 sends multicast data to multicast group 224 1 1 1 Host C is a ...

Page 141: ...2 24 Router C GE1 0 3 10 110 5 1 24 Router F GE1 0 3 10 110 3 2 24 Router C GE1 0 4 10 110 2 2 24 Router G GE1 0 1 192 168 5 1 24 Router C GE1 0 5 10 110 6 1 24 Router G GE1 0 2 10 110 9 2 24 Router H GE1 0 1 10 110 5 2 24 Source 1 192 168 2 10 24 Router H GE1 0 2 10 110 7 1 24 Source 2 192 168 3 10 24 Router I GE1 0 1 192 168 6 1 24 Source 3 192 168 5 10 24 Router I GE1 0 2 10 110 10 2 24 Router ...

Page 142: ...B mrib quit RouterB interface gigabitethernet 1 0 1 RouterB GigabitEthernet1 0 1 pim sm RouterB GigabitEthernet1 0 1 quit RouterB interface gigabitethernet 1 0 2 RouterB GigabitEthernet1 0 2 pim sm RouterB GigabitEthernet1 0 2 quit RouterB interface gigabitethernet 1 0 3 RouterB GigabitEthernet1 0 3 pim sm RouterB GigabitEthernet1 0 3 quit RouterB interface gigabitethernet 1 0 4 RouterB GigabitEth...

Page 143: ...2 as a C BSR and a C RP for admin scoped zone 1 RouterB pim RouterB pim c bsr 10 110 1 2 scope 239 0 0 0 8 RouterB pim c rp 10 110 1 2 group policy 2001 RouterB pim quit On Router D configure the service scope of RP advertisements RouterD acl basic 2001 RouterD acl ipv4 basic 2001 rule permit source 239 0 0 0 0 255 255 255 RouterD acl ipv4 basic 2001 quit Configure GigabitEthernet 1 0 1 as a C BSR...

Page 144: ...sh mask length 30 Uptime 00 01 45 Scope 239 0 0 0 8 State Elected Bootstrap timer 00 01 12 Elected BSR address 10 110 5 2 Priority 64 Hash mask length 30 Uptime 00 03 48 Candidate BSR address 10 110 5 2 Priority 64 Hash mask length 30 Display BSR information on Router F RouterF display pim bsr info Scope non scoped State Elected Bootstrap timer 00 00 49 Elected BSR address 10 110 9 1 Priority 64 H...

Page 145: ...Time Uptime Expires 10 110 5 2 local 192 180 00 06 54 00 02 41 Display RP information on Router F RouterF display pim rp info BSR RP information Scope non scoped Group MaskLen 224 0 0 0 4 RP address Priority HoldTime Uptime Expires 10 110 9 1 local 192 180 00 00 32 00 01 58 BIDIR PIM configuration example Network requirements As shown in Figure 47 OSPF runs on the network VOD streams are sent to r...

Page 146: ... address and subnet mask to each interface as shown in Figure 47 Details not shown 2 Configure OSPF on the routers in the BIDIR PIM domain Details not shown 3 Enable IP multicast routing PIM SM BIDIR PIM and IGMP On Router A enable IP multicast routing enable PIM SM on each interface and enable BIDIR PIM RouterA system view RouterA multicast routing RouterA mrib quit RouterA interface gigabitether...

Page 147: ...nable PIM SM on each interface and enable BIDIR PIM RouterC system view RouterC multicast routing RouterC mrib quit RouterC interface gigabitethernet 1 0 1 RouterC GigabitEthernet1 0 1 pim sm RouterC GigabitEthernet1 0 1 quit RouterC interface gigabitethernet 1 0 2 RouterC GigabitEthernet1 0 2 pim sm RouterC GigabitEthernet1 0 2 quit RouterC interface loopback 0 RouterC LoopBack0 pim sm RouterC Lo...

Page 148: ...y pim df info RP address 1 1 1 1 Interface State DF Pref DF Metric DF Uptime DF Address GE1 0 1 Win 100 1 01 24 09 192 168 2 1 local GE1 0 2 Win 100 1 01 24 09 10 110 1 2 local GE1 0 3 Lose 0 0 01 23 12 10 110 2 2 Display the DF information of BIDIR PIM on Router C RouterC display pim df info RP address 1 1 1 1 Interface State DF Pref DF Metric DF Uptime DF Address Loop0 GE1 0 1 Win 0 0 01 06 07 1...

Page 149: ... 00 07 21 RPF interface LoopBack0 List of 2 DF interfaces 1 GigabitEthernet1 0 1 2 GigabitEthernet1 0 2 Display information about the DF for multicast forwarding on Router D RouterD display multicast forwarding df info Total 1 RP 1 matched 00001 RP address 1 1 1 1 Flags 0x0 Uptime 00 05 12 RPF interface GigabitEthernet1 0 3 List of 2 DF interfaces 1 GigabitEthernet1 0 1 2 GigabitEthernet1 0 2 PIM ...

Page 150: ...ter E GE1 0 3 192 168 9 2 24 Router C GE1 0 2 192 168 3 1 24 Router E GE1 0 4 192 168 4 1 24 Configuration procedure 1 Assign an IP address and subnet mask to each interface as shown in Figure 48 Details not shown 2 Configure OSPF on the routers in the PIM SSM domain Details not shown 3 Enable IP multicast routing IGMP and PIM SM On Router A enable IP multicast routing RouterA system view RouterA ...

Page 151: ...RouterA acl ipv4 basic 2000 rule permit source 232 1 1 0 0 0 0 255 RouterA acl ipv4 basic 2000 quit RouterA pim RouterA pim ssm policy 2000 RouterA pim quit Configure the SSM group range on Router B Router C Router D and Router E in the same way Router A is configured Details not shown Verifying the configuration Display PIM information on Router A RouterA display pim interface Interface NbrCnt He...

Page 152: ...a multicast distribution tree cannot be correctly built Solution To resolve the problem 1 Use display ip routing table to verify that a unicast route to the multicast source or the RP is available 2 Use display pim interface to verify PIM information on each interface especially on the RPF interface If PIM is not enabled on the interfaces use pim dm or pim sm to enable PIM DM or PIM SM for the int...

Page 153: ...ble to verify that a unicast route to the RP is available on each router 2 Use display pim rp info to verify that the dynamic RP information is consistent on all routers 3 Use display pim rp info to verify that the same static RPs are configured on all routers on the network 4 If the problem persists contact Hewlett Packard Enterprise Support An RPT cannot be built or multicast source registration...

Page 154: ...145 5 If the problem persists contact Hewlett Packard Enterprise Support ...

Page 155: ... domains This allows multicast data to be transmitted among different domains With MSDP peer relationships established between appropriate routers on the network the RPs of different PIM SM domains are interconnected with one another These MSDP peers exchange source active SA messages so that the multicast source information is shared among these domains MSDP is applicable only if the intra domain...

Page 156: ...r MSDP peer with multiple remote MSDP peers such as RP 2 An intermediate MSDP peer forwards SA messages received from one remote MSDP peer to other remote MSDP peers It acts as a relay for forwarding multicast source information MSDP peers created on PIM SM routers that are not RPs Router A and Router B are MSDP peers on multicast routers that are not RPs Such MSDP peers only forward SA messages I...

Page 157: ...peers into an MSDP mesh group to avoid SA message flooding between MSDP peers NOTE An MSDP mesh group refers to a group of MSDP peers that establish MSDP peering relationships with each other and share the same group name 4 SA messages are forwarded from one MSDP peer to another Finally information about the multicast source traverses all PIM SM domains with MSDP peers PIM SM 2 and PIM SM 3 in thi...

Page 158: ...timal RPT Redundancy backup among RPs When an RP fails the RP related sources and receiver side DRs will register with or join their closest available RPs This achieves redundancy backup among RPs Anycast RP is implemented by using either of the following methods Anycast RP through PIM SM In this method you can configure multiple RPs for one multicast group and add them to an Anycast RP set For mo...

Page 159: ...P forwards the data along the RPT to the receiver After receiving the multicast data the receiver side DR determines whether to initiate an RPT to SPT switchover process based on its configuration MSDP peer RPF forwarding The MSDP peer RPF check is used for forwarding SA messages on a network that runs MSDP If the peer RPF check succeeds the SA message is accepted and forwarded Otherwise the SA me...

Page 160: ...message because RP 6 is its static RPF peer 7 RP 8 accepts and forwards the SA message because RP 7 is the EBGP or MBGP next hop of the peer RPF route to RP 1 8 RP 9 accepts the SA message because RP 8 is the only RP of RP 9 MSDP support for VPNs Interfaces on the multicast routers in a VPN can set up MSDP peering relationships with each other With the SA messages exchanged between MSDP peers the ...

Page 161: ...SA request messages Optional Configuring SA message policies Optional Configuring the SA cache mechanism Configuring basic MSDP features All the configuration tasks in this section should be performed on RPs in PIM SM domains and each of these RPs acts as an MSDP peer Configuration prerequisites Before you configure basic MSDP features complete the following tasks Configure a unicast routing proto...

Page 162: ...es forwarded by the static RPF peer from undertaking the RPF check This simplifies the RPF check mechanism for SA messages You can configure an RP policy for the static RPF peer to filter SA messages based on the used IPv4 prefix list that specifies the RP addresses If only one MSDP peer is configured on a router this MSDP peer is considered to be a static RPF peer To configure a static RPF peer S...

Page 163: ...ers are interconnected with one another To configure an MSDP mesh group Step Command Remarks 1 Enter system view system view N A 2 Enter MSDP view msdp vpn instance vpn instance name N A 3 Configure an MSDP mesh group peer peer address mesh group name By default an MSDP peer does not belong to any mesh group If you assign an MSDP peer to multiple mesh groups the most recent configuration takes eff...

Page 164: ...live keepalive holdtime By default the keepalive timer and peer hold timer are 60 seconds and 75 seconds respectively This command immediately takes effect on an established session 5 Configure the MSDP connection retry interval timer retry interval The default setting is 30 seconds 6 Configure MD5 authentication for both MSDP peers to establish a TCP connection peer peer address password cipher s...

Page 165: ...ault the RP address in SA messages originated by a member Anycast RP is the Anycast RP address The SA messages will fail the RPF check on the other members because the RP address in SA messages is the same as the local RP address In this case source information cannot be exchanged within the Anycast RP To solve the problem you must specify an interface other than the interface where the member Any...

Page 166: ... ACL that specifies the multicast sources and groups By default multicast data packets are encapsulated in SA messages and forwarded to MSDP peers only if the TTL values in the packets are larger than zero You can set the lower TTL threshold for multicast data packets encapsulated in SA messages that are sent to an MSDP peer Then only multicast data packets whose TTL values are larger than or equa...

Page 167: ...received SA messages 4 Set the maximum number of S G entries in the SA cache from an MSDP peer peer peer address sa cache maximum sa limit The default setting is 4294967295 Displaying and maintaining MSDP Execute display commands in any view and reset commands in user view Task Command Display brief information about MSDP peers display msdp vpn instance vpn instance name brief state connect disabl...

Page 168: ...0 1 2 24 Router D GE1 0 1 10 110 4 2 24 Router A GE1 0 2 10 110 2 1 24 Router D GE1 0 2 10 110 5 1 24 Router A GE1 0 3 10 110 3 1 24 Router E GE1 0 1 10 110 6 1 24 Router B GE1 0 1 10 110 1 1 24 Router E GE1 0 2 192 168 3 2 24 Router B GE1 0 2 192 168 1 1 24 Router E Loop0 3 3 3 3 32 Router B Loop0 1 1 1 1 32 Router F GE1 0 1 10 110 6 2 24 Router C GE1 0 1 10 110 4 1 24 Router F GE1 0 2 10 110 7 1...

Page 169: ...abitEthernet1 0 3 igmp enable RouterA GigabitEthernet1 0 3 quit Enable IP multicast routing PIM SM and IGMP on Router B Router C Router D Router E and Router F in the same way Router A is configured Details not shown Configure a PIM domain border on Router B RouterB interface gigabitethernet 1 0 2 RouterB GigabitEthernet1 0 2 pim bsr boundary RouterB GigabitEthernet1 0 2 quit Configure a PIM domai...

Page 170: ...Router B RouterB msdp RouterB msdp peer 192 168 1 2 connect interface gigabitethernet 1 0 2 RouterB msdp quit Configure MSDP peers on Router C RouterC msdp RouterC msdp peer 192 168 1 1 connect interface gigabitethernet 1 0 3 RouterC msdp peer 192 168 3 2 connect interface gigabitethernet 1 0 2 RouterC msdp quit Configure an MSDP peer on Router E RouterE msdp RouterE msdp peer 192 168 3 1 connect ...

Page 171: ...that hosts in PIM SM 1 and PIM SM 3 can receive the multicast data from Source 1 and Source 2 Details not shown Display brief information about MSDP peer groups on Router B RouterB display msdp brief Configured Established Listen Connect Shutdown Disabled 1 1 0 0 0 0 Peer address State Up Down time AS SA count Reset count 192 168 1 2 Established 00 12 19 200 13 0 Display brief information about MS...

Page 172: ... 1 length 20 without packet time 75s Information about Source Group based SA filtering policy Import policy None Export policy None Information about SA Requests Policy to accept SA Requests None Sending SA Requests status Disable Minimum TTL to forward SA with encapsulated data 0 SAs learned from this peer 0 SA cache maximum for the peer 4294967295 Input queue size 0 Output queue size 0 Counters ...

