Page 1
HP MSR Router Series IP Multicast Configuration Guide(V7) Part number: 5998-5679 Software version: CMW710-R0106 Document version: 6PW100-20140607...
Page 2
The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
Contents Multicast overview ······················································································································································· 1 Introduction to multicast ···················································································································································· 1 Information transmission techniques ······················································································································· 1 Multicast features ······················································································································································ 3 Common notations in multicast ······························································································································· 4 Multicast benefits and applications ························································································································ 4 Multicast models ································································································································································ 5 ...
Page 4
Group policy and simulated joining configuration example ············································································ 31 Static port configuration example ······················································································································· 33 IGMP snooping querier configuration example ································································································· 36 Troubleshooting IGMP snooping ·································································································································· 38 Layer 2 multicast forwarding cannot function ···································································································· 38 Multicast group filter does not work ····················································································································...
Page 5
Basic IGMP functions configuration examples ··································································································· 68 IGMP SSM mapping configuration example ····································································································· 71 IGMP proxying configuration example ··············································································································· 74 Troubleshooting IGMP ··················································································································································· 75 No membership information on the receiver-side router ··················································································· 75 Inconsistent membership information on the routers on the same subnet ························································ 76 ...
Page 6
PIM-DM configuration example ························································································································· 115 PIM-SM non-scoped zone configuration example ··························································································· 119 PIM-SM admin-scoped zone configuration example ······················································································· 122 BIDIR-PIM configuration example ······················································································································· 127 PIM-SSM configuration example ························································································································ 131 Troubleshooting PIM ···················································································································································· 134 A multicast distribution tree cannot be correctly built ······················································································ 134 ...
Page 7
Configuration prerequisites ································································································································ 184 Enabling IP multicast routing in a VPN instance ······························································································ 184 Creating the MD for a VPN instance ················································································································ 185 Specifying the default-group address ················································································································ 185 Specifying the MD source interface ·················································································································· 186 ...
Page 8
MLD snooping querier configuration example ································································································· 241 Troubleshooting MLD snooping ·································································································································· 244 Layer 2 multicast forwarding cannot function ·································································································· 244 IPv6 multicast group filter does not work ·········································································································· 244 Configuring IPv6 multicast routing and forwarding ····························································································· 245 ...
Page 10
An RPT cannot be built or IPv6 multicast source registration fails in IPv6 PIM-SM ······································· 335 Support and other resources ·································································································································· 336 Contacting HP ······························································································································································ 336 Subscription service ············································································································································ 336 Related information ······················································································································································ 336 Documents ···························································································································································· 336 ...
Multicast overview Introduction to multicast As a technique that coexists with unicast and broadcast, the multicast technique effectively addresses the issue of point-to-multipoint data transmission. By enabling high-efficiency point-to-multipoint data transmission over a network, multicast greatly saves network bandwidth and reduces network load. By using multicast technology, a network operator can easily provide bandwidth-critical and time-critical information services.
Page 12
Unicast is not suitable for batch transmission of information. Broadcast In broadcast transmission, the information source sends information to all hosts on the subnet, even if some hosts do not need the information. Figure 2 Broadcast transmission Figure 2, assume that only Host B, Host D, and Host E need the information. If the information is broadcast to the subnet, Host A and Host C also receive it.
Figure 3 Multicast transmission The multicast source sends only one copy of the information to a multicast group. Host B, Host D, and Host E, which are information receivers, must join the multicast group. The routers on the network duplicate and forward the information based on the distribution of the group members. Finally, the information is correctly delivered to Host B, Host D, and Host E.
For a better understanding of the multicast concept, you can compare multicast transmission to the transmission of TV programs. Table 1 Comparing TV program transmission and multicast transmission TV program transmission Multicast transmission A TV station transmits a TV program through a A multicast source sends multicast data to a multicast channel.
Multicast models Based on how the receivers treat the multicast sources, the multicast models include any-source multicast (ASM), source-filtered multicast (SFM), and source-specific multicast (SSM). ASM model In the ASM model, any sender can send information to a multicast group as a multicast source. Receivers can join a multicast group identified by a group address and get multicast information addressed to that multicast group.
Multicast addresses IP multicast addresses • IPv4 multicast addresses: IANA assigned the Class D address block (224.0.0.0 to 239.255.255.255) to IPv4 multicast. Table 2 Class D IP address blocks and description Address block Description Reserved permanent group addresses. The IP address 224.0.0.0 is reserved.
Page 17
Address Description 224.0.0.13 All Protocol Independent Multicast (PIM) routers. 224.0.0.14 RSVP encapsulation. 224.0.0.15 All Core-Based Tree (CBT) routers. 224.0.0.16 Designated SBM. 224.0.0.17 All SBMs. 224.0.0.18 VRRP. • IPv6 multicast addresses: Figure 4 IPv6 multicast format The following describes the fields of an IPv6 multicast address: 0xFF—If the most significant eight bits are 1 1 1 1 1 1 1 1, this address is an IPv6 multicast address.
Page 18
Table 5 Values of the Scope field Value Meaning 0, F Reserved. Interface-local scope. Link-local scope. Subnet-local scope. Admin-local scope. Site-local scope. 6, 7, 9 through D Unassigned. Organization-local scope. Global scope. Group ID—The Group ID field contains 1 12 bits. It uniquely identifies an IPv6 multicast group in the scope that the Scope field defines.
Figure 7 IPv6-to-MAC address mapping IMPORTANT: Because of the duplicate mapping from multicast IP address to multicast MAC address, the device might inadvertently send multicast protocol packets as multicast data in Layer 2 forwarding. To avoid this, do not use the IP multicast addresses that are mapped to multicast MAC addresses 0100-5E00-00xx and 3333-0000-00xx (where "x"...
Page 20
Figure 8 Positions of Layer 3 multicast protocols Multicast group management protocols: • IGMP and MLD protocol are multicast group management protocols. Typically, they run between hosts and Layer 3 multicast devices that directly connect to the hosts to establish and maintain multicast group memberships.
Multicast packet forwarding mechanism In a multicast model, receiver hosts of a multicast group are usually located at different areas on the network. They are identified by the same multicast group address. To deliver multicast packets to these receivers, a multicast source encapsulates the multicast data in an IP packet with the multicast group address as the destination address.
The P device belongs to the public network. The CE devices belong to their respective VPNs. Each • CE device serves its own VPN and maintains only one set of forwarding mechanisms. The PE devices connect to the public network and the VPNs. Each PE device must strictly distinguish •...
Configuring IGMP snooping In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. Overview IGMP snooping runs on a Layer 2 switch as a multicast constraining mechanism to improve multicast forwarding efficiency.
Page 24
Figure 11 IGMP snooping related ports The following describes the ports involved in IGMP snooping: • Router port—Layer 3 multicast device-side port. Layer 3 multicast devices include DRs and IGMP queriers. In Figure 1 1, GigabitEthernet 1/0/1 of Switch A and GigabitEthernet 1/0/1 of Switch B are the router ports.
NOTE: In IGMP snooping, only dynamic ports age out. Static ports never age out. How IGMP snooping works The ports in this section are dynamic ports. For information about how to configure and remove static ports, see "Configuring static ports." IGMP messages types include general query, IGMP report, and leave message.
Leave message An IGMPv1 host does not send any leave messages when it leaves a multicast group. The Layer 2 device cannot immediately update the status of the port that connects to the receiver host. The Layer 2 device does not remove the port from the outgoing interface list in the associated forwarding entry until the aging time for the group expires.
Task at a glance • (Optional.) Specifying the IGMP snooping version • (Optional.) Setting the maximum number of IGMP snooping forwarding entries Configuring IGMP snooping port functions: • (Optional.) Setting aging timers for dynamic ports • (Optional.) Configuring static ports •...
Step Command Remarks Enable IGMP snooping globally and enter igmp-snooping By default, IGMP snooping is disabled. IGMP-snooping view. Enable IGMP snooping for By default, IGMP snooping is disabled for a enable vlan vlan-list specified VLANs. VLAN. To enable IGMP snooping for a VLAN in VLAN view: Step Command Remarks...
You can modify the maximum number of IGMP snooping forwarding entries. When the number of forwarding entries on the device reaches the upper limit, the device does not automatically remove any existing entries. To avoid the situation that new entries cannot be created, HP recommends that you manually remove some entries.
Setting the aging timers for dynamic ports globally Step Command Remarks Enter system view. system-view Enter IGMP-snooping view. igmp-snooping Set the aging timer for dynamic The default setting is 260 router-aging-time interval router ports globally. seconds. Set the global aging timer for The default setting is 260 host-aging-time interval dynamic member ports globally.
Step Command Remarks Configure the port as a static igmp-snooping static-router-port By default, a port is not a static router port. vlan vlan-id router port. Configuring a port as a simulated member host Generally, a host that runs IGMP can respond to IGMP queries. If a host fails to respond, the multicast router might consider that no member of this multicast group exists on the subnet, and removes the corresponding forwarding path.
You can enable IGMP snooping fast-leave processing either for the current port in interface view or • globally for all ports in IGMP-snooping view. If the configurations are made both in interface view and IGMP-snooping view, the configuration made in interface view takes priority. Enabling IGMP snooping fast-leave processing globally Step Command...
Configuring an IGMP snooping querier This section describes how to configure an IGMP snooping querier. Configuration prerequisites Before you configure an IGMP snooping querier, complete the following tasks: Enable IGMP snooping for the VLAN. • Determine the interval for sending IGMP general queries. •...
You can configure parameters for IGMP queries and responses for the current VLAN in VLAN view or globally for all VLANs in IGMP-snooping view. If the configurations are made in both VLAN view and IGMP-snooping view, the configuration made in VLAN view takes priority. Configuring the global parameters for IGMP queries and responses Step Command...
To avoid this problem, when a Layer 2 device acts as the IGMP snooping querier, you can configure a non-all-zero IP address as the source IP address of IGMP queries. You can also change the source IP address of IGMP messages sent by a simulated member host or an IGMP snooping proxy. Changing the source address of IGMP queries might affect the IGMP querier election within the subnet.