Page 173: ...14 Interface and IP address assignment Device Interface IP address Device Interface IP address Source 1 192 168 1 100 24 Router D GE1 0 1 10 110 5 1 24 Source 2 192 168 3 100 24 Router D GE1 0 2 10 110 3 2 24 Router A GE1 0 1 10 110 1 1 24 Router D Loop0 2 2 2 2 32 Router A GE1 0 2 10 110 2 1 24 Router E GE1 0 1 10 110 5 2 24 Router A Loop0 1 1 1 1 32 Router E GE1 0 2 192 168 3 1 24 Router B GE1 0...

Page 174: ...t1 0 3 quit Configure Router A Router B Router D Router E Router F and Router G in the same way Router C is configured Details not shown On Router B configure the PIM domain borders RouterB interface gigabitethernet 1 0 3 RouterB GigabitEthernet1 0 3 pim bsr boundary RouterB GigabitEthernet1 0 3 quit Configure the PIM domain borders on Router C Router D and Router F in the same way Router B is con...

Page 175: ...er and redistribute OSPF routing information RouterF bgp 200 RouterF bgp router id 3 3 3 1 RouterF bgp peer 10 110 4 1 as number 100 RouterF bgp address family ipv4 unicast RouterF bgp ipv4 peer 10 110 4 1 enable RouterF bgp ipv4 import route ospf 1 RouterF bgp ipv4 quit RouterF bgp quit On Router B redistribute BGP routing information into OSPF RouterB ospf 1 RouterB ospf 1 import route bgp Route...

Page 176: ...static rpf peer 10 110 2 1 rp policy list a RouterG msdp quit Verifying the configuration Display the BGP peering relationships on Router A RouterA display bgp peer No information is output because no BGP peering relationship has been established between Router A and Router D or between Router A and Router G This means that the unicast topology is not changed Display brief information about MSDP p...

Page 177: ...ss Device Interface IP address Source 1 10 110 5 100 24 Router C GE1 0 1 192 168 1 2 24 Source 2 10 110 6 100 24 Router C GE1 0 2 192 168 2 2 24 Router A GE1 0 1 10 110 5 1 24 Router D GE1 0 1 10 110 3 1 24 Router A GE1 0 2 10 110 2 2 24 Router D GE1 0 2 10 110 4 1 24 Router B GE1 0 1 10 110 1 1 24 Router D GE1 0 3 192 168 2 1 24 Router B GE1 0 2 10 110 2 1 24 Router D Loop0 2 2 2 2 32 Router B GE...

Page 178: ...rB GigabitEthernet1 0 3 quit RouterB interface loopback 0 RouterB LoopBack0 pim sm RouterB LoopBack0 quit RouterB interface loopback 10 RouterB LoopBack10 pim sm RouterB LoopBack10 quit RouterB interface loopback 20 RouterB LoopBack20 pim sm RouterB LoopBack20 quit Enable IP multicast routing IGMP and PIM SM on Router A Router C Router D and Router E in the same way Router B is configured Details ...

Page 179: ...rt from Host A to join multicast group 225 1 1 1 Details not shown Send multicast data from Source 1 10 110 5 100 24 to multicast group 225 1 1 1 Details not shown Display the PIM routing table on Router D RouterD display pim routing table No information is output on Router D Display the PIM routing table on Router B RouterB display pim routing table Total 1 G entry 1 S G entry 225 1 1 1 RP 10 1 1...

Page 180: ...g table Total 1 G entry 1 S G entry 225 1 1 1 RP 10 1 1 1 local Protocol pim sm Flag WC UpTime 00 12 07 Upstream interface Register Upstream neighbor NULL RPF prime neighbor NULL Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protocol igmp UpTime 00 12 07 Expires 10 110 6 100 225 1 1 1 RP 10 1 1 1 local Protocol pim sm Flag SPT 2MSDP ACT UpTime 00 40 22 Ups...

Page 181: ...4 Router A GE1 0 1 10 110 1 1 24 Router C GE1 0 3 192 168 1 2 24 Router A GE1 0 2 10 110 2 1 24 Router C GE1 0 4 192 168 2 2 24 Router A GE1 0 3 192 168 1 1 24 Router C Loop0 2 2 2 2 32 Router A Loop0 1 1 1 1 32 Router D GE1 0 1 10 110 6 1 24 Router B GE1 0 1 10 110 3 1 24 Router D GE1 0 2 10 110 7 1 24 Router B GE1 0 2 10 110 2 2 24 Router D GE1 0 3 10 110 5 2 24 Router B GE1 0 3 192 168 2 1 24 R...

Page 182: ...face gigabitethernet 1 0 2 RouterC GigabitEthernet1 0 2 pim bsr boundary RouterC GigabitEthernet1 0 2 quit RouterC interface gigabitethernet 1 0 3 RouterC GigabitEthernet1 0 3 pim bsr boundary RouterC GigabitEthernet1 0 3 quit RouterC interface gigabitethernet 1 0 4 RouterC GigabitEthernet1 0 4 pim bsr boundary RouterC GigabitEthernet1 0 4 quit Configure PIM domain borders on Router A Router B and...

Page 183: ...basic 2001 rule deny source 10 110 6 100 0 RouterD acl ipv4 basic 2001 quit RouterD msdp RouterD msdp import source acl 2001 RouterD msdp quit Verifying the configuration Display the S G entries in the SA message cache on Router C RouterC display msdp sa cache MSDP Total Source Active Cache 8 entries Matched 8 entries Source Group Origin RP Pro AS Uptime Expires 10 110 3 100 225 1 1 0 1 1 1 1 02 0...

Page 184: ...he router s SA message cache Symptom MSDP fails to send S G entries through SA messages Solution To resolve the problem 1 Use the display ip routing table command to verify that the unicast route between the routers is reachable 2 Verify that a unicast route is available between the two routers that will become MSDP peers to each other 3 Verify the configuration of the import source command and it...

Page 185: ...plication environment use the originating rp command to configure the RP address in the SA messages which must be the local interface address 4 Verify that the C BSR address is different from the Anycast RP address 5 If the problem persists contact Hewlett Packard Enterprise Support ...

Page 186: ...ces and processes VPN routing CE device Edge device on a customer network A CE device implements route distribution on the customer network The device can be a router a switch or a host As shown in Figure 57 the network that runs multicast VPN provides independent multicast services for the public network VPN A and VPN B The multicast device PE supports multiple VPN instances and acts as multiple ...

Page 187: ...ance Connecting with the public network and supporting multicast for the public network Supporting information exchange and data conversion between the public network and VPNs The device implements multicast VPN by using the multicast domain MD method This multicast VPN implementation is referred to as MD VPN The most significant advantage of MD VPN is that it requires only the PE devices to suppo...

Page 188: ...the ingress PE device assigns it an independent multicast address called data group It also notifies other PE devices that they must use this address to forward the multicast traffic for that VPN This initiates the switchover to the data MDT Data MDT A data MDT is an MDT that uses a data group as it group address At MDT switchover PE devices with downstream receivers join a data group building a d...

Page 189: ...cket into a public network multicast packet The default group address is used as the public network multicast group Then the PE sends this multicast packet to the public network A default group corresponds to a unique MD For each default group a unique default MDT is constructed through the public network resources for multicast data forwarding All the VPN multicast packets transmitted in this VPN...

Page 190: ...gure 60 PIM neighboring relationships in MD VPN PIM neighboring relationships are established between two or more directly interconnected devices on the same subnet As shown in Figure 60 the following types of PIM neighboring relationships exist in MD VPN PE P PIM neighboring relationship Established between the public network interface on a PE device and the peer interface on the P device over th...

Page 191: ... MDT is as follows 1 To establish PIM neighboring relationships with PE 2 and PE 3 through the MTI for the VPN instance A PE 1 does the following a Encapsulates the PIM protocol packet of the private network into a public network multicast data packet PE 1 does this by specifying the source address as the IP address of the MD source interface and the multicast group address as the default group ad...

Page 192: ...es the PIM protocol packet of the private network into a public network multicast data packet PE 1 does this by specifying the source address as the IP address of the MD source interface and the multicast group address as the default group address b Sends the multicast data packet to the public network The public network interface of PE 1 registers the multicast source with the public network RP a...

Page 193: ...in the MD with the public network RP as the root and PE 1 PE 2 and PE 3 as leaves 2 PE 1 sends a multicast packet with the default group address as the multicast group address The DF of each network segment on the public network forwards the multicast packet to the RP Each device on the path creates a 239 1 1 1 state entry At the same time PE 2 and PE 3 separately initiate a similar process Finall...

Page 194: ...acteristics All PE devices that support the same VPN instance join the default MDT All multicast packets that belong to this VPN are forwarded along the default MDT to every PE device on the public network even if no active downstream receivers exist Default MDT based delivery The default MDT delivers multicast protocol packets and multicast data packets differently Multicast protocol packet deliv...

Page 195: ...es join processes are initiated across the public network to establish source side RPTs NOTE PIM mode must be the same for all interfaces that belong to the same VPN including those interfaces that are bound with the VPN instance and the MTI interfaces on PE devices As shown in Figure 65 PIM SM is running in both the public network and the VPN network Receiver for the VPN multicast group G 225 1 1...

Page 196: ...he receivers in each site along the default MDT The VPN multicast packets are encapsulated into public network multicast packets on the local PE device and transmitted along the default MDT Then they are decapsulated on the remote PE device and transmitted in that VPN site VPN multicast data packets are forwarded across the public network differently in the following circumstances If PIM DM or PIM...

Page 197: ...passes it to the corresponding VPN instance If a PE device has a downstream interface for an SPT it forwards the VPN multicast packet down the SPT Otherwise it discards the packet 5 The VPN instance on PE 2 looks up the MVRF and finally delivers the VPN multicast data to Receiver By now the process of transmitting a VPN multicast data packet across the public network is completed MDT switchover Sw...

Page 198: ...ding MDT switchover messages periodically Subsequent PE devices with attached receivers can then join the data MDT When a downstream PE device no longer has active receivers attached to it it leaves the data MDT For a given VPN instance the default MDT and the data MDT are both forwarding tunnels in the same MD A default MDT is uniquely identified by a default group address and a data MDT is uniqu...

Page 199: ...of VPN instance 1 to PE 1 2 PE 1 encapsulates the multicast packet into a public network packet and forwards it to PE 3 through the MTI interface in MD 1 3 PE 3 considers PE 4 as a CE device of VPN instance 1 so PE 3 forwards the multicast packet to PE 4 4 PE 4 considers PE 3 as a CE device of VPN instance 2 so it forwards the multicast packet to PE 2 through the MTI interface in MD 2 on the publi...

Page 200: ...ough MP EBGP An MT is established between PE 1 and PE 2 for delivering VPN multicast traffic across the ASs Figure 68 MD VPN inter AS option B The establishment of the MDT on the public network is as follows 1 PE 1 originates a PIM join message to join the SPT rooted at PE 2 In the join message the upstream neighbor address is the IP address of PE 2 the BGP connector The RPF vector attribute is th...

Page 201: ...s the multicast packet into a public network multicast packet and forwards it to PE 3 through the MTI interface on the public network 3 PE 3 and PE 4 are interconnected through MP EBGP so PE 3 forwards the public network multicast packet to PE 4 along the VPN IPv4 route 4 The public network multicast packet arrives at the MTI interface of PE 2 in AS 2 PE 2 decapsulates the public network multicast...

Page 202: ...s Optional Configuring the RPF vector feature Optional Enabling data group reuse logging Configuring BGP MDT Required Configuring BGP MDT peers or peer groups Optional Configuring a BGP MDT route reflector The MTI interfaces are automatically created and bound with the VPN instance when you create an MD for the VPN instance Follow these guidelines to make sure the MTI interfaces are correctly crea...

Page 203: ... VPN instance Perform this task on PE devices To enable IP multicast routing for a VPN instance Step Command Remarks 1 Enter system view system view N A 2 Create a VPN instance and enter its view ip vpn instance vpn instance name By default no VPN instances exist For more information about this command see MPLS Command Reference 3 Configure an RD for the VPN instance route distinguisher route dist...

Page 204: ...e an MD address family Step Command Remarks 1 Enter system view system view N A 2 Enter MD view of a VPN instance multicast domain vpn instance vpn instance name N A 3 Create an MD address family and enter its view Create an MD IPv4 address family and enter its view address family ipv4 Create an MD IPv4 address family and enter its view address family ipv6 By default no MD IPv4 or IPv6 address fam...

Page 205: ... IPv6 multicast packets you must specify the same MD source interface in MD IPv4 and IPv6 address family views Configuration procedure To specify the MD source interface Step Command Remarks 1 Enter system view system view N A 2 Enter MD view multicast domain vpn instance vpn instance name N A 3 Enter MD address family view Enter MD IPv4 address family view address family ipv4 Enter MD IPv6 addres...

Page 206: ...ew N A 2 Enter MD view multicast domain vpn instance vpn instance name N A 3 Enter MD address family view Enter MD IPv4 address family view address family ipv4 Enter MD IPv6 address family view address family ipv6 N A 4 Configure the data group range and the switchover criteria data group group address mask length mask threshold threshold value acl acl number By default no data group range exists ...

Page 207: ...euse the addresses in the address range With data group reuse logging enabled the address reuse information will be logged Attributed to the MD module the group address reuse logging information has a severity level informational For more information about the logging information see Network Management and Monitoring Configuration Guide Perform this task on PE devices To enable data group reuse lo...

Page 208: ...mask length enable By default the router cannot exchange BGP MDT routing information with a BGP peer or peer group For more information about this command see Layer 3 IP Routing Configuration Guide IMPORTANT Before you configure this command you must create a BGP peer or peer group in BGP instance view For more information see Layer 3 IP Routing Configuration Guide Configuring a BGP MDT route refl...

Page 209: ...ay commands in any view and reset commands in user view Task Command Display BGP MDT peer group information display bgp instance instance name group ipv4 mdt group name group name Display information about BGP MDT peers or peer groups display bgp instance instance name peer ipv4 mdt ip address mask length ip address group name group name log info ip address verbose Display BGP MDT routing informat...

Page 210: ... multicast VPN on routers Intra AS MD VPN configuration example Network requirements As shown in Figure 71 configure intra AS MD VPN to meet the following requirements Item Network requirements Multicast sources and receivers In VPN instance a S 1 is a multicast source and R 1 R 2 and R 3 are receivers In VPN instance b S 2 is a multicast source and R 4 is a receiver For VPN instance a the default...

Page 211: ...ed receiver hosts on CE a1 CE a2 CE a3 CE b1 and CE b2 Configure Loopback 1 of P as a public network C BSR and C RP to provide services for all multicast groups Configure Loopback 1 of CE a2 as a C BSR and a C RP for VPN instance a to provide services for all multicast groups Configure Loopback 2 of PE 3 as a C BSR and a C RP for VPN instance b to provide services for all multicast groups Figure 7...

Page 212: ...E 2 GE1 0 3 10 110 4 1 24 CE b2 GE1 0 1 10 110 11 1 24 PE 2 Loop1 1 1 1 2 32 CE b2 GE1 0 2 10 110 6 2 24 Configuration procedure 1 Configure PE 1 Configure a global router ID and enable IP multicast routing on the public network PE1 system view PE1 router id 1 1 1 1 PE1 multicast routing PE1 mrib quit Configure an LSR ID and enable LDP globally PE1 mpls lsr id 1 1 1 1 PE1 mpls ldp PE1 ldp quit Cre...

Page 213: ...bitEthernet1 0 2 igmp enable PE1 GigabitEthernet1 0 2 quit Associate GigabitEthernet 1 0 3 with VPN instance a PE1 interface gigabitethernet 1 0 3 PE1 GigabitEthernet1 0 3 ip binding vpn instance a Assign an IP address to GigabitEthernet 1 0 3 and enable PIM SM on the interface PE1 GigabitEthernet1 0 3 ip address 10 110 2 1 24 PE1 GigabitEthernet1 0 3 pim sm PE1 GigabitEthernet1 0 3 quit Assign an...

Page 214: ...named b and configure an RD and route targets for the VPN instance PE2 ip vpn instance b PE2 vpn instance b route distinguisher 200 1 PE2 vpn instance b vpn target 200 1 export extcommunity PE2 vpn instance b vpn target 200 1 import extcommunity PE2 vpn instance b quit Enable IP multicast routing for VPN instance b PE2 multicast routing vpn instance a PE2 mrib a quit Create an MD for VPN instance ...

Page 215: ...LDP on GigabitEthernet 1 0 1 PE2 GigabitEthernet1 0 1 pim sm PE2 GigabitEthernet1 0 1 mpls enable PE2 GigabitEthernet1 0 1 mpls ldp enable PE2 GigabitEthernet1 0 1 quit Associate GigabitEthernet 1 0 2 with VPN instance b PE2 interface gigabitethernet 1 0 2 PE2 GigabitEthernet1 0 2 ip binding vpn instance b Assign an IP address to GigabitEthernet 1 0 2 and enable PIM SM on the interface PE2 Gigabit...

Page 216: ... bgp default quit Configure OSPF PE2 ospf 1 PE2 ospf 1 area 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 1 1 1 2 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 192 168 7 0 0 0 0 255 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit Configure RIP PE2 rip 2 vpn instance a PE2 rip 2 network 10 110 3 0 0 0 0 255 PE2 rip 2 import route bgp PE2 rip 2 quit PE2 rip 3 vpn instance b PE2 rip 3 network 10 110 4 0 0 0 0 255 P...

Page 217: ...ty PE3 vpn instance b vpn target 200 1 import extcommunity PE3 vpn instance b quit Enable IP multicast routing for VPN instance b PE3 multicast routing vpn instance b PE3 mrib b quit Create an MD for VPN instance b and enter its view PE3 multicast domain vpn instance b Create an MD IPv4 address family for VPN instance b and enter its view PE3 md b address family ipv4 Specify the default group the ...

Page 218: ...vpn instance b Assign an IP address to Loopback 2 and enable PIM SM on the interface PE3 LoopBack2 ip address 33 33 33 33 32 PE3 LoopBack2 pim sm PE3 LoopBack2 quit Configure Loopback 2 as a C BSR and a C RP PE3 pim vpn instance b PE3 pim b c bsr 33 33 33 33 PE3 pim b c rp 33 33 33 33 PE3 pim b quit Configure BGP PE3 bgp 100 PE3 bgp default group vpn g internal PE3 bgp default peer vpn g connect i...

Page 219: ...ure an LSR ID and enable LDP globally P mpls lsr id 2 2 2 2 P mpls ldp P ldp quit Assign an IP address to GigabitEthernet 1 0 1 P interface gigabitethernet 1 0 1 P GigabitEthernet1 0 1 ip address 192 168 6 2 24 Enable PIM SM MPLS and IPv4 LDP on GigabitEthernet 1 0 1 P GigabitEthernet1 0 1 pim sm P GigabitEthernet1 0 1 mpls enable P GigabitEthernet1 0 1 mpls ldp enable P GigabitEthernet1 0 1 quit ...

Page 220: ...ork 192 168 8 0 0 0 0 255 5 Configure CE a1 Enable IP multicast routing CEa1 system view CEa1 multicast routing CEa1 mrib quit Assign an IP address to GigabitEthernet 1 0 1 and enable PIM SM on the interface CEa1 interface gigabitethernet 1 0 1 CEa1 GigabitEthernet1 0 1 ip address 10 110 7 1 24 CEa1 GigabitEthernet1 0 1 pim sm CEa1 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet ...

Page 221: ...0 110 9 1 24 CEa2 GigabitEthernet1 0 1 igmp enable CEa2 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 and enable PIM SM on the interface CEa2 interface gigabitethernet 1 0 2 CEa2 GigabitEthernet1 0 2 ip address 10 110 4 2 24 CEa2 GigabitEthernet1 0 2 pim sm CEa2 GigabitEthernet1 0 2 quit Assign an IP address to GigabitEthernet 1 0 3 and enable PIM SM on the interface CEa2...

Page 222: ...bitethernet 1 0 3 CEa3 GigabitEthernet1 0 3 ip address 10 110 12 2 24 CEa3 GigabitEthernet1 0 3 pim sm CEa3 GigabitEthernet1 0 3 quit Configure RIP CEa3 rip 2 CEa3 rip 2 network 10 110 5 0 0 0 0 255 CEa3 rip 2 network 10 110 10 0 0 0 0 255 CEa3 rip 2 network 10 110 12 0 0 0 0 255 9 Configure CE b2 Enable IP multicast routing CEb2 system view CEb2 multicast routing CEb2 mrib quit Assign an IP addre...

Page 223: ... the following requirements Item Network requirements Multicast sources and receivers In VPN instance a S 1 is a multicast source and R 1 R 2 and R 3 are receivers In VPN instance b S 2 is a multicast source and R 4 is a receiver For VPN instance a the default group is 239 1 1 1 and the data group range is 225 2 2 0 to 225 2 2 15 For VPN instance b the default group is 239 2 2 2 and the data group...

Page 224: ...IPv6 PIM SM on private network interfaces of PE 1 PE 2 and PE 3 Enable IPv6 PIM SM on all interfaces that do not have receivers on CE a1 CE a2 CE a3 CE b1 and CE b2 Configure Loopback 1 of P as a C BSR and a C RP for the public network to provide services for all IPv4 multicast groups Configure Loopback 1 of CE a2 as a C BSR and a C RP for VPN instance a to provide services for all IPv6 multicast ...

Page 225: ... PE 1 Loop1 1 1 1 1 32 CE a3 GE1 0 3 10 110 12 2 64 PE 2 GE1 0 1 192 168 7 1 24 CE b1 GE1 0 1 10 110 8 1 64 PE 2 GE1 0 2 10 110 3 1 64 CE b1 GE1 0 2 10 110 3 2 64 PE 2 GE1 0 3 10 110 4 1 64 CE b2 GE1 0 1 10 110 11 1 64 PE 2 Loop1 1 1 1 2 32 CE b2 GE1 0 2 10 110 6 2 64 Configuration procedure 1 Configure PE 1 Configure a global router ID and enable IP multicast routing on the public network PE1 sys...

Page 226: ...1 0 2 PE1 GigabitEthernet1 0 2 ip binding vpn instance a PE1 GigabitEthernet1 0 2 ipv6 address 10 110 1 1 64 Configure GigabitEthernet 1 0 2 to run OSPFv3 process 2 in Area 0 and enable MLD on the interface PE1 GigabitEthernet1 0 2 ospfv3 2 area 0 0 0 0 PE1 GigabitEthernet1 0 2 mld enable PE1 GigabitEthernet1 0 2 quit Associate GigabitEthernet 1 0 3 with VPN instance a and assign an IPv6 address t...

Page 227: ...pfv3 2 router id 1 1 1 1 PE1 ospfv3 2 import route bgp4 PE1 ospfv3 2 import route direct PE1 ospfv3 2 area 0 PE1 ospfv3 2 area 0 0 0 0 return 2 Configure PE 2 Configure a global RD and enable IP multicast routing on the public network PE2 system view PE2 router id 1 1 1 2 PE2 multicast routing PE2 mrib quit Configure an LSR ID and enable LDP globally PE2 mpls lsr id 1 1 1 2 PE2 mpls ldp PE2 ldp qu...

Page 228: ... md a address family ipv6 Specify the default group the MD source interface and the data group range for VPN instance a PE2 md a ipv6 default group 239 1 1 1 PE2 md a ipv6 source loopback 1 PE2 md a ipv6 data group 225 2 2 0 28 PE2 md a ipv6 quit PE2 md a quit Assign an IP address to GigabitEthernet 1 0 1 PE2 interface gigabitethernet 1 0 1 PE2 GigabitEthernet1 0 1 ip address 192 168 7 1 24 Enable...

Page 229: ...opback 1 PE2 bgp default peer 1 1 1 1 group vpn g PE2 bgp default peer 1 1 1 3 group vpn g PE2 bgp default ip vpn instance a PE2 bgp default a address family ipv6 PE2 bgp default ipv6 a import route ospfv3 2 PE2 bgp default ipv6 a import route direct PE2 bgp default ipv6 a quit PE2 bgp default a quit PE2 bgp default ip vpn instance b PE2 bgp default b address family ipv6 PE2 bgp default ipv6 b imp...

Page 230: ...stance a vpn target 100 1 export extcommunity PE3 vpn instance a vpn target 100 1 import extcommunity PE3 vpn instance a quit Enable IPv6 multicast routing for VPN instance a PE3 ipv6 multicast routing vpn instance a PE3 mrib6 a quit Create an MD for VPN instance a PE3 multicast domain vpn instance a Create an MD IPv6 address family for VPN instance a PE3 md a address family ipv6 Specify the defau...

Page 231: ...6 address to the interface PE3 interface gigabitethernet 1 0 2 PE3 GigabitEthernet1 0 2 ip binding vpn instance a PE3 GigabitEthernet1 0 2 ipv6 address 10 110 5 1 64 Enable IPv6 PIM SM on GigabitEthernet 1 0 2 and configure the interface to run OSPFv3 process 2 in Area 0 PE3 GigabitEthernet1 0 2 ipv6 pim sm PE3 GigabitEthernet1 0 2 ospfv3 2 area 0 0 0 0 PE3 GigabitEthernet1 0 2 quit Associate Giga...

Page 232: ...PE3 bgp default a address family ipv6 PE3 bgp default ipv6 a import route ospfv3 2 PE3 bgp default ipv6 a import route direct PE3 bgp default ipv6 a quit PE3 bgp default a quit PE3 bgp default ip vpn instance b PE3 bgp default b address family ipv6 PE3 bgp default ipv6 b import route ospfv3 3 PE3 bgp default ipv6 b import route direct PE3 bgp default ipv6 b quit PE3 bgp default b quit PE3 bgp defa...

Page 233: ... 1 mpls enable P GigabitEthernet1 0 1 mpls ldp enable P GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 P interface gigabitethernet 1 0 2 P GigabitEthernet1 0 2 ip address 192 168 7 2 24 Enable PIM SM MPLS and IPv4 LDP on GigabitEthernet 1 0 2 P GigabitEthernet1 0 2 pim sm P GigabitEthernet1 0 2 mpls enable P GigabitEthernet1 0 2 mpls ldp enable P GigabitEthernet1 0 2 quit ...

Page 234: ... 1 ipv6 pim sm CEa1 GigabitEthernet1 0 1 ospfv3 2 area 0 0 0 0 CEa1 GigabitEthernet1 0 1 quit Assign an IPv6 address to GigabitEthernet 1 0 2 CEa1 interface gigabitethernet 1 0 2 CEa1 GigabitEthernet1 0 2 ipv6 address 10 110 2 2 64 Enable IPv6 PIM SM on GigabitEthernet 1 0 2 and configure the interface to run OSPFv3 process 2 in Area 0 CEa1 GigabitEthernet1 0 2 ipv6 pim sm CEa1 GigabitEthernet1 0 ...

Page 235: ...1 64 Configure GigabitEthernet 1 0 1 to run OSPFv3 process 2 in Area 0 and enable MLD on the interface CEa2 GigabitEthernet1 0 1 ospfv3 2 area 0 0 0 0 CEa2 GigabitEthernet1 0 1 mld enable CEa2 GigabitEthernet1 0 1 quit Assign an IPv6 address to GigabitEthernet 1 0 2 CEa2 interface gigabitethernet 1 0 2 CEa2 GigabitEthernet1 0 2 ipv6 address 10 110 4 2 64 Configure GigabitEthernet 1 0 2 to run OSPF...