Setting the 802.1p precedence for IGMP messages in a VLAN Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Set the 802.1p precedence for igmp-snooping dot1p-priority The default setting is 0. IGMP messages in the VLAN. priority-number Configuring IGMP snooping policies Before you configure IGMP snooping policies, complete the following tasks: •...
Configuring multicast source port filtering This feature is supported on the following hardware: MSR routers installed with the Layer 2 switching module HMIM 24GSW, HMIM 24GSW-POE, HMIM 8GSW. When the multicast source port filtering feature is enabled on a port, the port blocks all multicast data packets, but it permits multicast protocol packets to pass.
If the function of dropping unknown multicast data is enabled, the Layer 2 device drops all received • unknown multicast data. To enable dropping unknown multicast data for a VLAN: Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id By default, the dropping unknown Enable...
Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface interface-type view. interface-number Set the maximum number of igmp-snooping group-limit limit The default setting is multicast groups on a port. [ vlan vlan-list ] 4294967295. Enabling the multicast group replacement function When the number of multicast groups on a Layer 2 device or a port exceeds the limit: If the multicast group replacement is enabled, the Layer 2 device or the port replaces an existing •...
(0.0.0.0, 224.1.1.1) Host slots (0 in total): Host ports (2 in total): GE2/1/3 (00:03:23) GE2/1/4 (00:04:10) The output shows the following information: Host A and Host B have joined the multicast group 224.1.1.1 through the member ports Ethernet 1/4 • and Ethernet 1/3 on Switch A, respectively.
Page 44
Figure 13 Network diagram Switch B Source Switch A GE2/1/2 GE2/1/1 1.1.1.2/24 10.1.1.1/24 GE2/1/1 Router A 1.1.1.1/24 IGMP querier Switch C Host C Host A Receiver Receiver Host B VLAN 100 Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 13.
Page 45
[SwitchA-vlan100] quit # Configure GigabitEthernet 2/1/3 as a static router port. [SwitchA] interface gigabitethernet 2/1/3 [SwitchA-GigabitEthernet2/1/3] igmp-snooping static-router-port vlan 100 [SwitchA-GigabitEthernet2/1/3] quit Configure Switch B: # Enable IGMP snooping globally. <SwitchB> system-view [SwitchB] igmp-snooping [SwitchB-igmp-snooping] quit # Create VLAN 100, assign GigabitEthernet 2/1/1 and GigabitEthernet 2/1/2 to the VLAN, and enable IGMP snooping for the VLAN.
Total 1 entries. VLAN 100: Total 1 entries. (0.0.0.0, 224.1.1.1) Host slots (0 in total): Host ports (2 in total): GE2/1/3 GE2/1/5 The output shows that GigabitEthernet 2/1/3 and GigabitEthernet 2/1/5 on Switch C have become static member ports of the multicast group 224.1.1.1. IGMP snooping querier configuration example Network requirements As shown in...
Page 47
<SwitchA> system-view [SwitchA] igmp-snooping [SwitchA-igmp-snooping] quit # Create VLAN 100, assign GigabitEthernet 2/1/1 through GigabitEthernet 2/1/3 to the VLAN, and enable IGMP snooping and dropping unknown multicast packets for the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 2/1/1 to gigabitethernet 2/1/3 [SwitchA-vlan100] igmp-snooping enable [SwitchA-vlan100] igmp-snooping drop-unknown # Configure Switch A as the IGMP snooping querier.
If IGMP snooping is enabled globally but not enabled for the VLAN, use the igmp-snooping enable command in VLAN view to enable IGMP snooping for the VLAN. If the problem persists, contact HP Support. Multicast group filter does not work Symptom Hosts can receive multicast data from multicast groups that are not permitted by the multicast group filter.
Page 49
Use the display igmp-snooping command to verify that the function of dropping unknown multicast data is enabled. If not, use the drop-unknown or igmp-snooping drop-unknown command to enable the function of dropping unknown multicast data. If the problem persists, contact HP Support.
Configuring multicast routing and forwarding In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. Overview The following tables are involved in multicast routing and forwarding: Multicast routing table of each multicast routing protocol, such as the PIM routing table.
Page 51
If the router uses the longest prefix match principle, the router selects the matching route as the RPF route. If the routes have the same mask, the router selects the route that has the highest priority as the RPF route. If the routes have the same priority, the router selects a route as the RPF route in the order of static multicast route, MBGP route, and unicast route.
Figure 15 RPF check process IP Routing Table on Router C Receiver Router B Destination/Mask Interface 192.168.0.0/24 GE1/0/2 GE1/0/1 Source Router A 192.168.0.1/24 Receiver GE1/0/1 GE1/0/2 Multicast packets Router C As shown in Figure 15, assume that unicast routes are available in the network, MBGP is not configured, and no static multicast routes have been configured on Router C.
Page 53
Figure 16 Changing an RPF route As shown in Figure 16, when no static multicast route is configured, Router C's RPF neighbor on the path back to the source is Router A. The multicast data from the source travels through Router A to Router C. You can configure a static multicast route on Router C and specify Router B as Router C's RPF neighbor on the path back to the source.
C and Router D and specify Router B and Router C as the RPF neighbors of Router C and Router D, respectively. In this way, the receiver hosts can receive the multicast data from the multicast source. NOTE: A static multicast route is effective only on the multicast router on which it is configured, and will not be advertised throughout the network or redistributed to other routers.
NOTE: The device can route and forward multicast data only through the primary IP addresses of interfaces, rather than their secondary addresses or unnumbered IP addresses. For more information about primary Layer 3—IP Services Configuration Guide and secondary IP addresses, and IP unnumbered, see Enabling IP multicast routing Enable IP multicast routing before you configure any Layer 3 multicast functionality on the public network or VPN instance.
TIP: You do not need to enable IP multicast routing before this configuration. To configure a multicast forwarding boundary: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Configure a multicast multicast boundary group-address By default, no forwarding forwarding boundary.
Task Command display multicast [ vpn-instance vpn-instance-name ] forwarding-table [ source-address [ mask { mask-length | mask } ] | group-address Display multicast forwarding table [ mask { mask-length | mask } ] | incoming-interface interface-type information (MSR4000). interface-number | outgoing-interface { exclude | include | match } interface-type interface-number | slot slot-number | statistics ] * Display information about the DF list display multicast [ vpn-instance vpn-instance-name ] forwarding-table...
Page 59
Configure the routers so that the receiver host can receive the multicast data from Source through the path: Router A to Router C to Router B. This path is different from the unicast route. Figure 19 Network diagram Router C GE2/1/2 GE2/1/1 40.1.1.1/24...
<RouterA> system-view [RouterA] multicast routing [RouterA-mrib] quit [RouterA] interface gigabitethernet 2/1/1 [RouterA-GigabitEthernet2/1/1] pim dm [RouterA-GigabitEthernet2/1/1] quit [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] pim dm [RouterA-GigabitEthernet2/1/2] quit [RouterA] interface gigabitethernet 2/1/3 [RouterA-GigabitEthernet2/1/3] pim dm [RouterA-GigabitEthernet2/1/3] quit # Enable IP multicast routing and PIM-DM on Router C in the same way Router A is configured. (Details not shown.) Display the RPF route to Source on Router B.
Page 61
Typically, the receiver host receives the multicast data from Source 1 in the OSPF domain. • Configure the routers so that the receiver host can receive multicast data from Source 2, which is outside the OSPF domain. Figure 20 Network diagram Configuration procedure Assign an IP address and subnet mask for each interface according to Figure...
[RouterA-GigabitEthernet2/1/1] quit [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] pim dm [RouterA-GigabitEthernet2/1/2] quit # Enable IP multicast routing and PIM-DM on Router B in the same way Router A is configured. (Details not shown.) Display information about their RPF routes to Source 2 on Router B and Router C. [RouterB] display multicast rpf-info 50.1.1.100 [RouterC] display multicast rpf-info 50.1.1.100 No output is displayed because no RPF routes to Source 2 exist on Router B and Router C.
Page 63
Figure 21 Network diagram Configuration procedure Assign an IP address and mask for each interface according to Figure 21. (Details not shown.) Enable OSPF on routers to make sure the following conditions are met: (Details not shown.) The routers are interoperable at the network layer. The routers can dynamically update their routing information.
Page 64
[RouterA-GigabitEthernet2/1/2] pim dm [RouterA-GigabitEthernet2/1/2] quit [RouterA] interface tunnel 0 [RouterA-Tunnel0] pim dm [RouterA-Tunnel0] quit # On Router C, enable multicast routing. [RouterC] multicast routing [RouterC-mrib] quit # Enable IGMP on GigabitEthernet 2/1/1 (the interface that connects to the receiver host). [RouterC] interface gigabitethernet 2/1/1 [RouterC-GigabitEthernet2/1/1] igmp enable [RouterC-GigabitEthernet2/1/1] quit...
Check the type of the interface that connects the static multicast route to the RPF neighbor. If the interface is not a point-to-point interface, make sure you specify the address for the RPF neighbor. If the problem persists, contact HP Support.
Configuring IGMP Overview Internet Group Management Protocol (IGMP) establishes and maintains the multicast group memberships between a Layer 3 multicast device and its directly connected hosts. IGMP has three versions: IGMPv1 (defined by RFC 1 1 12) • • IGMPv2 (defined by RFC 2236) IGMPv3 (defined by RFC 3376) •...
Page 67
Figure 22 IGMP queries and reports IP network Router A Router B Ethernet Host A Host B Host C (G2) (G1) (G1) Query Report As shown in Figure 22, Host B and Host C are interested in the multicast data addressed to the multicast group G1.