Page 236: ...able MLD on the interface CEa3 GigabitEthernet1 0 1 ospfv3 2 area 0 0 0 0 CEa3 GigabitEthernet1 0 1 mld enable CEa3 GigabitEthernet1 0 1 quit Assign an IPv6 address to GigabitEthernet 1 0 2 CEa3 interface gigabitethernet 1 0 2 CEa3 GigabitEthernet1 0 2 ipv6 address 10 110 5 2 64 Configure GigabitEthernet 1 0 2 to run OSPFv3 process 2 in Area 0 and enable IPv6 PIM SM on the interface CEa3 GigabitEt...

Page 237: ...it Configure OSPFv3 CEb2 ospfv3 3 CEb2 ospfv3 3 router id 10 10 10 10 CEb2 ospfv3 3 area 0 0 0 0 CEb2 ospfv3 3 area 0 0 0 0 quit Verifying the configuration Display information about the local default group for IPv6 multicast transmission in each VPN instance on PE 1 PE1 display multicast domain ipv6 default group local MD local default group information Group address Source address Interface VPN ...

Page 238: ...g protocols and MPLS Configure OSPF separately in AS 100 and AS 200 and configure OSPF between the PEs and CEs Establish BGP peer connections between PE 1 PE 2 PE 3 and PE 4 on their respective Loopback 1 Configure MPLS separately in AS 100 and AS 200 IP multicast routing Enable IP multicast routing on the public network on PE 1 PE 2 PE 3 and PE 4 Enable IP multicast routing for VPN instance a on ...

Page 239: ...PE 2 Loop2 11 11 11 11 32 PE 4 Loop1 1 1 1 4 32 CE a1 GE1 0 1 10 11 5 1 24 CE b1 GE1 0 1 10 11 6 1 24 CE a1 GE1 0 2 10 11 1 2 24 CE b1 GE1 0 2 10 11 2 2 24 CE a1 Loop0 2 2 2 2 32 CE b2 GE1 0 1 10 11 8 1 24 CE a2 GE1 0 1 10 11 7 1 24 CE b2 GE1 0 2 10 11 4 2 24 CE a2 GE1 0 2 10 11 3 2 24 CE b2 Loop0 3 3 3 3 32 Configuration procedure 1 Configure PE 1 Configure a global router ID and enable IP multic...

Page 240: ...VPN instance a PE1 md a ipv4 default group 239 1 1 1 PE1 md a ipv4 source loopback 1 PE1 md a ipv4 data group 225 1 1 0 28 PE1 md a ipv4 quit PE1 md a quit Create a VPN instance named b and configure an RD and route targets for the VPN instance PE1 ip vpn instance b PE1 vpn instance b route distinguisher 200 1 PE1 vpn instance b vpn target 200 1 export extcommunity PE1 vpn instance b vpn target 20...

Page 241: ...address 10 11 2 1 24 PE1 GigabitEthernet1 0 3 pim sm PE1 GigabitEthernet1 0 3 quit Assign an IP address to Loopback 1 and enable PIM SM on the interface PE1 interface loopback 1 PE1 LoopBack1 ip address 1 1 1 1 32 PE1 LoopBack1 pim sm PE1 LoopBack1 quit Configure BGP PE1 bgp 100 PE1 bgp default group pe1 pe2 internal PE1 bgp default peer pe1 pe2 connect interface loopback 1 PE1 bgp default peer 1 ...

Page 242: ... b PE1 ospf 3 import route bgp PE1 ospf 3 area 0 0 0 0 PE1 ospf 3 area 0 0 0 0 network 10 11 2 0 0 0 0 255 PE1 ospf 3 area 0 0 0 0 quit PE1 ospf 3 quit 2 Configure PE 2 Configure a global router ID and enable IP multicast routing on the public network PE2 system view PE2 router id 1 1 1 2 PE2 multicast routing PE2 mrib quit Configure an LSR ID and enable LDP globally PE2 mpls lsr id 1 1 1 2 PE2 mp...

Page 243: ...n MSDP peering relationship PE2 msdp PE2 msdp encap data enable PE2 msdp peer 1 1 1 3 connect interface loopback 1 Configure a static route PE2 ip route static 1 1 1 3 32 gigabitethernet 1 0 2 192 168 1 2 Configure BGP PE2 bgp 100 PE2 bgp default group pe2 pe1 internal PE2 bgp default peer pe2 pe1 connect interface loopback 1 PE2 bgp default peer 1 1 1 1 group pe2 pe1 PE2 bgp default group pe2 pe3...

Page 244: ...igabitEthernet 1 0 1 PE3 GigabitEthernet1 0 1 pim sm PE3 GigabitEthernet1 0 1 mpls enable PE3 GigabitEthernet1 0 1 mpls ldp enable PE3 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 PE3 interface gigabitethernet 1 0 2 PE3 GigabitEthernet1 0 2 ip address 192 168 1 2 24 Enable PIM SM and MPLS on GigabitEthernet 1 0 2 PE3 GigabitEthernet1 0 2 pim sm PE3 GigabitEthernet1 0 2 m...

Page 245: ...E3 bgp default address family ipv4 PE3 bgp default ipv4 peer pe3 pe4 enable PE3 bgp default ipv4 peer pe3 pe4 route policy map2 export PE3 bgp default ipv4 peer pe3 pe4 label route capability PE3 bgp default ipv4 peer pe3 pe2 enable PE3 bgp default ipv4 peer pe3 pe2 route policy map1 export PE3 bgp default ipv4 peer pe3 pe2 label route capability PE3 bgp default ipv4 import route ospf 1 PE3 bgp de...

Page 246: ... targets for the VPN instance PE4 ip vpn instance b PE4 vpn instance b route distinguisher 200 1 PE4 vpn instance b vpn target 200 1 export extcommunity PE4 vpn instance b vpn target 200 1 import extcommunity PE4 vpn instance b quit Enable IP multicast routing for VPN instance b PE4 multicast routing vpn instance b PE4 mrib b quit Create an MD for VPN instance b PE4 multicast domain vpn instance b...

Page 247: ...p 200 PE4 bgp default group pe4 pe3 internal PE4 bgp default peer pe4 pe3 connect interface loopback 1 PE4 bgp default peer 1 1 1 3 group pe4 pe3 PE4 bgp default group pe4 pe1 external PE4 bgp default peer pe4 pe1 as number 100 PE4 bgp default peer pe4 pe1 ebgp max hop 255 PE4 bgp default peer pe4 pe1 connect interface loopback 1 PE4 bgp default peer 1 1 1 1 group pe4 pe1 PE4 bgp default ip vpn in...

Page 248: ...1 multicast routing CEa1 mrib quit Assign an IP address to GigabitEthernet 1 0 1 and enable PIM SM on the interface CEa1 interface gigabitethernet 1 0 1 CEa1 GigabitEthernet1 0 1 ip address 10 11 5 1 24 CEa1 GigabitEthernet1 0 1 pim sm CEa1 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 and enable PIM SM on the interface CEa1 interface gigabitethernet 1 0 2 CEa1 GigabitEth...

Page 249: ...itEthernet1 0 2 quit Configure OSPF CEb1 ospf 1 CEb1 ospf 1 area 0 0 0 0 CEb1 ospf 1 area 0 0 0 0 network 10 11 2 0 0 0 0 255 CEb1 ospf 1 area 0 0 0 0 network 10 11 6 0 0 0 0 255 CEb1 ospf 1 area 0 0 0 0 quit CEb1 ospf 1 quit 7 Configure CE a2 Enable IP multicast routing CEa2 system view CEa2 multicast routing CEa2 mrib quit Assign an IP address to GigabitEthernet 1 0 1 and enable IGMP on the inte...

Page 250: ... 3 3 3 32 CEb2 LoopBack1 pim sm CEb2 LoopBack1 quit Configure Loopback 1 as a C BSR and a C RP CEb2 pim CEb2 pim c bsr 3 3 3 3 CEb2 pim c rp 3 3 3 3 CEb2 pim quit Configure OSPF CEb2 ospf 1 CEb2 ospf 1 area 0 0 0 0 CEb2 ospf 1 area 0 0 0 0 network 3 3 3 3 0 0 0 0 CEb2 ospf 1 area 0 0 0 0 network 10 11 4 0 0 0 0 255 CEb2 ospf 1 area 0 0 0 0 network 10 11 8 0 0 0 0 255 CEb2 ospf 1 area 0 0 0 0 quit ...

Page 251: ...st routing protocols and MPLS Configure OSPF in AS 100 and AS 200 and configure OSPF between the PEs and CEs Establish IBGP peer connections between PE 1 PE 2 PE 3 and PE 4 on their respective Loopback 1 Establish EBGP peer connections between GigabitEthernet 1 0 2 on PE 2 and PE 3 Configure BGP MDT peer connections between PE 1 PE 2 PE 3 and PE 4 on their respective Loopback 1 and between PE 2 an...

Page 252: ... 24 PE 4 GE1 0 3 11 4 1 1 24 PE 2 Loop1 2 2 2 2 32 PE 4 Loop1 4 4 4 4 24 P 1 GE1 0 1 10 1 1 2 24 P 2 GE1 0 1 10 5 1 1 24 P 1 GE1 0 2 10 2 1 1 24 P 2 GE1 0 2 10 4 1 2 24 P 1 Loop1 5 5 5 5 32 P 2 Loop1 6 6 6 6 32 CE a1 GE1 0 1 12 1 1 1 24 CE b1 GE1 0 1 12 2 1 1 24 CE a1 GE1 0 2 11 1 1 2 24 CE b1 GE1 0 2 11 2 1 2 24 CE a2 GE1 0 1 12 3 1 1 24 CE b2 GE1 0 1 12 4 1 1 24 CE a2 GE1 0 2 11 3 1 2 24 CE b2 G...

Page 253: ...VPN instance a PE1 multicast domain vpn instance a Create an MD IPv4 address family for VPN instance a PE1 md a address family ipv4 Specify the default group the MD source interface and the data group range for VPN instance a PE1 md a ipv4 default group 232 1 1 1 PE1 md a ipv4 source loopback 1 PE1 md a ipv4 data group 232 2 2 0 28 PE1 md a ipv4 quit PE1 md a quit Create a VPN instance named b and...

Page 254: ...tEthernet1 0 2 pim sm PE1 GigabitEthernet1 0 2 quit Associate GigabitEthernet 1 0 3 with VPN instance b PE1 interface gigabitethernet 1 0 3 PE1 GigabitEthernet1 0 3 ip binding vpn instance b Assign an IP address to GigabitEthernet 1 0 3 and enable PIM SM on the interface PE1 GigabitEthernet1 0 3 ip address 11 2 1 1 24 PE1 GigabitEthernet1 0 3 pim sm PE1 GigabitEthernet1 0 3 quit Assign an IP addre...

Page 255: ...n instance b PE1 ospf 3 area 0 0 0 0 PE1 ospf 3 area 0 0 0 0 network 11 2 1 0 0 0 0 255 PE1 ospf 3 area 0 0 0 0 quit PE1 ospf 3 quit 2 Configure PE 2 Configure a global router ID and enable IP multicast routing on the public network PE2 system view PE2 router id 2 2 2 2 PE2 multicast routing PE2 mrib quit Configure an LSR ID and enable LDP globally PE2 mpls lsr id 2 2 2 2 PE2 mpls ldp PE2 ldp quit...

Page 256: ...dress family ipv4 mdt PE2 bgp default mdt peer 1 1 1 1 enable PE2 bgp default mdt peer 10 3 1 2 enable PE2 bgp default mdt quit PE2 bgp default quit Configure OSPF PE2 ospf 1 PE2 ospf 1 area 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 2 2 2 2 0 0 0 0 PE2 ospf 1 area 0 0 0 0 network 10 2 1 0 0 0 0 255 PE2 ospf 1 area 0 0 0 0 quit PE2 ospf 1 quit 3 Configure PE 3 Configure a global router ID and enable ...

Page 257: ...3 bgp default vpnv4 undo policy vpn target PE3 bgp default vpnv4 peer 4 4 4 4 enable PE3 bgp default vpnv4 peer 10 3 1 1 enable PE3 bgp default vpnv4 quit PE3 bgp default address family ipv4 mdt PE3 bgp default mdt peer 4 4 4 4 enable PE3 bgp default mdt peer 10 3 1 1 enable PE3 bgp default mdt quit PE3 bgp default quit Configure OSPF PE3 ospf 1 PE3 ospf 1 area 0 0 0 0 PE3 ospf 1 area 0 0 0 0 netw...

Page 258: ...instance b PE4 vpn instance b route distinguisher 200 1 PE4 vpn instance b vpn target 200 1 export extcommunity PE4 vpn instance b vpn target 200 1 import extcommunity PE4 vpn instance b quit Enable IP multicast routing and RPF vector for VPN instance b PE4 multicast routing vpn instance b PE4 mrib b rpf proxy vector PE4 mrib b quit Create an MD for VPN instance b PE4 multicast domain vpn instance...

Page 259: ...oopBack1 ip address 4 4 4 4 32 PE4 LoopBack1 pim sm PE4 LoopBack1 quit Configure BGP PE4 bgp 200 PE4 bgp default peer 3 3 3 3 as number 200 PE4 bgp default peer 3 3 3 3 connect interface loopback 1 PE4 bgp default ip vpn instance a PE4 bgp default a address family ipv4 PE4 bgp default ipv4 a import route ospf 2 PE4 bgp default ipv4 a import route direct PE4 bgp default ipv4 a quit PE4 bgp default ...