NOTE: The IGMP report suppression mechanism is not supported on MSR routers installed with the Layer 2 switching module SIC-4FSW, 4FSWP, SIC-9FSW, or 9FSWP. IGMPv2 enhancements Backwards-compatible with IGMPv1, IGMPv2 has introduced a querier election mechanism and a leave-group mechanism. Querier election mechanism In IGMPv1, the DR elected by the Layer 3 multicast routing protocol (such as PIM) serves as the querier among multiple routers that run IGMP on the same subnet.
Page 69
Enhancements in control capability of hosts IGMPv3 introduced two source filtering modes (Include and Exclude). These modes allow a host to join a designated multicast group and to choose whether to receive or reject multicast data from a designated multicast source. When a host joins a multicast group, one of the following occurs: •...
IS_IN—The source filtering mode is Include. The report sender requests the multicast data from only the sources defined in the specified multicast source list. IS_EX—The source filtering mode is Exclude. The report sender requests the multicast data from any sources except those defined in the specified multicast source list. TO_IN—The filtering mode has changed from Exclude to Include.
When the IGMP SSM mapping feature is configured, Router A checks the multicast group address G in the received IGMPv1 or IGMPv2 report, and does the following: If G is not in the SSM group range, Router A provides the ASM service. •...
An IGMP proxy device maintains a group membership database, which stores the group memberships on all the downstream interfaces. Each entry comprises the multicast address, filter mode, and source list. Such an entry is a collection of members in the same multicast group on each downstream interface. An IGMP proxy device performs host functions on the upstream interface based on the database.
Determine the multicast group and multicast source addresses for static group member • configuration. Determine the ACL for multicast group filtering. • Enabling IGMP To configure IGMP, enable IGMP on the interface where the multicast group memberships are established and maintained. To enable IGMP: Step Command...
any IGMP report or IGMP leave message. This is because the interface is not a real member of the multicast group or the multicast source and group. Configuration procedure To configure an interface as a static member interface: Step Command Remarks Enter system view.
If multiple multicast routers exist on the same subnet, only the IGMP querier sends IGMP queries. When a non-querier receives an IGMP query, it starts an IGMP other querier present timer. If it receives a new IGMP query before the timer expires, the non-querier resets the timer. Otherwise, it considers that the querier has failed and starts a new querier election.
Configuring IGMP SSM mappings On an SSM network, some receiver hosts run only IGMPv1 or IGMPv2. To provide the SSM service to these receiver hosts, you can configure the IGMP mapping feature on the IGMP-enabled routers. The IGMP SSM mapping feature does not process IGMPv3 messages. To provide SSM services for all hosts that run different IGMP versions on a subnet, you must enable IGMPv3 on the interface that forwards multicast traffic onto the subnet.
Configuration procedure To enable IGMP proxying: Step Command Remarks Enter system view. system-view Enable IP multicast routing multicast routing [ vpn-instance By default, IP multicast routing is and enter MRIB view. vpn-instance-name ] disabled. Return to system view. quit Enter interface view. interface interface-type interface-number Enable the IGMP proxying By default, IGMP proxying is...
Step Command Remarks igmp [ vpn-instance Enter IGMP view. vpn-instance-name ] Enable the load splitting By default, the load splitting proxy multipath function on the IGMP proxy. function is disabled. Displaying and maintaining IGMP CAUTION: The reset igmp group command might cause multicast data transmission failures. Execute display commands in any view and reset commands in user view.
Page 79
IGMPv2 runs between Router A and N1, and between the other two routers and N2. Router A acts • as the IGMP querier in N1. Router B acts as the IGMP querier in N2 because it has a lower IP address.
Page 80
[RouterA-GigabitEthernet2/1/2] quit # On Router B, enable IP multicast routing. <RouterB> system-view [RouterB] multicast routing [RouterB-mrib] quit # Enable IGMP on GigabitEthernet 2/1/1. [RouterB] interface gigabitethernet 2/1/1 [RouterB-GigabitEthernet2/1/1] igmp enable [RouterB-GigabitEthernet2/1/1] quit # Enable PIM-DM on GigabitEthernet 2/1/2. [RouterB] interface gigabitethernet 2/1/2 [RouterB-GigabitEthernet2/1/2] pim dm [RouterB-GigabitEthernet2/1/2] quit # On Router C, enable IP multicast routing.
IGMP SSM mapping configuration example Network requirements As shown in Figure The PIM-SM domain uses both the ASM model and SSM model for multicast delivery. • GigabitEthernet 2/1/3 on Router D serves as the C-BSR and C-RP. The SSM group range is 232.1.1.0/24.
Page 82
Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 27. (Details not shown.) Configure OSPF on the routers in the PIM-SM domain to make sure the following conditions are met: (Details not shown.) The routers are interoperable at the network layer. The routers can dynamically update their routing information.
Page 83
[RouterD] acl number 2000 [RouterD-acl-basic-2000] rule permit source 232.1.1.0 0.0.0.255 [RouterD-acl-basic-2000] quit [RouterD] pim [RouterD-pim] ssm-policy 2000 [RouterD-pim] quit # Configure the SSM group range on Router A, Router B, and Router C in the same way Router D is configured. (Details not shown.) Configure IGMP SSM mappings on Router D.
UpTime: 00:13:25 Upstream interface: GigabitEthernet2/1/2 Upstream neighbor: 192.168.3.1 RPF prime neighbor: 192.168.3.1 Downstream interface(s) information: Total number of downstreams: 1 1: GigabitEthernet2/1/1 Protocol: igmp, UpTime: 00:13:25, Expires: - IGMP proxying configuration example Network requirements As shown in Figure 28, PIM-DM runs on the core network. Host A and Host C in the stub network receive VOD information sent to multicast group 224.1.1.1.
Use the display current-configuration interface command to verify that no ACL rule has been configured to filter out the reports sent by the host to the multicast group G. If the problem persists, contact HP Support. Inconsistent membership information on the routers on the same...
Configuring PIM Overview Protocol Independent Multicast (PIM) provides IP multicast forwarding by leveraging unicast static routes or unicast routing tables generated by any unicast routing protocol, such as RIP, OSPF, IS-IS, or BGP. PIM uses the underlying unicast routing to generate a multicast routing table without relying on any particular unicast routing protocol.
Page 88
messages, all PIM routers on the subnet discover their PIM neighbors, maintain PIM neighboring relationship with other routers, and build and maintain SPTs. SPT building The process of building an SPT is the flood-and-prune process: In a PIM-DM domain, when the multicast source S sends multicast data to the multicast group G, the multicast data is flooded throughout the domain.
The node that needs to receive the multicast data sends a graft message to its upstream node, telling it to rejoin the SPT. After receiving this graft message, the upstream node adds the receiving interface to the outgoing interface list of the (S, G) entry. It also sends a graft-ack message to the graft sender. If the graft sender receives a graft-ack message, the graft process finishes.
Page 90
The basic implementation of PIM-SM is as follows: • PIM-SM assumes that no hosts need multicast data. In the PIM-SM mode, a host must express its interest in the multicast data for a multicast group before the data is forwarded to it. PIM-SM implements multicast forwarding by building and maintaining rendezvous point trees (RPTs).
Page 91
Figure 31 DR election As shown in Figure 31, the DR election process is as follows: The routers on the shared-media LAN send hello messages to one another. The hello messages contain the priority for DR election. The router with the highest DR priority is elected as the DR. The router with the highest IP address wins the DR election under either of following conditions: All the routers have the same DR election priority.
Page 92
Figure 32 Information exchange between C-RPs and BSR Based on the information in the RP-set, all routers in the network can select an RP for a specific multicast group based on the following rules: The C-RP that is designated to the smallest group range wins. If the C-RPs are designated to the same group ranges, the C-RP with the highest priority wins.
Page 93
Anycast RP address—IP address of the Anycast RP set for communication within the PIM-SM domain. It is also known as RPA. As shown in Figure 33, RP 1, RP 2, and RP 3 are members of an Anycast RP set. Figure 33 Anycast RP through PIM-SM The following describes how Anycast RP through PIM-SM is implemented: RP 1 receives a register message destined to the Anycast RP address (RPA).
Page 94
RPT building Figure 34 RPT building in a PIM-SM domain Host A Source Receiver Host B Server Receiver Join message Multicast packets Host C As shown in Figure 34, the process of building an RPT is as follows: When a receiver wants to join the multicast group G, it uses an IGMP message to inform the receiver-side DR.
Page 95
Figure 35 Multicast source registration As shown in Figure 35, the multicast source registers with the RP as follows: The multicast source S sends the first multicast packet to the multicast group G. When receiving the multicast packet, the source-side DR encapsulates the packet into a PIM register message and unicasts the message to the RP.
The subsequent multicast data is forwarded to the RP along the SPT without being encapsulated into register messages. For more information about the switchover to SPT initiated by the RP, see "Multicast source registration." The receiver-side DR initiates a switchover to SPT: •...
Page 97
DF election On a subnet with multiple multicast routers, duplicate multicast packets might be forwarded to the RP. To address this issue, BIDIR-PIM uses a designated forwarder (DF) election mechanism to elect a unique DF for each RP on each subnet in the BIDIR-PIM domain. Only the DF can forward multicast data to the RP. DF election is not necessary for an RPL.
Page 98
Figure 37 RPT building at the receiver side As shown in Figure 37, the process for building a receiver-side RPT is the same as the process for building an RPT in PIM-SM: When a receiver wants to join the multicast group G, it uses an IGMP message to inform the directly connected router.
Figure 38 RPT building at the multicast source side As shown in Figure 38, the process for building a source-side RPT is relatively simple: When a multicast source sends multicast packets to the multicast group G, the DF in each subnet unconditionally forwards the packets to the RP.
Page 100
Admin-scoped zones are divided for multicast groups. Zone border routers (ZBRs) form the boundary of an admin-scoped zone. Each admin-scoped zone maintains one BSR for multicast groups within a specific range. Multicast protocol packets, such as assert messages and BSMs, for a specific group range cannot cross the boundary of the admin-scoped zone for the group range.