Page 260: ... 1 ip address 10 1 1 2 24 Enable PIM SM MPLS and IPv4 LDP on GigabitEthernet 1 0 1 P1 GigabitEthernet1 0 1 pim sm P1 GigabitEthernet1 0 1 mpls enable P1 GigabitEthernet1 0 1 mpls ldp enable P1 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 P1 interface gigabitethernet 1 0 2 P1 GigabitEthernet1 0 2 ip address 10 2 1 1 24 Enable PIM SM MPLS and IPv4 LDP on GigabitEthernet 1 ...

Page 261: ...10 4 1 2 24 Enable PIM SM MPLS and IPv4 LDP on GigabitEthernet 1 0 2 P2 GigabitEthernet1 0 2 pim sm P2 GigabitEthernet1 0 2 mpls enable P2 GigabitEthernet1 0 2 mpls ldp enable P2 GigabitEthernet1 0 2 quit Assign an IP address to Loopback 1 and enable PIM SM on the interface P2 interface loopback 1 P2 LoopBack1 ip address 6 6 6 6 32 P2 LoopBack1 pim sm P2 LoopBack1 quit Configure OSPF P2 ospf 1 P2 ...

Page 262: ...uit Assign an IP address to GigabitEthernet 1 0 1 and enable PIM SM on the interface CEb1 interface gigabitethernet 1 0 1 CEb1 GigabitEthernet1 0 1 ip address 12 2 1 1 24 CEb1 GigabitEthernet1 0 1 pim sm CEb1 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 and enable PIM SM on the interface CEb1 interface gigabitethernet 1 0 2 CEb1 GigabitEthernet1 0 2 ip address 11 2 1 2 2...

Page 263: ...b2 multicast routing CEb2 mrib quit Assign an IP address to GigabitEthernet 1 0 1 and enable IGMP on the interface CEb2 interface gigabitethernet 1 0 1 CEb2 GigabitEthernet1 0 1 ip address 12 4 1 1 24 CEb2 GigabitEthernet1 0 1 igmp enable CEb2 GigabitEthernet1 0 1 quit Assign an IP address to GigabitEthernet 1 0 2 and enable PIM SM on the interface CEb2 interface gigabitethernet 1 0 2 CEb2 Gigabit...

Page 264: ...roubleshooting MD VPN This section describes common MD VPN problems and how to troubleshoot them A default MDT cannot be established Symptom The default MDT cannot be established PIM neighboring relationship cannot be established between PE devices interfaces that are in the same VPN instance Solution To resolve the problem 1 Use the display interface command to examine the MTI interface state and...

Page 265: ...nce If it does not verify that a unicast route exists to the BSR 2 Use the display pim rp info command to examine the RP information If no RP information is available verify that a unicast route exists to the RP Use the display pim neighbor command to verify that the PIM adjacencies have been correctly established on the public network and the VPN 3 Use the ping command to examine the connectivity...

Page 266: ...ds multicast packets of known IPv6 multicast groups to only the receivers Figure 75 Multicast packet transmission processes without and with MLD snooping MLD snooping ports As shown in Figure 76 MLD snooping runs on Switch A and Switch B and Host A and Host C are receiver hosts in an IPv6 multicast group MLD snooping ports are divided into member ports and router ports IPv6 multicast packet transm...

Page 267: ...t in MLD snooping is a Layer 2 interface Member ports On an MLD snooping Layer 2 device the ports toward receiver hosts are called member ports In Figure 76 GigabitEthernet 1 0 2 and GigabitEthernet 1 0 3 of Switch A and GigabitEthernet 1 0 2 of Switch B are member ports Member ports contain the following types Dynamic member port When a port receives an MLD report it is added to the associated dy...

Page 268: ...e receiving port as a dynamic member port and starts an aging timer for the port If a match is found but the matching forwarding entry does not contain the receiving port the Layer 2 device adds the receiving port to the outgoing interface list It also marks the port as a dynamic member port to the forwarding entry and starts an aging timer for the port If a match is found and the matching forward...

Page 269: ... Then it sends an MLD multicast address specific query to the IPv6 multicast group through the receiving port After receiving the MLD multicast address specific query the Layer 2 device forwards the query through all its router ports in the VLAN and all member ports of the IPv6 multicast group Then it waits for the responding MLD report from the directly connected hosts For the dynamic member port...

Page 270: ...rts Optional Configuring a port as a simulated member host Optional Enabling fast leave processing Optional Disabling a port from becoming a dynamic router port Configuring the MLD snooping querier Optional Enabling the MLD snooping querier Optional Configuring parameters for MLD general queries and responses Configuring parameters for MLD messages Optional Configuring source IPv6 addresses for ML...

Page 271: ... interface has the same priority as the configuration in MLD snooping view and the most recent configuration takes effect To enable MLD snooping for the specified VLANs Step Command Remarks 1 Enter system view system view N A 2 Enable MLD snooping globally and enter MLD snooping view mld snooping By default MLD snooping is globally disabled 3 Enable MLD snooping for the specified VLANs enable vlan...

Page 272: ...nd enter MLD snooping view mld snooping N A 3 Specify an MLD snooping version for the specified VLANs version version number vlan vlan list The default setting is 1 To specify an MLD snooping version for a VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Specify an MLD snooping version for the VLAN mld snooping version version number The default se...

Page 273: ...ic configuration takes priority over the global configuration Setting the MLD last listener query interval globally Step Command Remarks 1 Enter system view system view N A 2 Enter MLD snooping view mld snooping N A 3 Set the MLD last listener query interval globally last listener query interval interval The default setting is 1 second Setting the MLD last listener query interval in a VLAN Step Co...

Page 274: ...ynamic member ports globally host aging time seconds The default setting is 260 seconds Setting the aging timers for dynamic ports in a VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Set the aging timer for dynamic router ports in the VLAN mld snooping router aging time seconds The default setting is 260 seconds 4 Set the aging timer for dynamic ...

Page 275: ...nter system view system view N A 2 Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number N A 3 Configure the port as a simulated member host mld snooping host join ipv6 group address source ip ipv6 source address vlan vlan id By default the port is not a simulated member host Enabling fast leave processing This feature enables the devic...

Page 276: ...ort Then the port forwards the data to attached receiver hosts The receiver hosts will receive IPv6 multicast data that it does not expect The port forwards the MLD general queries or IPv6 PIM hello messages to its upstream multicast routers These messages might affect the multicast routing protocol state such as the MLD querier or DR election on the multicast routers This might further cause netw...

Page 277: ...nooping querier By default the MLD snooping querier is disabled for a VLAN Configuring parameters for MLD general queries and responses CAUTION To avoid mistakenly deleting IPv6 multicast group members make sure the MLD general query interval is greater than the maximum response time for MLD general queries You can modify the MLD general query interval for a VLAN based on the actual network condit...

Page 278: ...onfiguration prerequisites Before you configure parameters for MLD messages complete the following tasks Enable MLD snooping for the VLAN Determine the source IPv6 address of MLD general queries Determine the source IPv6 address of MLD multicast address specific queries Determine the source IPv6 address of MLD reports Determine the source IPv6 address of MLD done messages Determine the 802 1p prio...

Page 279: ...n IPv6 link local address 5 Configure the source IPv6 address for MLD reports mld snooping report source ip ipv6 address By default the source IPv6 address of MLD reports is the IPv6 link local address of the current VLAN interface If the current VLAN interface does not have an IPv6 link local address the source IPv6 address is FE80 02FF FFFF FE00 0001 6 Configure the source IPv6 address for MLD d...

Page 280: ...t group policy This feature enables the device to filter MLD reports by using an ACL that specifies the IPv6 multicast groups and the optional sources It is used to control the IPv6 multicast groups that receiver hosts can join Configuration restrictions and guidelines When you configure an IPv6 multicast group policy follow these restrictions and guidelines This configuration takes effect on the ...

Page 281: ...t connect to only IPv6 multicast receivers You can enable multicast source port filtering for the specified ports in MLD snooping view or for a port in interface view For a port the configuration in interface view has the same priority as the configuration in MLD snooping view and the most recent configuration takes effect Enabling IPv6 multicast source port filtering for the specified ports Step ...

Page 282: ...s 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Enable dropping unknown IPv6 multicast data for the VLAN mld snooping drop unknown By default dropping unknown IPv6 multicast data is disabled and unknown IPv6 multicast data is flooded Enabling MLD report suppression This feature enables the Layer 2 device to forward only the first MLD report for an IPv6 multicast group to...

Page 283: ...p replacement feature This feature enables the device to replace an existing group with a newly joined group when the number of groups exceeds the upper limit This feature is typically used in the channel switching application Without this feature the device discards MLD reports for new groups and the user cannot change to the new channel Configuration restrictions and guidelines When you enable t...

Page 284: ...zed devices in standalone mode display ipv6 l2 multicast ip group ipv6 group address source ipv6 source address vlan vlan id Display information about Layer 2 IPv6 multicast groups distributed devices in standalone mode centralized devices in IRF mode display ipv6 l2 multicast ip group ipv6 group address source ipv6 source address vlan vlan id slot slot number Display information about Layer 2 IPv...

Page 285: ...roup ipv6 group address ipv6 source address vlan vlan id verbose slot slot number Display dynamic MLD snooping group entries distributed devices in IRF mode display mld snooping group ipv6 group address ipv6 source address vlan vlan id verbose chassis chassis number slot slot number Display dynamic router port information centralized devices in standalone mode display mld snooping router port verb...

Page 286: ...ies distributed devices in IRF mode reset ipv6 l2 multicast fast forwarding cache vlan vlan id ipv6 source address ipv6 group address all chassis chassis number slot slot number Clear dynamic MLD snooping group entries reset mld snooping group ipv6 group address ipv6 source address all vlan vlan id Clear dynamic router port information reset mld snooping router port all vlan vlan id Clear statisti...

Page 287: ...0 2 RouterA GigabitEthernet1 0 2 ipv6 pim dm RouterA GigabitEthernet1 0 2 quit 3 Configure Switch A Enable MLD snooping globally SwitchA system view SwitchA mld snooping SwitchA mld snooping quit Create VLAN 100 and assign GigabitEthernet 1 0 1 through GigabitEthernet 1 0 4 to the VLAN SwitchA vlan 100 SwitchA vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 4 Enable MLD snooping and enab...

Page 288: ... on Switch A SwitchA display mld snooping group vlan 100 Total 1 entries VLAN 100 Total 1 entries FF1E 101 Host slots 0 in total Host ports 2 in total GE1 0 3 00 03 23 GE1 0 4 00 04 10 The output shows the following information Host A and Host B have joined IPv6 multicast group FF1E 101 through the member ports GigabitEthernet 1 0 4 and GigabitEthernet 1 0 3 on Switch A respectively Host A and Hos...

Page 289: ...dure 1 Assign an IPv6 address and prefix length to each interface as shown in Figure 78 Details not shown 2 Configure Router A Enable IPv6 multicast routing RouterA system view RouterA ipv6 multicast routing RouterA mrib6 quit Enable MLD on GigabitEthernet 1 0 1 RouterA interface gigabitethernet 1 0 1 RouterA GigabitEthernet1 0 1 mld enable RouterA GigabitEthernet1 0 1 quit Enable IPv6 PIM DM on G...

Page 290: ... 100 SwitchB vlan100 mld snooping enable SwitchB vlan100 quit 5 Configure Switch C Enable MLD snooping globally SwitchC system view SwitchC mld snooping SwitchC mld snooping quit Create VLAN 100 and assign GigabitEthernet 1 0 1 through GigabitEthernet 1 0 5 to the VLAN SwitchC vlan 100 SwitchC vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 5 Enable MLD snooping for VLAN 100 SwitchC vlan...

Page 291: ... ports of the IPv6 multicast group FF1E 101 MLD snooping querier configuration example Network requirements As shown in Figure 79 The network is a Layer 2 only network Source 1 and Source 2 send multicast data to IPv6 multicast groups FF1E 101 and FF1E 102 respectively Host A and Host C are receivers of IPv6 multicast group FF1E 101 and Host B and Host D are receivers of IPv6 multicast group FF1E ...

Page 292: ...n100 MLD snooping querier SwitchA vlan100 quit 2 Configure Switch B Enable MLD snooping globally SwitchB system view SwitchB mld snooping SwitchB mld snooping quit Create VLAN 100 and assign GigabitEthernet 1 0 1 through GigabitEthernet 1 0 4 to the VLAN SwitchB vlan 100 SwitchB vlan100 port gigabitethernet 1 0 1 to gigabitethernet 1 0 4 Enable MLD snooping and enable dropping unknown IPv6 multica...

Page 293: ...net 1 0 1 to gigabitethernet 1 0 2 Enable MLD snooping and enable dropping unknown IPv6 multicast data for VLAN 100 SwitchD vlan100 mld snooping enable SwitchD vlan100 mld snooping drop unknown SwitchD vlan100 quit Verifying the configuration Display statistics for MLD messages and IPv6 PIM hello messages learned through MLD snooping on Switch B SwitchB display mld snooping statistics Received MLD...

Page 294: ...group policy does not work Symptom Hosts can receive IPv6 multicast data for IPv6 multicast groups that are not permitted by the IPv6 multicast group policy Solution To resolve the problem 1 Use the display acl ipv6 command to verify that the configured IPv6 ACL meets the IPv6 multicast group policy requirements 2 Use the display this command in MLD snooping view or in a corresponding interface vi...

Page 295: ...e packet source is the RP For a bootstrap message originated from the BSR the packet source is the BSR For more information about the concepts of SPT RPT source side RPT RP and BSR see Configuring IPv6 PIM 2 The router selects one of the optimal routes as the RPF route as follows If the router uses the longest prefix match principle the route with a higher prefix length becomes the RPF route If th...