Figure 40 Relationship in view of multicast group address ranges Admin-scope 1 Admin-scope 3 G1 address G3 address Admin-scope 2 Global-scope G2 address − − G2 address As shown in Figure 40, the admin-scoped zones 1 and 2 have no intersection, but the admin-scoped zone 3 is a subset of the admin-scoped zone 1.
Figure 41 SPT building in PIM-SSM Host A Source Receiver Host B Server Receiver Subscribe message Multicast packets Host C As shown in Figure 41, Host B and Host C are receivers. They send IGMPv3 report messages to their DRs to express their interest in the multicast information that the multicast source S sends to the multicast group G.
Figure 42 Relationship among PIM protocols A receiver joins multicast group G. G is in the A multicast source is SSM group range? specified? BIDIR-PIM is enabled? An IGMP-SSM mapping is configured for G? PIM-SM runs for G. G has a BIDIR-PIM RP? PIM-SSM runs for G.
Enable IP multicast routing before you configure PIM. With PIM-DM enabled on interfaces, routers can establish PIM neighbor relationship and process PIM messages from their PIM neighbors. When you deploy a PIM-DM domain, HP recommends that you enable PIM-DM on all non-border interfaces of the routers.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, the state refresh Enable the state refresh feature. pim state-refresh-capable feature is enabled. Configuring state refresh parameters The router directly connected with the multicast source periodically sends state refresh messages. You can configure the interval for sending such messages on that router.
Enable IP multicast routing before you configure PIM. With PIM-SM enabled on interfaces, routers can establish PIM neighbor relationship and process PIM messages from their PIM neighbors. When you deploy a PIM-SM domain, HP recommends that you enable PIM-SM on all non-border interfaces.
When you configure a C-RP, reserve a relatively large bandwidth between the C-RP and other devices in the PIM-SM domain. In a PIM-SM domain, if you want a router to become the RP, you can configure the router as a C-RP. HP recommends that you configure C-RPs on backbone routers.
Page 108
You must add all RP member addresses (including the local RP member address) to the Anycast RP • set on each RP member device. HP recommends that you configure no more than 16 Anycast RP members for an Anycast RP set. • •...
Step Command Remarks By default, Anycast RP is not configured. You can repeat this anycast-rp anycast-rp-address Configure Anycast RP. command to add multiple RP member-rp-address member addresses to the Anycast RP set. Configuring a BSR You must configure a BSR if C-RPs are configured to dynamically select the RP. In a network with a static RP, this configuration task is unnecessary.
Page 110
These preventive measures can partially protect the BSR in a network. However, if an attacker controls a legal BSR, the problem still exists. When you configure a C-BSR, reserve a relatively large bandwidth between the C-BSR and the other devices in the PIM-SM domain. When C-BSRs connect to other PIM routers through tunnels, static multicast routes must be configured to make sure the next hop to a C-BSR is a tunnel interface.
If the RP-set information is carried in multiple BSMFs, the router updates the RP-set information for the • group range after receiving all these BSMFs. The loss of some IP fragments does not result in dropping of the entire BSM. The BSM semantic fragmentation function is enabled by default.
The register-stop timer is set to a random value chosen uniformly from (0.5 × register_suppression_time minus register_probe_time) to (1.5 × register_suppression_time minus register_probe_time). The register_probe_time is fixed to 5 seconds. On all C-RP routers, configure a filtering rule for register messages and configure the device to calculate the checksum based on the entire register messages.
Enabling BIDIR-PIM Because BIDIR-PIM is implemented on the basis of PIM-SM, you must enable PIM-SM before you enable BIDIR-PIM. When you deploy a BIDIR-PIM domain, HP recommends that you enable PIM-SM on all non-border interfaces of the domain. IMPORTANT: All interfaces on a device must be enabled with the same PIM mode.
Step Command Remarks Enable PIM-SM. pim sm By default, PIM-SM is disabled. Return to system view. quit pim [ vpn-instance Enter PIM view. vpn-instance-name ] Enable BIDIR-PIM. bidir-pim enable By default, BIDIR-PIM is disabled. Configuring an RP CAUTION: When both PIM-SM and BIDIR-PIM run on the PIM network, do not use the same RP to provide services for PIM-SM and BIDIR-PIM.
RPs for different multicast group ranges based on the RP-set information. HP recommends that you configure C-RPs on backbone routers. To enable the BSR to distribute the RP-set information in the BIDIR-PIM domain, the C-RPs must periodically send advertisement messages to the BSR. The BSR learns the C-RP information, encapsulates the C-RP information and its own IP address in a BSM, and floods the BSM to all PIM routers in the domain.
Page 116
For C-BSRs interconnected through a GRE tunnel, configure static multicast routes to make sure the next hop to a C-BSR is a tunnel interface. For more information about static multicast routes, see "Configuring multicast routing and forwarding." C-BSRs should be configured on routers on the backbone network. The BSR election process is summarized as follows: Initially, each C-BSR regards itself as the BSR of the BIDIR-PIM domain and sends BSMs to other routers in the domain.
Page 117
Step Command Remarks (Optional.) Configure a legal BSR By default, no restrictions are bsr-policy acl-number address range. defined. Configuring a PIM domain border As the administrative core of a BIDIR-PIM domain, the BSR sends the collected RP-set information in the BSMs to all routers in the BIDIR-PIM domain.
NOTE: Generally, a BSR performs BSM semantic fragmentation according to the MTU of its BSR interface. For BSMs originated due to learning of a new PIM neighbor, semantic fragmentation is performed according to the MTU of the interface that sends the BSMs. Configuring PIM-SSM PIM-SSM requires IGMPv3 support.
Configuring the SSM group range When a PIM-SM enabled interface receives a multicast packet, it checks whether the multicast group address of the packet is in the SSM group range. If the multicast group address is in this range, the PIM mode for this packet is PIM-SSM.
Configuring a multicast data filter To control multicast traffic and the information available to downstream receivers, you can configure a PIM router as a multicast data filter. Then, the router will check IP packets that pass by and forward or discard the packets based on the filtering policy.
Page 121
Holdtime—PIM neighbor lifetime. If a router does not receive a hello message from a neighbor • when the neighbor lifetime expires, it regards the neighbor failed or unreachable. LAN_Prune_Delay—Delay of forwarding prune messages on a shared-media LAN. This option • consists of LAN delay (namely, prune message delay), override interval, and neighbor tracking support (namely, the capability to disable join message suppression).
The configurations made in interface view are effective on only the current interface. If you configure common PIM timers in both PIM view and interface view, the configuration in interface view always takes precedence. TIP: For a network without special requirements, HP recommends using the defaults.
Configuring common PIM timers globally Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] Set the interval for sending timer hello interval The default setting is 30 seconds. hello messages. The default setting is 60 seconds. Set the interval for sending NOTE: timer join-prune interval...
Step Command Remarks Set the maximum size of each jp-pkt-size size The default setting is 8100 bytes. join or prune message. Enabling BFD for PIM PIM uses hello messages to elect a DR for a shared-media network. The elected DR is the only multicast forwarder on the shared-media network.
Task Command Display information about the display interface [ register-tunnel [ interface-number ] ] [ brief register-tunnel interface. [ description | down ] ] Display BSR information in the display pim [ vpn-instance vpn-instance-name ] bsr-info PIM-SM domain. Display information about the display pim [ vpn-instance vpn-instance-name ] claimed-route routes used by PIM.
Page 126
Figure 43 Network diagram Receiver Host A Router A GE2/1/1 Host B Receiver GE2/1/1 GE2/1/3 GE2/1/2 GE2/1/1 Source Host C Router D Router B 10.110.5.100/24 GE2/1/1 PIM-DM Router C Host D Table 7 Interface and IP address assignment Device Interface IP address Device Interface...
Page 127
[RouterA-mrib] quit # Enable IGMP on GigabitEthernet 2/1/1 (the interface that connects to the stub network). [RouterA] interface gigabitethernet 2/1/1 [RouterA-GigabitEthernet2/1/1] igmp enable [RouterA-GigabitEthernet2/1/1] quit # Enable PIM-DM on GigabitEthernet 2/1/2. [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] pim dm [RouterA-GigabitEthernet2/1/2] quit # Enable IP multicast routing, IGMP, and PIM-DM on Router B and Router C in the same way Router A is configured.
Page 128
# Display the PIM routing table information on Router A. [RouterA] display pim routing-table Total 1 (*, G) entry; 1 (S, G) entry (*, 225.1.1.1) Protocol: pim-dm, Flag: WC UpTime: 00:04:25 Upstream interface: NULL Upstream neighbor: NULL RPF prime neighbor: NULL Downstream interface(s) information: Total number of downstreams: 1 1: GigabitEthernet2/1/1...
PIM-SM non-scoped zone configuration example Network requirements As shown in Figure VOD streams are sent to receiver hosts in multicast. The receivers of different subnets form stub • networks, and at least one receiver host exist in each stub network. •...
Page 130
Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet Router B 192.168.2.1/24 Router E 192.168.2.2/24 2/1/2 2/1/2 GigabitEthernet GigabitEthernet Router C 10.110.2.2/24 Router E 192.168.9.2/24 2/1/1 2/1/3 Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 44.
Page 131
[RouterE-pim] quit # On Router A, configure GigabitEthernet 2/1/2 of Router D as the static RP. [RouterA] pim [RouterA-pim] static-rp 192.168.1.2 [RouterA-pim] quit # Configure the static RP on Router B, Router C, and Router D in the same way Router A is configured.
PIM-SM admin-scoped zone configuration example Network requirements As shown in Figure VOD streams are sent to receiver hosts in multicast. The entire PIM-SM domain is divided into • admin-scoped zone 1, admin-scoped zone 2, and the global-scoped zone. Router B, Router C, and Router D are ZBRs of the three zones, respectively.
Page 133
Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet Router A 10.110.1.1/24 Router D 10.110.7.1/24 2/1/2 2/1/2 GigabitEthernet GigabitEthernet Router B 192.168.2.1/24 Router D 10.110.8.1/24 2/1/1 2/1/3 GigabitEthernet GigabitEthernet Router B 10.110.1.2/24 Router E 192.168.4.1/24 2/1/2 2/1/1 GigabitEthernet GigabitEthernet Router B 10.110.2.1/24 Router E...
Page 134
[RouterA-GigabitEthernet2/1/1] igmp enable [RouterA-GigabitEthernet2/1/1] quit # Enable PIM-SM on GigabitEthernet 2/1/2. [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] pim sm [RouterA-GigabitEthernet2/1/2] quit # Enable IP multicast routing, IGMP and PIM-SM on Router E and Router I in the same way Router A is configured. (Details not shown.) # On Router B, enable IP multicast routing, and enable PIM-SM on each interface.
Page 135
[RouterD-GigabitEthernet2/1/3] multicast boundary 239.0.0.0 8 [RouterD-GigabitEthernet2/1/3] quit Configure C-BSRs and C-RPs: # On Router B, configure the service scope of RP advertisements. [RouterB] acl number 2001 [RouterB-acl-basic-2001] rule permit source 239.0.0.0 0.255.255.255 [RouterB-acl-basic-2001] quit # Configure GigabitEthernet 2/1/2 as a C-BSR and a C-RP for admin-scoped zone 1. [RouterB] pim [RouterB-pim] c-bsr 10.110.1.2 scope 239.0.0.0 8 [RouterB-pim] c-rp 10.110.1.2 group-policy 2001...
Page 136
Candidate BSR address: 10.110.1.2 Priority: 64 Hash mask length: 30 # Display BSR information on Router D. [RouterD] display pim bsr-info Scope: non-scoped State: Accept Preferred Bootstrap timer: 00:01:44 Elected BSR address: 10.110.9.1 Priority: 64 Hash mask length: 30 Uptime: 00:01:45 Scope: 239.0.0.0/8 State: Elected Bootstrap timer: 00:01:12...
[RouterD] display pim rp-info BSR RP information: Scope: non-scoped Group/MaskLen: 224.0.0.0/4 RP address Priority HoldTime Uptime Expires 10.110.9.1 00:03:42 00:01:48 Scope: 239.0.0.0/8 Group/MaskLen: 239.0.0.0/8 RP address Priority HoldTime Uptime Expires 10.110.5.2 (local) 00:06:54 00:02:41 # Display RP information on Router F. [RouterF] display pim rp-info BSR RP information: Scope: non-scoped...
Page 138
Table 10 Interface and IP address assignment Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet Router A 192.168.1.1/24 Router D 192.168.3.1/24 2/1/1 2/1/1 GigabitEthernet GigabitEthernet Router A 10.110.1.1/24 Router D 192.168.4.1/24 2/1/2 2/1/2 GigabitEthernet GigabitEthernet Router B 192.168.2.1/24 Router D 10.110.3.2/24 2/1/1...
Page 139
# Enable IGMP on GigabitEthernet 2/1/1 (the interface that connects to the receiver host). [RouterB] interface gigabitethernet 2/1/1 [RouterB-GigabitEthernet2/1/1] igmp enable [RouterB-GigabitEthernet2/1/1] quit # Enable PIM-SM on the other interfaces. [RouterB] interface gigabitethernet 2/1/2 [RouterB-GigabitEthernet2/1/2] pim sm [RouterB-GigabitEthernet2/1/2] quit [RouterB] interface gigabitethernet 2/1/3 [RouterB-GigabitEthernet2/1/3] pim sm [RouterB-GigabitEthernet2/1/3] quit # Enable BIDIR-PIM.
Page 140
[RouterD] pim [RouterD-pim] bidir-pim enable [RouterD-pim] quit On Router C, configure GigabitEthernet 2/1/1 as the C-BSR, and Loopback 0 as the C-RP for the entire BIDIR-PIM domain. [RouterC-pim] c-bsr 10.110.2.2 [RouterC-pim] c-rp 1.1.1.1 bidir [RouterC-pim] quit Verifying the configuration Display the DF information of BIDIR-PIM: # Display the DF information of BIDIR-PIM on Router A.
List of 1 DF interfaces: 1: GigabitEthernet2/1/1 # Display information about the DF for multicast forwarding on Router B. [RouterB] display multicast forwarding df-info Total 1 RP, 1 matched 00001. RP address: 1.1.1.1 Flags: 0x0 Uptime: 00:06:24 RPF interface: GigabitEthernet2/1/3 List of 2 DF interfaces: 1: GigabitEthernet2/1/1 2: GigabitEthernet2/1/2...
Page 142
Figure 47 Network diagram Receiver Host A Router A GE2/1/1 GE2/1/3 Host B GE2/1/3 Receiver GE2/1/1 GE2/1/4 GE2/1/2 GE2/1/1 GE2/1/3 GE2/1/2 Source GE2/1/1 Router D Router E Router B Host C 10.110.5.100/24 GE2/1/2 GE2/1/1 PIM-SSM Host D Router C Table 11 Interface and IP address assignment Device Interface IP address...
Page 143
The routers can dynamically update their routing information. Enable IP multicast routing, IGMP and PIM-SM: # On Router A, enable IP multicast routing. <RouterA> system-view [RouterA] multicast routing [RouterA-mrib] quit # Enable IGMPv3 on GigabitEthernet 2/1/1 (the interface that connects to the stub network). [RouterA] interface gigabitethernet 2/1/1 [RouterA-GigabitEthernet2/1/1] igmp enable [RouterA-GigabitEthernet2/1/1] igmp version 3...
Use display current-configuration to verify that the same PIM mode is enabled on all routers. For PIM-SM, verify that the BSR and C-RPs are correctly configured. If the problem persists, contact HP Support. Multicast data is abnormally terminated on an intermediate...
Use display current-configuration to verify the multicast data filter. Change the ACL rule defined in the source-policy command so that the source/group address of the multicast data can pass ACL filtering. If the problem persists, contact HP Support. An RP cannot join an SPT in PIM-SM Symptom An RPT cannot be correctly built, or an RP cannot join the SPT toward the multicast source.
Page 147
Use display pim bsr-info to verify that the BSR information exists on each router, and then use display pim rp-info to verify that the RP information is correct on each router. Use display pim neighbor to verify that PIM neighboring relationship has been correctly established among the routers. If the problem persists, contact HP Support.
Configuring MSDP Overview MSDP is an inter-domain multicast solution that addresses the interconnection of PIM-SM domains. It discovers multicast source information in other PIM-SM domains. In the basic PIM-SM mode, a multicast source registers only with the RP in the local PIM-SM domain, and the multicast source information in each domain is isolated.
Page 149
As shown in Figure 48, an MSDP peer can be created on any PIM-SM router. MSDP peers created on PIM-SM routers that assume different roles function differently. MSDP peers created on RPs: • Source-side MSDP peer—MSDP peer nearest to the multicast source, such as RP 1. The source-side RP creates and sends SA messages to its remote MSDP peer to notify the MSDP peer of the locally registered multicast source information.
Page 150
Figure 49 Inter-domain multicast delivery through MSDP The process of implementing PIM-SM inter-domain multicast delivery by leveraging MSDP peers is as follows: When the multicast source in PIM-SM 1 sends the first multicast packet to multicast group G, DR 1 encapsulates the multicast data within a register message.
Page 151
The subsequent multicast data flows to RP 2 along the SPT, and from RP 2 to the receiver-side DR along the RPT. After receiving the multicast data, the receiver-side DR determines whether to initiate an RPT-to-SPT switchover process based on its configuration. If no receivers exist in the domain, RP 2 neither creates an (S, G) entry nor sends a join message toward the multicast source.
Page 152
Figure 50 Anycast RP through MSDP The following describes how Anycast RP through MSDP is implemented: After receiving the multicast data from Source, the source-side DR registers with the nearest RP (RP 1 in this example). After receiving the IGMP report message from the receiver, the receiver-side DR sends a join message toward the nearest RP (RP 2 in this example).
Figure 51 MSDP peer-RPF forwarding The process of peer-RPF forwarding is as follows: RP 1 creates an SA message and forwards it to its peer RP 2. RP 2 determines that RP 1 is the RP that creates the SA message because the RP address in the SA message is the same as that of RP 1.
MSDP peer). To create an MSDP peering connection, you must perform the creation operation on both devices that are a pair of MSDP peers. If an MSDP peer and a BGP peer share the same interface at the same time, HP recommends that you configure the same IP address for them.
To describe an MSDP peer: Step Command Remarks Enter system view. system-view msdp [ vpn-instance Enter MSDP view. vpn-instance-name ] Configure the description for By default, no description is peer peer-address description text an MSDP peer. configured for an MSDP peer. Configuring an MSDP mesh group An AS might contain multiple MSDP peers.
A TCP connection is required when one of the following conditions exists: • A new MSDP peer is created. A previously deactivated MSDP peering connection is reactivated. • A previously failed MSDP peer attempts to resume operation. • You can adjust the interval between MSDP peering connection attempts. To enhance MSDP security, configure a key for MD5 authentication used by both MSDP peers to establish a TCP connection.
Configuring SA message contents Some multicast sources send multicast data at an interval longer than the aging time of (S, G) entries. In this case, the source-side DR must encapsulate multicast data packet-by-packet in register messages and send them to the source-side RP. The source-side RP transmits the (S, G) information to the remote RP through SA messages.
Step Command Remarks Enter MSDP view. msdp [ vpn-instance vpn-instance-name ] By default, after receiving a new join message, a device does not Enable the device to send send an SA request message to peer peer-address request-sa-enable SA request messages. any MSDP peer.
Step Command Remarks Configure lower threshold for multicast data peer peer-address minimum-ttl The default setting is 0. packets encapsulated in SA ttl-value messages. Configuring the SA message cache To reduce the time spent in obtaining the multicast information, enable the SA message cache mechanism to locally cache (S, G) entries contained in SA messages on the router.
Task Command Display brief information about display msdp [ vpn-instance vpn-instance-name ] brief [ state { connect | MSDP peers. disabled | established | listen | shutdown } ] Display detailed information about display msdp [ vpn-instance vpn-instance-name ] peer-status the MSDP peer status.