Page 296: ...arding entry has expired The router replaces the incoming interface with the RPF interface and matches the receiving interface against the RPF interface If the receiving interface is the RPF interface the router forwards the packet out of all outgoing interfaces Otherwise it discards the packet Figure 80 RPF check process As shown in Figure 80 assume that IPv6 unicast routes are available on the n...

Page 297: ...uter A and Router B Router A encapsulates the IPv6 multicast data in unicast IPv6 packets and forwards them to Router B across the tunnel through unicast routers Then Router B strips off the unicast IPv6 header and continues to forward the IPv6 multicast data down toward the receivers Command and hardware compatibility Commands and descriptions for centralized devices apply to the following router...

Page 298: ...iguring IPv6 multicast routing and forwarding Before you configure IPv6 multicast routing and forwarding complete the following tasks Configure an IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer Configure IPv6 PIM DM or IPv6 PIM SM Specifying the longest prefix match principle You can enable the device to use the longest prefix match principle ...

Page 299: ...terface view interface interface type interface number N A 3 Configure an IPv6 multicast forwarding boundary ipv6 multicast boundary ipv6 group address prefix length scope scope id admin local global organization local site local By default an interface is not an IPv6 multicast forwarding boundary for any IPv6 multicast groups Configuring static IPv6 multicast MAC address entries In Layer 2 multic...

Page 300: ...is associated with multiple sub VLANs Sub VLANs are isolated with each other at Layer 2 For information about the super VLAN and sub VLANs see Layer 2 LAN Switching Configuration Guide To enable IPv6 multicast forwarding between sub VLANs that are associated with a super VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN interface view interface vlan interface interface num...

Page 301: ...Display IPv6 multicast fast forwarding entries distributed devices in IRF mode display ipv6 multicast vpn instance vpn instance name fast forwarding cache ipv6 source address ipv6 group address chassis chassis number slot slot number Display DF information centralized devices in standalone mode display ipv6 multicast vpn instance vpn instance name forwarding df info ipv6 rp address verbose Display...

Page 302: ...e df list ipv6 group address verbose slot slot number Display information about the DF list in the IPv6 multicast forwarding table distributed devices in IRF mode display ipv6 multicast vpn instance vpn instance name forwarding table df list ipv6 group address verbose chassis chassis number slot slot number Display IPv6 multicast routing entries display ipv6 multicast vpn instance vpn instance nam...

Page 303: ...and Router C run OSPFv3 The source side interface GigabitEthernet 1 0 1 on Router A does not run OSPFv3 Configure a GRE tunnel so that the receiver host can receive the IPv6 multicast data from Source Figure 82 Network diagram Configuration procedure 1 Assign an IPv6 address and prefix length to each interface as shown in Figure 82 Details not shown 2 Configure OSPFv3 on the routers Do not run OSP...

Page 304: ...t1 0 1 ipv6 pim dm RouterA GigabitEthernet1 0 1 quit RouterA interface gigabitethernet 1 0 2 RouterA GigabitEthernet1 0 2 ipv6 pim dm RouterA GigabitEthernet1 0 2 quit RouterA interface tunnel 0 RouterA Tunnel0 ipv6 pim dm RouterA Tunnel0 quit On Router C enable IPv6 multicast routing RouterC ipv6 multicast routing RouterC mrib6 quit Enable MLD on the receiver side interface GigabitEthernet 1 0 1 ...

Page 305: ...ghbor FE80 A01 101 1 RPF prime neighbor FE80 A01 101 1 Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protocol pim dm UpTime 00 04 25 Expires The output shows the following information Router A is the RPF neighbor of Router C IPv6 multicast data from Router A is delivered over the GRE tunnel to Router C IPv6 multicast forwarding over ADVPN tunnel interfaces...

Page 306: ...55 55 64 Server GE1 0 1 1 11 64 Hub 2 GE1 0 1 1 2 64 Configuration procedure 1 Assign an IPv6 address and prefix length to each interface as shown in Table 22 Details not shown 2 Configure ADVPN a Configure the VAM server Create an ADVPN domain named abc Server system view Server vam server advpn domain abc id 1 Set the pre shared key to 123456 Server vam server domain abc pre shared key simple 12...

Page 307: ...m client name Hub1 Specify ADVPN domain abc for the VAM client Hub1 vam client Hub1 advpn domain abc Specify the VAM server Hub1 vam client Hub1 server primary ipv6 address 1 11 Set the pre shared key to 123456 Hub1 vam client Hub1 pre shared key simple 123456 Enable the VAM client Hub1 vam client Hub1 client enable c Configure Hub 2 Create a VAM client named hub2 Hub2 system view Hub2 vam client ...

Page 308: ...ce gigabitethernet 1 0 1 Hub1 Tunnel1 ipv6 address FE80 1 link local Hub1 Tunnel1 ipv6 address 192 168 1 64 Hub1 Tunnel1 vam ipv6 client hub1 Hub1 Tunnel1 quit On Hub 2 configure GRE mode IPv6 ADVPN tunnel interface tunnel1 Hub2 interface tunnel 1 mode advpn gre ipv6 Hub2 Tunnel1 source gigabitethernet 1 0 1 Hub2 Tunnel1 ipv6 address FE80 2 link local Hub2 Tunnel1 ipv6 address 192 168 2 64 Hub2 Tu...

Page 309: ...SPFv3 Hub2 system view Hub2 ospfv3 Hub2 ospfv3 1 router id 0 0 0 2 Hub2 ospfv3 1 area 0 0 0 0 Hub2 ospfv3 1 area 0 0 0 0 quit Hub2 ospfv3 1 quit Hub2 interface loopback 0 Hub2 LoopBack0 ospfv3 1 area 0 0 0 0 Hub2 LoopBack0 quit Hub2 interface tunnel 1 Hub2 Tunnel1 ospfv3 1 area 0 0 0 0 Hub2 Tunnel1 ospfv3 network type p2mp Hub2 Tunnel1 quit On Spoke 1 configure OSPFv3 Spoke1 system view Spoke1 osp...

Page 310: ... sm Hub1 LoopBack0 quit Hub1 interface gigabitethernet 1 0 2 Hub1 GigabitEthernet1 0 2 ipv6 pim sm Hub1 GigabitEthernet1 0 2 quit Enable IPv6 PIM SM and NBMA mode on Tunnel interface tunnel1 Hub1 interface tunnel 1 Hub1 Tunnel1 ipv6 pim sm Hub1 Tunnel1 ipv6 pim nbma mode Hub1 Tunnel1 quit Configure Loopback 0 as a C BSR and a C RP Hub1 system view Hub1 ipv6 pim Hub1 pim6 c bsr 44 44 Hub1 pim6 c rp...

Page 311: ...poke 2 Enable IPv6 multicast routing Spoke2 system view Spoke2 ipv6 multicast routing Spoke2 mrib6 quit Enable IPv6 PIM SM and NBMA mode on Tunnel interface tunnel1 Spoke2 interface tunnel 1 Spoke2 Tunnel1 ipv6 pim sm Spoke2 Tunnel1 ipv6 pim nbma mode Spoke2 Tunnel1 quit Verifying the configuration Send an MLD report from Spoke 1 to join IPv6 multicast group FF0E 1 Details not shown Send IPv6 mult...

Page 312: ...GigabitEthernet1 0 3 Upstream neighbor NULL RPF prime neighbor NULL Downstream interface information Total number of downstream interfacs 1 1 Tunnel1 FE80 3 Protocol pim sm UpTime 00 00 02 Expires 00 03 28 The output show that Tunnel interface tunnel1 FE80 3 on Spoke 1 will receive the IPv6 multicast data addressed to the IPv6 multicast group FF0E 1 from the source ...

Page 313: ...ten called reports from hosts However only one router can act as the MLD querier to send MLD query messages often called queries A querier election mechanism determines which router acts as the MLD querier on the subnet 1 Initially every MLD router assumes itself as the querier Each router sends MLD general query messages often called general queries to all hosts and routers on the local subnet Th...

Page 314: ... a minimum of one member other members do not need to report their memberships This mechanism known as the host MLD report suppression helps reduce traffic on the local subnet 4 At the same time because Host A is interested in G2 it sends a report to the IPv6 multicast group G2 5 Through the query report process the MLD routers determine that G1 and G2 have members on the local subnet The IPv6 mul...

Page 315: ...6 multicast group one of the following occurs If the host expects IPv6 multicast data from specific IPv6 multicast sources like S1 S2 it sends a report with Filter Mode denoted as Include Sources S1 S2 If the host does not expect IPv6 multicast data from specific IPv6 multicast sources like S1 S2 it sends a report with Filter Mode denoted as Exclude Sources S1 S2 As shown in Figure 85 the network ...

Page 316: ...e configured MLD SSM mappings Figure 86 Network diagram As shown in Figure 86 Host A and Host B on the IPv6 SSM network run MLDv1 and Host C runs MLDv2 To provide the SSM service for Host A and Host B you must configure the MLD SSM mapping feature on Router A After MLD SSM mappings are configured Router A checks the IPv6 multicast group address G carried in the message and performs the following o...

Page 317: ...s as a router that is running MLD MLD must be configured on this interface An MLD proxy device maintains a group membership database which stores the group memberships on all the router interfaces The host interfaces and router interfaces perform actions based on this membership database The host interfaces respond to queries according to the membership database or sends join done messages when th...

Page 318: ...ing basic MLD features Before you configure basic MLD features complete the following tasks Enable IPv6 forwarding and configure an IPv6 unicast routing protocol so that all devices can interoperate at the network layer Configure IPv6 PIM Determine the MLD version Determine the IPv6 multicast group address and IPv6 multicast source address for static group member configuration Determine the ACL to...

Page 319: ... interface to be configured as a static member of an IPv6 multicast group has the following restrictions If the interface is MLD and IPv6 PIM SM enabled it must be an IPv6 PIM SM DR If the interface is MLD enabled but not IPv6 PIM SM enabled it must be an MLD querier For more information about IPv6 PIM SM and DR see Configuring IPv6 PIM Configuration procedure To configure a static group member St...

Page 320: ... general queries to check for IPv6 multicast group members on the network MLD last listener query interval In MLDv1 it sets the interval at which a querier sends multicast address specific queries after receiving a done message In MLDv2 it sets the interval at which a querier sends multicast address and source specific queries after receiving a report that changes IPv6 multicast source and group m...

Page 321: ...s variable is 2 4 Set the MLD startup query interval startup query interval interval By default the MLD startup query interval equals one quarter of the MLD general query interval 5 Set the MLD startup query count startup query count count By default the MLD startup query count equals the MLD querier s robustness variable 6 Set the MLD general query interval query interval interval By default the ...

Page 322: ...e maximum response time for MLD general queries is 10 seconds 10 Set the MLD other querier present timer mld other querier present timeout time By default the MLD other querier present timer is calculated by using the following formula MLD general query interval MLD robustness variable maximum response time for MLD general queries 2 Enabling fast leave processing This feature enables an MLD querie...

Page 323: ...asks 1 Configure any IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer 2 Determine the router interfaces and host interface based on the network topology 3 Enable MLD on the router interfaces Enabling MLD proxying When you enable MLD proxying follow these restrictions and guidelines You must enable MLD proxying on the receiver side interfaces On ...

Page 324: ...you enable IPv6 multicast forwarding on a router interface duplicate multicast traffic might be received on the shared media network Configuration procedure To enable IPv6 multicast forwarding on a non querier interface Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Enable multicast forwarding on the interface mld pro...

Page 325: ...ing MLD CAUTION The reset mld group command might cause IPv6 multicast data transmission failures Execute display commands in any view and reset commands in user view Task Command Display information about MLD multicast groups display mld vpn instance vpn instance name group ipv6 group address interface interface type interface number static verbose Display MLD information for interfaces display m...

Page 326: ...N1 and N2 respectively MLDv1 runs between Router A and N1 and between the other two routers Router B and Router C and N2 Router A acts as the MLD querier in N1 Router B acts as the MLD querier in N2 because it has a lower IPv6 address Configure the routers to meet the following requirements The hosts in N1 can only join IPv6 multicast group FF1E 101 The hosts in N2 can join any IPv6 multicast grou...

Page 327: ...igabitEthernet1 0 1 quit Enable IPv6 PIM DM on GigabitEthernet 1 0 2 RouterB interface gigabitethernet 1 0 2 RouterB GigabitEthernet1 0 2 ipv6 pim dm RouterB GigabitEthernet1 0 2 quit On Router C enable IPv6 multicast routing RouterC system view RouterC ipv6 multicast routing RouterC mrib6 quit Enable MLD on GigabitEthernet 1 0 1 RouterC interface gigabitethernet 1 0 1 RouterC GigabitEthernet1 0 1...

Page 328: ...Router D The receiver host runs MLDv1 and does not support MLDv2 The receiver host cannot specify multicast sources in its membership reports Source 1 Source 2 and Source 3 send IPv6 multicast packets to multicast groups in the IPv6 SSM group range Configure the MLD SSM mapping feature on Router D so that the receiver host will receive IPv6 multicast data only from Source 1 and Source 3 Figure 89 ...

Page 329: ...1 quit Enable IPv6 PIM SM on the other interfaces RouterD interface gigabitethernet 1 0 2 RouterD GigabitEthernet1 0 2 ipv6 pim sm RouterD GigabitEthernet1 0 2 quit RouterD interface gigabitethernet 1 0 3 RouterD GigabitEthernet1 0 3 ipv6 pim sm RouterD GigabitEthernet1 0 3 quit On Router A enable IPv6 multicast routing RouterA system view RouterA ipv6 multicast routing RouterA mrib6 quit Enable I...

Page 330: ...lticast group FF3E 101 on Router D RouterD display mld ssm mapping ff3e 101 Group FF3E 101 Source list 1001 1 3001 1 Display information about MLD multicast groups that hosts have dynamically joined on Router D RouterD display mld group MLD groups in total 1 GigabitEthernet1 0 1 FE80 101 MLD groups reported in total 1 Group address FF3E 101 Last reporter FE80 1 Uptime 00 02 04 Expires Off Display ...

Page 331: ...n Router B so that Router B can maintain group memberships and forward IPv6 multicast traffic without running IPv6 PIM DM Figure 90 Network diagram Configuration procedure 1 Assign an IPv6 address and prefix length to each interface as shown in Figure 90 Details not shown 2 Enable IPv6 multicast routing IPv6 PIM DM MLD and MLD proxying On Router A enable IPv6 multicast routing RouterA system view ...

Page 332: ...E 1 Member state Delay Expires 00 00 02 Troubleshooting MLD No member information exists on the receiver side router Symptom When a host sends a message to announce that it is joining IPv6 multicast group G no member information of multicast group G exists on the immediate router Solution To resolve the problem 1 Use the display mld interface command to verify that the networking interface connect...

Page 333: ...nd to verify the MLD information on the interface Make sure MLD interface parameter configurations for routers on the same subnet are the same 2 Use the display mld interface command on all routers on the same subnet to check the MLD timers for inconsistent configurations 3 Use the display mld interface command to verify that all routers are running the same MLD version 4 If the problem persists c...

Page 334: ...multicast members IPv6 PIM DM assumes that all downstream nodes want to receive IPv6 multicast data from a source so IPv6 multicast data is flooded to all downstream nodes on the network Branches without downstream receivers are pruned from the forwarding trees leaving only those branches that contain receivers When the pruned branch has new receivers the graft mechanism turns the pruned branch in...

Page 335: ...the timer expires IPv6 multicast data is again forwarded to the pruned branch The flood and prune cycle takes place periodically to maintain the forwarding branches Graft A previously pruned branch might have new downstream receivers To reduce the latency for resuming the forwarding capability of this branch a graft mechanism is used as follows 1 The node that needs to receive the IPv6 multicast d...

Page 336: ...M uses the flood and prune cycles to build SPTs for IPv6 multicast data forwarding Although an SPT has the shortest paths from the IPv6 multicast source to the receivers it is built with a low efficiency Therefore IPv6 PIM DM is not suitable for large and medium sized networks IPv6 PIM SM uses the pull mode for IPv6 multicast forwarding and it is suitable for large sized and medium sized networks ...

Page 337: ...s enough for multicast forwarding throughout the network In this case you can specify a static RP on each router in the IPv6 PIM SM domain However in an IPv6 PIM SM network that covers a wide area a huge amount of IPv6 multicast data is forwarded by the RP To lessen the RP burden and optimize the topological structure of the RPT you can configure multiple candidate RPs C RPs in an IPv6 PIM SM doma...

Page 338: ...and hash value the C RP with the highest IPv6 address wins Embedded RP The embedded RP mechanism enables a router to resolve the RP address from an IPv6 multicast group address to map the IPv6 multicast group to an RP This RP can take the place of the configured static RP or the RP dynamically elected by the bootstrap mechanism A DR does not need to learn the RP address beforehand The process is a...

Page 339: ... RP member Each RP in the Anycast RP set Anycast RP member address IPv6 address of each Anycast RP member for communication among the RP members Anycast RP address IPv6 address of the Anycast RP set for communication within the IPv6 PIM SM domain It is also known as RPA As shown in Figure 95 RP 1 RP 2 and RP 3 are members of an Anycast RP set Figure 95 Anycast RP through IPv6 PIM SM The following ...

Page 340: ...ds the data to the DR along the established RPT Finally the DR forwards the IPv6 multicast data to the receiver hosts When a receiver is no longer interested in the IPv6 multicast data addressed to the IPv6 multicast group G the receiver side DR sends a prune message The prune message goes hop by hop along the RPT to the RP After receiving the prune message the upstream node deletes the interface ...

Page 341: ...to prevent the DR from unnecessarily encapsulating the data Switchover to SPT CAUTION If the switch is an RP disabling switchover to SPT might cause multicast traffic forwarding failures on the source side DR When disabling switchover to SPT be sure you fully understand its impact on your network In an IPv6 PIM SM domain only one RP and one RPT provide services for a specific IPv6 multicast group ...

Page 342: ...SM builds SPTs more economically than IPv6 PIM DM does Assert IPv6 PIM SM uses a similar assert mechanism as IPv6 PIM DM does For more information see Assert IPv6 BIDIR PIM overview In some many to many applications such as a multi side video conference multiple receivers of an IPv6 multicast group might be interested in the IPv6 multicast data from multiple IPv6 multicast sources With IPv6 PIM DM...

Page 343: ...to all IPv6 PIM routers on the subnet to initiate a DF election process The election message carries the RP s address and the route preference and metric of the unicast route to the RP A DF is elected as follows 1 The router with higher route preference becomes the DF 2 If the routers have the same route preference the router with lower metric becomes the DF 3 If the routers have the same metric t...

Page 344: ...G entry to its forwarding table After a receiver host leaves the IPv6 multicast group G the directly connected router multicasts a prune message to all IPv6 PIM routers on the subnet The prune message goes hop by hop along the reverse direction of the RPT to the RP After receiving the prune message an upstream node removes the interface that connects to the downstream node from the outgoing interf...

Page 345: ...r an IPv6 BIDIR PIM domain contains only one BSR which is responsible for advertising RP set information within the entire domain Information about all IPv6 multicast groups is forwarded within the network that the BSR administers This is called the IPv6 non scoped BSR mechanism IPv6 administrative scoping mechanism To implement refined management you can divide an IPv6 PIM SM domain or IPv6 BIDIR...

Page 346: ...You can have a better understanding of the IPv6 global scoped zone and IPv6 admin scoped zones based on geographical locations and the scope field values In view of geographical locations An IPv6 admin scoped zone is a logical zone for particular IPv6 multicast groups with the same scope field value The IPv6 multicast packets for such IPv6 multicast groups are confined within the local IPv6 admin ...

Page 347: ...erview The ASM model includes IPv6 PIM DM and IPv6 PIM SM The SSM model can be implemented by leveraging part of the IPv6 PIM SM technique It is also called IPv6 PIM SSM The SSM model provides a solution for source specific multicast It maintains the relationship between hosts and routers through MLDv2 In actual applications part of MLDv2 and IPv6 PIM SM techniques are adopted to implement the SSM...

Page 348: ...toward the IPv6 multicast source S All routers along the path from the DR to the IPv6 multicast source create an S G entry to build an SPT The SPT is rooted the IPv6 multicast source S and has the receivers as its leaves This SPT is the transmission channel in IPv6 PIM SSM If the group address is not in the IPv6 SSM group range the receiver side DR sends a G join message to the RP The IPv6 multica...

Page 349: ...C 4601 Protocol Independent Multicast Sparse Mode PIM SM Protocol Specification Revised RFC 4610 Anycast RP Using Protocol Independent Multicast PIM RFC 3956 Embedding the Rendezvous Point RP Address in an IPv6 Multicast Address RFC 5015 Bidirectional Protocol Independent Multicast BIDIR PIM RFC 5059 Bootstrap Router BSR Mechanism for Protocol Independent Multicast PIM RFC 4607 Source Specific Mul...

Page 350: ...n IMPORTANT All the interfaces on a device must operate in the same IPv6 PIM mode in the public network or the same VPN instance To enable IPv6 PIM DM Step Command Remarks 1 Enter system view system view N A 2 Enable IPv6 multicast routing and enter IPv6 MRIB view ipv6 multicast routing vpn instance vpn instance name By default IPv6 multicast routing is disabled 3 Return to system view quit N A 4 ...

Page 351: ...ge stops being forwarded when the hop limit comes down to 0 A state refresh message with a large hop limit value might cycle on a small network To control the propagation scope of state refresh messages configure an appropriate hop limit value based on the network size on the router directly connected with the IPv6 multicast source To configure state refresh parameters Step Command Remarks 1 Enter...

Page 352: ...ork without C RPs Optional Configuring IPv6 multicast source registration N A Optional Configuring the switchover to SPT N A Optional Configuring common IPv6 PIM features N A Configuration prerequisites Before you configure IPv6 PIM SM configure an IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer Enabling IPv6 PIM SM Enable IPv6 multicast routin...

Page 353: ...d guidelines You can configure the same static RP for different IPv6 multicast groups by using the same RP address but different ACLs You do not need to enable IPv6 PIM for an interface to be configured as a static RP If you configure multiple static RPs for an IPv6 multicast group only the static RP with the highest IPv6 address takes effect The static RP configuration must be the same on all rou...

Page 354: ...ded as legal 5 Optional Configure the device to use the BSR RP hash algorithm described in RFC 2362 bsr rp mapping rfc2362 By default the device uses the BSR RP hash algorithm described in RFC 4601 Configuring Anycast RP IMPORTANT The Anycast RP address must be different from the BSR address Otherwise the other Anycast member devices will discard the BSM sent by the BSR You must configure the stat...

Page 355: ...s own BSR address and no longer regards itself as the BSR The winner retains its own BSR address and continues to regard itself as the BSR The elected BSR distributes the RP set information collected from C RPs to all routers in the IPv6 PIM SM domain All routers use the same hash algorithm to get an RP for a specific IPv6 multicast group Configuring a C BSR A BSR policy enables the router to filt...

Page 356: ...date the RP set information for a group range after receiving all BSMFs for the group range The loss of one BSMF only affects the RP set information of the group ranges that the fragment contains If the IPv6 PIM SM domain contains a device that does not support this feature you must disable BSM semantic fragmentation on all C BSRs If you do not disable this feature such a device regards a BSMF as ...

Page 357: ...ide DR in one of the following conditions The RP stops providing services to the receivers for an IPv6 multicast group The receivers do not receive IPv6 multicast data addressed to the IPv6 multicast group through the RP The RP receives IPv6 multicast data that travels along the SPT After receiving the register stop message the DR stops sending register messages encapsulated with IPv6 multicast da...

Page 358: ...ceiver side DR and RP can monitor the traffic rate of passing by IPv6 multicast packets and thus trigger the switchover from RPT to SPT The monitor function is not available on switches To configure the switchover to SPT Step Command Remarks 1 Enter system view system view N A 2 Enter IPv6 PIM view ipv6 pim vpn instance vpn instance name N A 3 Configure the switchover to SPT spt switch threshold t...

Page 359: ...s implemented on the basis of IPv6 PIM SM you must enable IPv6 PIM SM before enabling IPv6 BIDIR PIM As a best practice enable IPv6 PIM SM on all non border interfaces on routers when you deploy an IPv6 BIDIR PIM domain IMPORTANT All interfaces on a device must be enabled with the same IPv6 PIM mode To enable IPv6 BIDIR PIM Step Command Remarks 1 Enter system view system view N A 2 Enable IPv6 mul...

Page 360: ...gn 1001 100 64 to the static RP As a result the link becomes an RPL When you configure static RPs for IPv6 BIDIR PIM follow these restrictions and guidelines You can configure the same static RP for different IPv6 multicast groups by using the same RP address but different ACLs You do not need to enable IPv6 PIM for an interface to be configured as a static RP If you configure multiple static RPs ...

Page 361: ... view N A 2 Enter IPv6 PIM view ipv6 pim vpn instance vpn instance name N A 3 Configure a C RP to provide services for IPv6 BIDIR PIM c rp ipv6 address advertisement interval adv interval group policy ipv6 acl number scope scope id holdtime hold time priority priority bidir By default no C RPs exist 4 Optional Configure the device to use RP hash algorithm described in RFC 2362 bsr rp mapping rfc23...

Page 362: ...IMPORTANT Because the BSR and other devices exchange a large amount of information in the IPv6 BIDIR PIM domain reserve a large bandwidth between the C BSR and other devices A BSR policy enables the router to filter BSR messages by using an ACL that specifies the legal BSR addresses Configure a BSR policy to guard against the following BSR spoofing cases Some maliciously configured hosts can forge...

Page 363: ...If you do not disable this feature such a device regards a BSMF as an entire BSM and updates the RP set information each time it receives a BSMF It learns only part of the RP set information which further affects the RP election To disable BSM semantic fragmentation Step Command Remarks 1 Enter system view system view N A 2 Enter IPv6 PIM view ipv6 pim vpn instance vpn instance name N A 3 Disable ...

Page 364: ...devices in the domain can interoperate at the network layer Enabling IPv6 PIM SM Before you configure IPv6 PIM SSM you must enable IPv6 PIM SM because the implementation of the IPv6 SSM model is based on subsets of IPv6 PIM SM When you deploy an IPv6 PIM SSM domain enable IPv6 PIM SM on non border interfaces of the routers IMPORTANT All the interfaces on a device must be enabled with the same IPv6...

Page 365: ...guration procedure To configure an IPv6 SSM group range Step Command Remarks 1 Enter system view system view N A 2 Enter IPv6 PIM view ipv6 pim N A 3 Configure the IPv6 SSM group range ssm policy ipv6 acl number The default range is FF3x 32 where x can be any valid scope Configuring common IPv6 PIM features Configuration task list Tasks at a glance Optional Configuring an IPv6 multicast source pol...

Page 366: ...eighbor are filtered out by the policy the neighbor is automatically removed when its aging timer expires To configure an IPv6 PIM hello policy Step Command Remarks 1 Enter system view system view N A 2 Enter interface view interface interface type interface number N A 3 Configure an IPv6 PIM hello policy ipv6 pim neighbor policy ipv6 acl number By default no IPv6 PIM hello policies exist on an in...