Page 162
Figure 52 Network diagram Table 12 Interface and IP address assignment Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet Router A 10.110.1.2/24 Router D 10.110.4.2/24 2/1/1 2/1/1 GigabitEthernet GigabitEthernet Router A 10.110.2.1/24 Router D 10.110.5.1/24 2/1/2 2/1/2 GigabitEthernet GigabitEthernet Router A 10.110.3.1/24...
Page 163
Configure OSPF on the routers. (Details not shown.) Enable IP multicast routing, enable PIM-SM and IGMP, and configure a PIM-SM domain border: # On Router A, enable IP multicast routing. <RouterA> system-view [RouterA] multicast routing [RouterA-mrib] quit # Enable PIM-SM on GigabitEthernet 2/1/1 and GigabitEthernet 2/1/2. [RouterA] interface gigabitethernet 2/1/1 [RouterA-GigabitEthernet2/1/1] pim sm [RouterA-GigabitEthernet2/1/1] quit...
Page 164
[RouterC-bgp] peer 192.168.1.1 as-number 100 [RouterC-bgp] address-family ipv4 [RouterC-bgp-ipv4] import-route ospf 1 [RouterB-bgp-ipv4] peer 192.168.1.1 enable [RouterC-bgp-ipv4] quit [RouterC-bgp] quit # Redistribute BGP routing information into OSPF on Router B. [RouterB] ospf 1 [RouterB-ospf-1] import-route bgp [RouterB-ospf-1] quit # Redistribute BGP routing information into OSPF on Router C. [RouterC] ospf 1 [RouterC-ospf-1] import-route bgp [RouterC-ospf-1] quit...
Page 165
Peer MsgRcvd MsgSent OutQ PrefRcv Up/Down State 192.168.1.1 1 00:12:04 Established # Display the BGP IPv4 unicast routing table on Router C. [RouterC] display bgp routing-table ipv4 Total number of routes: 5 BGP local router ID is 2.2.2.2 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Network...
# Display detailed MSDP peer information on Router B. [RouterB] display msdp peer-status MSDP Peer 192.168.1.2; AS 200 Description: Information about connection status: State: Established Up/down time: 00:15:47 Resets: 0 Connection interface: GigabitEthernet2/1/2 (192.168.1.1) Received/sent messages: 16/16 Discarded input messages: 0 Discarded output messages: 0 Elapsed time since last connection or counters clear: 00:17:40 Mesh group peer joined: momo...
Page 167
Configure Loopback 0 as the C-BSR and C-RP of the related PIM-SM domain on Router A, Router D • and Router G. According to the peer-RPF forwarding rule, the routers accept SA messages that pass the filtering • policy from its static RPF peers. To share multicast source information among PIM-SM domains without changing the unicast topology structure, configure MSDP peering relationships for the RPs of the PIM-SM domains and configure the static RPF peering relationships.
Page 168
Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet Router C 10.110.2.2/24 Router G 192.168.4.1/24 2/1/1 2/1/2 GigabitEthernet Router C 192.168.2.1/24 Router G Loopback 0 3.3.3.3/32 2/1/2 GigabitEthernet Router C 10.110.4.1/24 2/1/3 Configuration procedure Assign an IP address and subnet mask to each interface according to Table 13.
Page 169
# Configure C-BSRs and C-RPs on Router D and Router G in the same way. (Details not shown.) Configure BGP, and redistribute BGP routing information into OSPF and OSPF routing information into BGP: # On Router B, configure an eBGP peer, and redistribute OSPF routing information. [RouterB] bgp 100 [RouterB-bgp] router-id 1.1.1.2 [RouterB-bgp] peer 10.110.3.2 as-number 200...
Page 170
# On Router C, redistribute BGP routing information into OSPF [RouterC] ospf 1 [RouterC-ospf-1] import-route bgp [RouterC-ospf-1] quit # On Router F, redistribute BGP routing information into OSPF. [RouterF] ospf 1 [RouterF-ospf-1] import-route bgp [RouterF-ospf-1] quit Configure MSDP peers and static RPF peers: # On Router A, configure Router D and Router G as the MSDP peers and static RPF peers.
Peer address State Up/Down time SA count Reset count 10.110.1.1 Established 01:07:09 # Display brief information about MSDP peers on Router G. [RouterG] display msdp brief Configured Established Listen Connect Shutdown Disabled Peer address State Up/Down time SA count Reset count 10.110.2.1 Established 00:16:40 # Verify that receivers in PIM-SM 1 and PIM-SM 3 can receive the multicast data from Source 1 and...
Page 172
Table 14 Interface and IP address assignment Device Interface IP address Device Interface IP address GigabitEthernet Source 1 — 10.110.5.100/24 Router C 192.168.1.2/24 2/1/1 GigabitEthernet Source 2 — 10.110.6.100/24 Router C 192.168.2.2/24 2/1/2 GigabitEthernet GigabitEthernet Router A 10.110.5.1/24 Router D 10.110.3.1/24 2/1/1 2/1/1...
Page 173
[RouterB-GigabitEthernet2/1/3] quit [RouterB] interface loopback 0 [RouterB-LoopBack0] pim sm [RouterB-LoopBack0] quit [RouterB] interface loopback 10 [RouterB-LoopBack10] pim sm [RouterB-LoopBack10] quit [RouterB] interface loopback 20 [RouterB-LoopBack20] pim sm [RouterB-LoopBack20] quit # Enable IP multicast routing, IGMP, and PIM-SM on Router A, Router C, Router D, and Router E in the same way Router B is configured.
Page 174
# Send an IGMP report from Host A to join the multicast group 225.1.1.1. (Details not shown.) # Send multicast data from Source 1 10.1 10.5.100/24 to the multicast group 225.1.1.1. (Details not shown.) # Display the PIM routing table on Router D. [RouterD] display pim routing-table No information is output on Router D.
Page 176
Figure 55 Network diagram PIM-SM 1 PIM-SM 2 PIM-SM 3 Loop0 Source 2 GE2/1/1 Loop0 Receiver Router A GE2/1/2 Host A GE2/1/1 Router C GE2/1/3 GE2/1/2 Router D GE2/1/1 GE2/1/2 Source 1 GE2/1/2 GE2/1/1 Router B Receiver Receiver Host B Host C MSDP peers Table 15 Interface and IP address assignment...
Page 177
The routers can dynamically update routing information. Enable IP multicast routing, IGMP, and PIM-SM, and configure a PIM domain border: # On Router A, enable IP multicast routing. <RouterA> system-view [RouterA] multicast routing [RouterA-mrib] quit # Enable IGMP on GigabitEthernet 2/1/1 (the interface that connects to the receiver host). [RouterA] interface gigabitethernet 2/1/1 [RouterA-GigabitEthernet2/1/1] igmp enable [RouterA-GigabitEthernet2/1/1] quit...
Page 178
[RouterA-msdp] quit # Configure MSDP peers on Router C. [RouterC] msdp [RouterC-msdp] peer 192.168.1.1 connect-interface gigabitethernet 2/1/3 [RouterC-msdp] peer 10.110.5.2 connect-interface gigabitethernet 2/1/2 [RouterC-msdp] quit # Configure an MSDP peer on Router D. [RouterD] msdp [RouterD-msdp] peer 10.110.5.1 connect-interface gigabitethernet 2/1/3 [RouterD-msdp] quit Configure SA message filtering rules: # Configure an SA message filter on Router C so that Router C will not forward SA messages for...
Use the display current-configuration command to verify that the local interface address and the MSDP peer address of the remote router are the same. If the problem persists, contact HP Support. No SA entries exist in the router's SA message cache Symptom MSDP fails to send (S, G) entries through SA messages.
Verify the configuration of the import-source command and its acl-number argument, and make sure the ACL rule filters appropriate (S, G) entries. If the problem persists, contact HP Support. No exchange of locally registered (S, G) entries between RPs Symptom RPs fail to exchange their locally registered (S, G) entries with one another in the Anycast RP application.
Configuring multicast VPN Overview Multicast VPN is a technique that implements multicast delivery in VPNs. A VPN comprises multiple sites of the customer network and the public network provided by the network service provider. The sites communicate through the public network. As shown in Figure •...
can consider these instances on PE 1 to be independent virtual devices, which are PE 1', PE 1", and PE 1'". Each virtual device works on a plane, as shown in Figure Figure 57 Multicast in multiple VPN instances Through multicast VPN, multicast data of VPN A for a multicast group can arrive at only receiver hosts in Site 1, Site 3, and Site 5 of VPN A.
Page 183
Table 16 Basic MD-VPN concepts Concept Description An MD is a set of VPN instances running on PE devices that can send Multicast domain (MD) multicast traffic to each other. Each MD uniquely corresponds to the same set of VPN instances. An MDT is a multicast distribution tree constructed by all PE devices in Multicast distribution tree (MDT) the same VPN.
Page 184
As shown in Figure 57, the ellipse area in the center of each VPN instance plane represents an MD that provides services for a particular VPN instance. All the VPN multicast traffic in that VPN is transmitted within that MD. •...
Page 185
Uses the address to encapsulate the multicast packets for that VPN. • All the PE devices in the network monitor the forwarding rate on the default-MDT. When the rate of a VPN multicast stream that entered the public network at a specific PE device exceeds the threshold, the PE device initiates an MDT switchover message.
Protocols and standards RFC 6037, Cisco Systems' Solution for Multicast in BGP/MPLS IP VPNs How MD-VPN works This section describes how the MD-VPN technology is implemented, including the default-MDT construction, multicast traffic delivery based on the default-MDT, and inter-AS MD-VPN implementation. The VPN multicast data transmission on the public network is transparent to this VPN instance.
Page 187
At the same time, PE 2 and PE 3 separately initiate a similar flood-prune process. Finally, three independent SPTs are established in the MD, constituting a default-MDT in the PIM-DM network. Default-MDT establishment in a PIM-SM network Figure 61 Default-MDT establishment in a PIM-SM network As shown in Figure 61, PIM-SM is enabled in the network, and all the PE devices support VPN instance...