Page 367: ...ssages when an interface is enabled with IPv6 PIM The generation ID is a random value but only changes when the status of the router changes If an IPv6 PIM router finds that the generation ID in a hello message from the upstream router has changed it considers that the status of the upstream router has changed In this case it sends a join message to the upstream router for status update You can co...

Page 368: ...hbor relationship Triggered hello delay Maximum delay for sending a hello message to avoid collisions caused by simultaneous hello messages After receiving a hello message an IPv6 PIM router waits for a random time before sending a hello message This random time is in the range of 0 to the triggered hello delay Join Prune interval Interval at which an IPv6 PIM router sends join prune messages to i...

Page 369: ...interface number N A 3 Set the hello interval ipv6 pim timer hello interval The default setting is 30 seconds 4 Set the triggered hello delay ipv6 pim triggered hello delay delay The default setting is 5 seconds 5 Set the join prune interval ipv6 pim timer join prune interval The default setting is 60 seconds This configuration takes effect after the current interval ends 6 Set the joined pruned s...

Page 370: ...v6 PIM Enabling IPv6 PIM passive mode To guard against IPv6 PIM hello spoofing you can enable IPv6 PIM passive mode on a receiver side interface The interface cannot receive or forward IPv6 PIM protocol messages excluding register register stop and C RP Adv messages and acts as the DR on the subnet In IPv6 BIDIR PIM it also acts as the DF Configuration restrictions and guidelines When you enable I...

Page 371: ...or IPv6 PIM For PIM event notifications to be sent correctly you must also configure SNMP as described in Network Management and Monitoring Configuration Guide To enable SNMP notifications for IPv6 PIM Step Command Remarks 1 Enter system view system view N A 2 Enable SNMP notifications for IPv6 PIM snmp agent trap enable pim6 candidate bsr win election elected bsr lost election neighbor loss By de...

Page 372: ... vpn instance name c rp local Display DF information in the IPv6 BIDIR PIM domain display ipv6 pim vpn instance vpn instance name df info ipv6 rp address Display IPv6 PIM information on an interface display ipv6 pim vpn instance vpn instance name interface interface type interface number verbose Display IPv6 PIM neighbor information display ipv6 pim vpn instance vpn instance name neighbor ipv6 nei...

Page 373: ...rk diagram Table 25 Interface and IPv6 address assignment Device Interface IPv6 address Device Interface IPv6 address Router A GE1 0 1 1001 1 64 Router C GE1 0 2 3001 1 64 Router A GE1 0 2 1002 1 64 Router D GE1 0 1 4001 1 64 Router B GE1 0 1 2001 1 64 Router D GE1 0 2 1002 2 64 Router B GE1 0 2 2002 1 64 Router D GE1 0 3 2002 2 64 Router C GE1 0 1 2001 2 64 Router D GE1 0 4 3001 2 64 Configuratio...

Page 374: ...and enable IPv6 PIM DM on each interface RouterD system view RouterD ipv6 multicast routing RouterD mrib6 quit RouterD interface gigabitethernet 1 0 1 RouterD GigabitEthernet1 0 1 ipv6 pim dm RouterD GigabitEthernet1 0 1 quit RouterD interface gigabitethernet 1 0 2 RouterD GigabitEthernet1 0 2 ipv6 pim dm RouterD GigabitEthernet1 0 2 quit RouterD interface gigabitethernet 1 0 3 RouterD GigabitEthe...

Page 375: ...Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protocol mld UpTime 00 01 20 Expires 4001 100 FF0E 101 Protocol pim dm Flag ACT UpTime 00 01 20 Upstream interface GigabitEthernet1 0 2 Upstream neighbor 1002 2 RPF prime neighbor 1002 2 Downstream interface s information Total number of downstreams 1 1 GigabitEthernet1 0 1 Protocol pim dm UpTime 00 01 20 Expir...

Page 376: ...cify GigabitEthernet 1 0 3 on Router E as a C BSR and a C RP The C RP is designated to IPv6 multicast group range FF0E 101 64 Specify GigabitEthernet 1 0 2 of Router D as the static RP on all the routers to back up the dynamic RP MLDv1 runs between Router A and N1 and between Router B Router C and N2 Figure 106 Network diagram Table 26 Interface and IPv6 address assignment Device Interface IPv6 ad...

Page 377: ...le IPv6 PIM SM on the other interfaces RouterA interface gigabitethernet 1 0 2 RouterA GigabitEthernet1 0 2 ipv6 pim sm RouterA GigabitEthernet1 0 2 quit RouterA interface gigabitethernet 1 0 3 RouterA GigabitEthernet 1 0 3 ipv6 pim sm RouterA GigabitEthernet 1 0 3 quit Enable IPv6 multicast routing MLD and IPv6 PIM SM on Router B and Router C in the same way Router A is configured Details not sho...

Page 378: ...Scope non scoped State Accept Preferred Bootstrap timer 00 01 44 Elected BSR address 1003 2 Priority 64 Hash mask length 126 Uptime 00 11 18 Display BSR information on Router E RouterE display ipv6 pim bsr info Scope non scoped State Elected Bootstrap timer 00 01 44 Elected BSR address 1003 2 Priority 64 Hash mask length 126 Uptime 00 11 18 Candidate BSR address 1003 2 Priority 64 Hash mask length...

Page 379: ...Pv6 admin scoped zone 2 Both of the two interfaces are designated to the IPv6 multicast groups with the scope field of 4 GigabitEthernet 1 0 1 of Router F acts as a C BSR and a C RP for the IPv6 global scoped zone and is designated to the IPv6 multicast groups with the scope field value of 14 MLDv1 separately runs between Router A Router E Router I and the receivers that directly connect to them F...

Page 380: ...all routers in the IPv6 PIM SM domain Details not shown 3 Enable IPv6 multicast routing MLD and IPv6 PIM SM On Router A enable IPv6 multicast routing RouterA system view RouterA ipv6 multicast routing RouterA mrib6 quit Enable MLD on the receiver side interface GigabitEthernet 1 0 1 RouterA interface gigabitethernet 1 0 1 RouterA GigabitEthernet1 0 1 mld enable RouterA GigabitEthernet1 0 1 quit En...

Page 381: ...ped zone 2 RouterC system view RouterC interface gigabitethernet 1 0 4 RouterC GigabitEthernet1 0 4 ipv6 multicast boundary scope 4 RouterC GigabitEthernet1 0 4 quit RouterC interface gigabitethernet 1 0 5 RouterC GigabitEthernet1 0 5 ipv6 multicast boundary scope 4 RouterC GigabitEthernet1 0 5 quit On Router D configure GigabitEthernet 1 0 3 as the boundary of IPv6 admin scoped zone 2 RouterD sys...

Page 382: ...ength 126 Uptime 00 04 54 Candidate BSR address 1002 2 Priority 64 Hash mask length 126 Display BSR information on Router D RouterD display ipv6 pim bsr info Scope non scoped State Accept Preferred Bootstrap timer 00 01 25 Elected BSR address 8001 1 Priority 64 Hash mask length 126 Uptime 00 01 45 Scope 4 State Elected Bootstrap timer 00 01 25 Elected BSR address 3003 2 Priority 64 Hash mask lengt...

Page 383: ...Expires 1002 2 local 192 180 00 02 03 00 02 56 Group MaskLen FF34 16 RP address Priority HoldTime Uptime Expires 1002 2 local 192 180 00 02 03 00 02 56 Group MaskLen FF44 16 RP address Priority HoldTime Uptime Expires 1002 2 local 192 180 00 02 03 00 02 56 Group MaskLen FF54 16 RP address Priority HoldTime Uptime Expires 1002 2 local 192 180 00 02 03 00 02 56 Group MaskLen FF64 16 RP address Prior...

Page 384: ...up MaskLen FF04 16 RP address Priority HoldTime Uptime Expires 1002 2 local 192 180 00 02 03 00 02 56 Display RP information on Router F RouterF display ipv6 pim rp info BSR RP information Scope non scoped Group MaskLen FF00 8 RP address Priority HoldTime Uptime Expires 8001 1 local 192 180 00 10 28 00 02 31 IPv6 BIDIR PIM configuration example Network requirements As shown in Figure 108 OSPFv3 ru...

Page 385: ...re 108 Details not shown 2 Configure OSPFv3 on the routers in the IPv6 BIDIR PIM domain Details not shown 3 Enable IPv6 multicast routing IPv6 PIM SM IPv6 BIDIR PIM and MLD On Router A enable IPv6 multicast routing enable IPv6 PIM SM on each interface and enable IPv6 BIDIR PIM RouterA system view RouterA ipv6 multicast routing RouterA mrib6 quit RouterA interface gigabitethernet 1 0 1 RouterA Giga...

Page 386: ...M SM on each interface and enable IPv6 BIDIR PIM RouterC system view RouterC ipv6 multicast routing RouterC mrib6 quit RouterC interface gigabitethernet 1 0 1 RouterC GigabitEthernet1 0 1 ipv6 pim sm RouterC GigabitEthernet1 0 1 quit RouterC interface gigabitethernet 1 0 2 RouterC GigabitEthernet1 0 2 ipv6 pim sm RouterC GigabitEthernet1 0 2 quit RouterC interface loopback 0 RouterC LoopBack0 ipv6...

Page 387: ...00 local GE1 0 2 Lose 100 1 01 07 49 FE80 20F E2FF FE38 4E01 Display the DF information of IPv6 BIDIR PIM on Router B RouterB display ipv6 pim df info RP address 6001 1 Interface State DF Pref DF Metric DF Uptime DF Address GE1 0 1 Win 100 1 01 24 09 FE80 200 5EFF FE71 2801 local GE1 0 2 Win 100 1 01 24 09 FE80 20F E2FF FE38 4E01 local GE1 0 3 Lose 0 0 01 23 12 FE80 20F E2FF FE15 5601 Display the ...

Page 388: ...f info Total 1 RP 1 matched 00001 RP address 6001 1 Flags 0x0 Uptime 00 06 24 RPF interface GigabitEthernet1 0 3 List of 2 DF interfaces 1 GigabitEthernet1 0 1 2 GigabitEthernet1 0 2 Display information about the DF for IPv6 multicast forwarding on Router C RouterC display ipv6 multicast forwarding df info Total 1 RP 1 matched 00001 RP address 6001 1 Flags 0x0 Uptime 00 07 21 RPF interface LoopBac...

Page 389: ...ble 29 Interface and IPv6 address assignment Device Interface IPv6 address Device Interface IPv6 address Router A GE1 0 1 1001 1 64 Router D GE1 0 1 4001 1 64 Router A GE1 0 2 1002 1 64 Router D GE1 0 2 1002 2 64 Router A GE1 0 3 1003 1 64 Router D GE1 0 3 4002 1 64 Router B GE1 0 1 2001 1 64 Router E GE1 0 1 3001 2 64 Router B GE1 0 2 2002 1 64 Router E GE1 0 2 2002 2 64 Router C GE1 0 1 2001 2 6...

Page 390: ...cast routing MLD and IPv6 PIM SM on Router B and Router C in the same way Router A is configured Details not shown Enable IPv6 multicast routing and IPv6 PIM SM on Router D and Router E in the same way Router A is configured Details not shown 4 Configure the IPv6 SSM group range FF3E 64 on Router A RouterA acl ipv6 basic 2000 RouterA acl ipv6 basic 2000 rule permit source ff3e 64 RouterA acl ipv6 ...

Page 391: ...erated the correct S G entries Troubleshooting IPv6 PIM A multicast distribution tree cannot be correctly built Symptom No IPv6 multicast forwarding entries are established on the routers including routers directly connected with multicast sources or receivers in an IPv6 PIM network This means that an IPv6 multicast distribution tree cannot be correctly built Solution To resolve the problem 1 Use ...

Page 392: ...oundary 2 Use display current configuration to verify the IPv6 multicast source policy Change the ACL rule defined in the source policy command so that the source group address of the IPv6 multicast data can pass ACL filtering 3 If the problem persists contact Hewlett Packard Enterprise Support An RP cannot join an SPT in IPv6 PIM SM Symptom An RPT cannot be correctly built or an RP cannot join th...

Page 393: ... is available between each C RP and the BSR 2 Use display ipv6 pim bsr info to verify that the BSR information exists on each router 3 Use display ipv6 pim rp info to verify that the RP information is correct on each router 4 Use display ipv6 pim neighbor to verify that IPv6 PIM neighboring relationship has been correctly established among the routers 5 If the problem persists contact Hewlett Pack...

Page 394: ...ast one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field nam...

Page 395: ... Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gatewa...

Page 396: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Page 397: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Page 398: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 399: ... 313 Configuring multicast routing and forwarding 46 Configuring parameters for IGMP messages 24 Configuring parameters for MLD messages 269 Configuring PIM DM 102 Configuring PIM SM 105 Configuring PIM SSM 117 Configuring SA message related parameters 155 Configuring the IGMP snooping querier 22 Configuring the MLD snooping querier 267 Conventions 385 D Displaying and maintaining IGMP 78 Displayi...

Page 400: ...6 Overview 41 Overview 325 Overview 65 Overview 12 Overview 87 Overview 286 Overview 177 Overview 304 Overview 257 P PIM configuration examples 125 T Troubleshooting IGMP 86 Troubleshooting IGMP snooping 39 Troubleshooting IPv6 PIM 382 Troubleshooting MD VPN 255 Troubleshooting MLD 323 Troubleshooting MLD snooping 285 Troubleshooting MSDP 175 Troubleshooting multicast routing and forwarding 64 Tro...

Reviews:

No comments

Brands by name

Popular brands

Load more brands