Default-MDT characteristics No matter which PIM mode is running on the public network, the default-MDT has the following characteristics: • All PE devices that support the same VPN instance join the default-MDT. All multicast packets that belong to this VPN are forwarded along the default-MDT to every PE •...
Page 189
Figure 62 Transmission of multicast protocol packets BGP: 11.1.3.1/24 PE 3 Source Receiver CE 1 CE 2 PE 1 PE 2 Site 1 Site 2 BGP: 11.1.1.1/24 BGP: 11.1.2.1/24 S: 192.1.1.1/24 Public instance BGP peers G: 225.1.1.1 VPN instance join (*, 225.1.1.1) Default-group: 239.1.1.1 Public instance join (11.1.2.1, 239.1.1.1) The multicast protocol packet is delivered as follows:...
Page 190
multicast packets on the local PE device, and transmitted along the default-MDT. When the VPN multicast packets arrive at the remote PE device, they are decapsulated and transmitted in that VPN site. VPN multicast data packets are forwarded across the public network differently in the following circumstances: If PIM-DM or PIM-SSM is running in the VPN, the multicast source forwards multicast data packets •...
Source sends a VPN multicast data packet (192.1.1.1, 225.1.1.1) to CE 1. CE 1 forwards the VPN multicast data packet along an SPT to PE 1, and the VPN instance on PE 1 examines the MVRF. If the outgoing interface list of the forwarding entry contains an MTI, PE 1 processes the VPN multicast data packet as described in step 3.
If so, it joins the data-MDT rooted at PE 1. Otherwise, it caches the message and will join the data-MDT when it has attached receivers. After sending the MDT switchover message, PE 1 waits a certain period of time (known as the data-delay period).
Figure 64 VPN instance-VPN instance interconnectivity By using this method, a separate MD must be established within each AS, and VPN multicast data traffic between different ASs is transmitted between the two MDs. Because only VPN multicast data traffic is forwarded between ASBRs, different PIM modes can run within different ASs.
Step Command Remarks Enter system view. system-view By default, no VPN instance exists on the device. Create a VPN instance and ip vpn-instance vpn-instance-name For more information about this enter VPN instance view. command, see MPLS Command Reference. By default, no RD is configured for a VPN instance.
Step Command Remarks Specify default-group By default, no default-group default-group group-address address. address is specified. Specifying the MD source interface The MTI uses the IP address of the MD source interface as the source address to encapsulate the VPN multicast packets. The IP address of the MD source interface must be the same as the source address used for establishing BGP peer relationship.
Step Command Remarks Optional. Configure the data-holddown data-holddown delay period. The default setting is 60 seconds. Enabling data-group reuse logging For a given VPN, the number of VPN multicast streams to be switched to data-MDTs might exceed the number of addresses in the data-group address range. In this case, the VPN instance on the source-side PE device can reuse the addresses in the address range.
The MDT information includes the IP address of the PE and the default-group to which the PE belongs. On a public network running PIM-SSM, the multicast VPN establishes a default-MDT rooted at the PE (multicast source) based on the MDT information. Perform the following tasks on the PE.
Step Command Remarks Configure the device as a route peer { group-name | ip-address } By default, neither route reflectors reflector and specify its peers reflect-client nor clients exist. or peer groups as clients. Optional. Disable route reflection undo reflect between-clients By default, clients can reflect routes between clients.
Intra-AS MD VPN configuration example Network requirements Item Network requirements • In VPN instance a, S 1 is a multicast source, and R 1, R 2, and R 3 are receivers. • In VPN instance b, S 2 is a multicast source, and R 4 is a receiver. Multicast sources and receivers •...
Page 201
Figure 66 Network diagram VPN a Loop1 VPN b CE a2 VPN a GE2/1/1 Loop1 CE b1 GE2/1/1 Loop1 Loop1 CE a3 PE 2 GE2/1/1 GE2/1/3 PE 3 GE2/1/1 Loop2 PE 1 CE a1 CE b2 Public GE2/1/1 Loop1 VPN b VPN a Table 17 Interface and IP address assignment Device...
Page 202
Device Interface IP address Device Interface IP address GigabitEthernet GigabitEthernet PE 1 10.110.2.1/24 CE a3 10.110.5.2/24 2/1/3 2/1/2 GigabitEthernet PE 1 Loopback 1 1.1.1.1/32 CE a3 10.110.12.2/24 2/1/3 GigabitEthernet GigabitEthernet PE 2 192.168.7.1/24 CE b1 10.110.8.1/24 2/1/1 2/1/1 GigabitEthernet GigabitEthernet PE 2 10.110.3.1/24 CE b1...
Page 203
[PE1-GigabitEthernet2/1/1] pim sm [PE1-GigabitEthernet2/1/1] mpls enable [PE1-GigabitEthernet2/1/1] mpls ldp enable [PE1-GigabitEthernet2/1/1] quit # Bind GigabitEthernet 2/1/2 with VPN instance a, assign an IP address to GigabitEthernet 2/1/2, and enable IGMP on the interface. [PE1] interface gigabitethernet 2/1/2 [PE1-GigabitEthernet2/1/2] ip binding vpn-instance a [PE1-GigabitEthernet2/1/2] ip address 10.110.1.1 24 [PE1-GigabitEthernet2/1/2] igmp enable [PE1-GigabitEthernet2/1/2] quit...
Page 204
[PE1] rip 2 vpn-instance a [PE1-rip-2] network 10.0.0.0 [PE1-rip-2] import-route bgp [PE1-rip-2] return Configure PE 2: # Configure a Router ID globally, and enable IP multicast routing on the public network. <PE2> system-view [PE2] router id 1.1.1.2 [PE2] multicast routing [PE2-mrib] quit # Configure an MPLS LSR ID, and enable the LDP capability.
Page 205
# Assign an IP address to the public network interface GigabitEthernet 2/1/1, and enable PIM-SM, MPLS capability, and LDP capability on the interface. [PE2] interface gigabitethernet 2/1/1 [PE2-GigabitEthernet2/1/1] ip address 192.168.7.1 24 [PE2-GigabitEthernet2/1/1] pim sm [PE2-GigabitEthernet2/1/1] mpls enable [PE2-GigabitEthernet2/1/1] mpls ldp enable [PE2-GigabitEthernet2/1/1] quit # Bind GigabitEthernet 2/1/2 with VPN instance b, assign an IP address to GigabitEthernet 2/1/2, and enable PIM-SM on the interface.
Page 207
[PE3-vpn-instance-b] vpn-target 200:1 export-extcommunity [PE3-vpn-instance-b] vpn-target 200:1 import-extcommunity [PE3-vpn-instance-b] quit # Enable IP multicast routing in VPN instance b. [PE3] multicast routing vpn-instance b [PE3-mrib-b] quit # Create the MD for VPN instance b, and specify the default-group, MD source interface, and data-group address range for the MD.
Page 208
# Configure Loopback 2 as a C-BSR and C-RP for VPN instance b. [PE3] pim vpn-instance b [PE3-pim-b] c-bsr 33.33.33.33 [PE3-pim-b] c-rp 33.33.33.33 [PE3-pim-b] quit # Configure BGP. [PE3] bgp 100 [PE3-bgp] group vpn-g internal [PE3-bgp] peer vpn-g connect-interface loopback 1 [PE3-bgp] peer 1.1.1.1 group vpn-g [PE3-bgp] peer 1.1.1.2 group vpn-g [PE3–bgp] ip vpn-instance a...
Page 209
[P] multicast routing [P-mrib] quit # Configure an MPLS LSR ID, and enable the LDP capability. [P] mpls lsr-id 2.2.2.2 [P] mpls ldp [P-ldp] quit # Assign an IP address to the public network interface GigabitEthernet 2/1/1, and enable PIM-SM, MPLS capability, and LDP capability on the interface. [P] interface gigabitethernet 2/1/1 [P-GigabitEthernet2/1/1] ip address 192.168.6.2 24 [P-GigabitEthernet2/1/1] pim sm...
Page 210
<CEa1> system-view [CEa1] multicast routing [CEa1-mrib] quit # Assign an IP address to GigabitEthernet 2/1/1, and enable PIM-SM on the interface. [CEa1] interface gigabitethernet 2/1/1 [CEa1-GigabitEthernet2/1/1] ip address 10.110.7.1 24 [CEa1-GigabitEthernet2/1/1] pim sm [CEa1-GigabitEthernet2/1/1] quit # Assign an IP address to GigabitEthernet 2/1/2, and enable PIM-SM on the interface. [CEa1] interface gigabitethernet 2/1/2 [CEa1-GigabitEthernet2/1/2] ip address 10.110.2.2 24 [CEa1-GigabitEthernet2/1/2] pim sm...
Page 211
[CEa2-GigabitEthernet2/1/2] ip address 10.110.4.2 24 [CEa2-GigabitEthernet2/1/2] pim sm [CEa2-GigabitEthernet2/1/2] quit # Assign an IP address to GigabitEthernet 2/1/3, and enable PIM-SM on the interface. [CEa2] interface gigabitethernet 2/1/3 [CEa2-GigabitEthernet2/1/3] ip address 10.110.12.1 24 [CEa2-GigabitEthernet2/1/3] pim sm [CEa2-GigabitEthernet2/1/3] quit # Assign an IP address to Loopback 1, and enable PIM-SM on the interface. [CEa2] interface loopback 1 [CEa2-LoopBack1] ip address 22.22.22.22 32 [CEa2-LoopBack1] pim sm...
# Enable IP multicast routing. <CEb2> system-view [CEb2] multicast routing [CEb2-mrib] quit # Assign an IP address to GigabitEthernet 2/1/1, and enable IGMP on the interface. [CEb2] interface gigabitethernet 2/1/1 [CEb2-GigabitEthernet2/1/1] ip address 10.110.11.1 24 [CEb2-GigabitEthernet2/1/1] igmp enable [CEb2-GigabitEthernet2/1/1] quit # Assign an IP address to GigabitEthernet 2/1/2, and enable PIM-SM on the interface.
Page 213
Item Network requirements • PE 1: GigabitEthernet 2/1/2 belongs to VPN instance a. GigabitEthernet 2/1/3 belongs to VPN instance b. GigabitEthernet 2/1/1 and Loopback 1 belong to the public network instance. • PE 2: GigabitEthernet 2/1/1, GigabitEthernet 2/1/2, Loopback 1, and Loopback 2 PE interfaces and belong to the public network instance.
Page 214
Figure 67 Network diagram Table 18 Interface and IP address assignment Device Interface IP address Device Interface IP address — 10.11.5.2/24 — 10.11.8.2/24 — 10.11.6.2/24 — 10.11.7.2/24 GigabitEthernet GigabitEthernet PE 1 10.10.1.1/24 PE 3 10.10.2.1/24 2/1/1 2/1/1 GigabitEthernet GigabitEthernet PE 1 10.11.1.1/24 PE 3 192.168.1.2/24...
Page 215
Device Interface IP address Device Interface IP address GigabitEthernet CE a1 Loopback 0 2.2.2.2/32 CE b2 10.11.8.1/24 2/1/1 GigabitEthernet GigabitEthernet CE a2 10.11.7.1/24 CE b2 10.11.4.2/24 2/1/1 2/1/2 GigabitEthernet CE a2 Loopback 0 10.11.3.2/24 CE b2 3.3.3.3/32 2/1/2 Configuration procedure Configure PE 1: # Configure a Router ID, and enable IP multicast routing on the public network.
Page 216
# Create the MD for VPN instance b, and specify the default-group, MD source interface, and data-group address range for the MD. [PE1] multicast-domain vpn-instance b [PE1-md-b] default-group 239.4.4.4 [PE1-md-b] source loopback 1 [PE1-md-b] data-group 225.4.4.0 28 [PE1-md-b] quit # Assign an IP address to the public network interface GigabitEthernet 2/1/1, and enable PIM-SM, MPLS capability, and LDP capability on the interface.
Page 218
# Assign an IP address to the public network interface GigabitEthernet 2/1/1, and enable PIM-SM, MPLS capability, and LDP capability on the interface. [PE2] interface gigabitethernet 2/1/1 [PE2-GigabitEthernet2/1/1] ip address 10.10.1.2 24 [PE2-GigabitEthernet2/1/1] pim sm [PE2-GigabitEthernet2/1/1] mpls enable [PE2-GigabitEthernet2/1/1] mpls ldp enable [PE2-GigabitEthernet2/1/1] quit # Assign an IP address to the public network interface GigabitEthernet 2/1/2, and enable PIM-SM and MPLS on the interface.
Page 220
# Assign an IP address to the public network interface GigabitEthernet 2/1/2, and enable PIM-SM and MPLS on the interface. [PE3] interface gigabitethernet 2/1/2 [PE3-GigabitEthernet2/1/2] ip address 192.168.1.2 24 [PE3-GigabitEthernet2/1/2] pim sm [PE3-GigabitEthernet2/1/2] mpls enable [PE3-GigabitEthernet2/1/2] quit # Assign an IP address to Loopback 1, and enable PIM-SM on this interface. [PE3] interface loopback 1 [PE3-LoopBack1] ip address 1.1.1.3 32 [PE3-LoopBack1] pim sm...
Page 222
# Create VPN instance b and configure an RD and route target attributes for the instance. [PE4] ip vpn-instance b [PE4-vpn-instance-b] route-distinguisher 200:1 [PE4-vpn-instance-b] vpn-target 200:1 export-extcommunity [PE4-vpn-instance-b] vpn-target 200:1 import-extcommunity [PE4-vpn-instance-b] quit # Enable IP multicast routing in VPN instance b. [PE4] multicast routing vpn-instance b [PE4-mrib-b] quit # Create the MD for VPN instance b, and specify the default-group, MD source interface, and the...
Page 223
[PE4-bgp] peer 1.1.1.3 group pe4-pe3 [PE4-bgp] group pe4-pe1 external [PE4-bgp] peer pe4-pe1 as-number 100 [PE4-bgp] peer pe4-pe1 ebgp-max-hop 255 [PE4-bgp] peer pe4-pe1 connect-interface loopback 1 [PE4-bgp] peer 1.1.1.1 group pe4-pe1 [PE4–bgp] ip vpn-instance a [PE4-bgp-a] address-family ipv4 [PE4-bgp-ipv4-a] import-route ospf 2 [PE4-bgp-ipv4-a] import-route direct [PE4-bgp-ipv4-a] quit [PE4-bgp-a] quit...
Page 224
[CEa1] multicast routing [CEa1-mrib] quit # Assign an IP address to GigabitEthernet 2/1/1, and enable PIM-SM on the interface. [CEa1] interface gigabitethernet 2/1/1 [CEa1-GigabitEthernet2/1/1] ip address 10.11.5.1 24 [CEa1-GigabitEthernet2/1/1] pim sm [CEa1-GigabitEthernet2/1/1] quit # Assign an IP address to GigabitEthernet 2/1/2, and enable PIM-SM on the interface. [CEa1] interface gigabitethernet 2/1/2 [CEa1-GigabitEthernet2/1/2] ip address 10.11.1.2 24 [CEa1-GigabitEthernet2/1/2] pim sm...
Page 225
[CEb1-ospf-1] area 0.0.0.0 [CEb1-ospf-1-area-0.0.0.0] network 10.11.0.0 0.0.255.255 [CEb1-ospf-1-area-0.0.0.0] quit [CEb1-ospf-1] quit Configure CE a2: # Enable IP multicast routing. <CEa2> system-view [CEa2] multicast routing [CEa2-mrib] quit # Assign an IP address to GigabitEthernet 2/1/1, and enable IGMP on the interface . [CEa2] interface gigabitethernet 2/1/1 [CEa2-GigabitEthernet2/1/1] ip address 10.11.7.1 24 [CEa2-GigabitEthernet2/1/1] igmp enable...
PE device to the same VPN instance on each remote PE device. Use the display bgp peer command to verify that the BGP peer connections have been correctly configured. If the problem persists, contact HP Support. An MVRF cannot be created Symptom A VPN instance cannot create an MVRF correctly.
Configuring MLD snooping In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. Overview MLD snooping runs on a Layer 2 switch as an IPv6 multicast constraining mechanism to improve multicast forwarding efficiency.
Page 229
Figure 69 MLD snooping related ports The following describes the ports involved in MLD snooping, as shown in Figure • Router port—Layer 3 multicast device-side port. Layer 3 multicast devices include DRs and MLD queriers. In Figure 69, GigabitEthernet 1/0/1 of Switch A and GigabitEthernet 1/0/1 of Switch B are the router ports.
NOTE: In MLD snooping, only dynamic ports age out. Static ports never age out. How MLD snooping works The ports in this section are dynamic ports. For information about how to configure and remove static ports, see "Configuring static ports." MLD messages include general query, MLD report, and done message.
A Layer 2 device does not forward an MLD report through a non-router port because of the MLD report suppression mechanism. For more information about the MLD report suppression mechanism, see "Configuring MLD." Done message When a host leaves an IPv6 multicast group, the host sends an MLD done message to the Layer 3 devices. When the Layer 2 device receives the MLD done message on a dynamic member port, the Layer 2 device first examines whether a forwarding entry matches the IPv6 multicast group address in the message: If no match is found, the Layer 2 device directly discards the MLD done message.
MLD snooping configuration task list Task at a glance Configuring basic MLD snooping functions: • (Required.) Enabling MLD snooping • (Optional.) Specifying the MLD snooping version • (Optional.) Setting the maximum number of MLD snooping forwarding entries Configuring MLD snooping port functions: •...
Step Command Remarks Enter system view. system-view Enable MLD snooping globally By default, MLD snooping is mld-snooping and enter MLD-snooping view. disabled. Enable MLD snooping for the By default, MLD snooping is enable vlan vlan-list specified VLANs. disabled for a VLAN. To enable MLD snooping for a VLAN in VLAN view: Step Command...
You can modify the maximum number of MLD snooping forwarding entries. When the number of forwarding entries on the device reaches the upper limit, the device does not automatically remove any existing entries. To avoid the situation that new entries cannot be created, HP recommends that you manually remove some entries.
Setting the aging timers for dynamic ports globally Step Command Remarks Enter system view. system-view Enter MLD-snooping view. mld-snooping Set the aging timer for dynamic router-aging-time interval The default setting is 260 seconds. router ports globally. Set the aging timer for dynamic host-aging-time interval The default setting is 260 seconds.
Step Command Remarks Configure the port as a static mld-snooping static-router-port By default, a port is not a static router port. vlan vlan-id router port. Configuring a port as a simulated member host Generally, a host that runs MLD can respond to MLD queries. If a host fails to respond, the multicast router might consider that the IPv6 multicast group has no members on the subnet.
You can enable MLD snooping fast-leave processing either on the current port in interface view or • globally for all ports in MLD-snooping view. If configurations are made in both interface view and MLD-snooping view, the configuration made in interface view takes priority. To enable MLD snooping fast-leave processing globally: Step Command...
Configuring the MLD snooping querier This section describes how to configure the MLD snooping querier. Configuration prerequisites Before you configure the MLD snooping querier, complete the following tasks: Enable MLD snooping for the VLAN. • Determine the interval for sending MLD general queries. •...
To speed up the response of hosts to MLD queries and to avoid simultaneous timer expirations from causing MLD report traffic bursts, you must correctly set the maximum response time. The maximum response time for MLD general queries is set by the max-response-time command. •...
Configuring source IPv6 addresses for MLD messages You can perform the following configuration to change the source IPv6 address of MLD queries sent by an MLD snooping querier. You can also change the source IPv6 address of MLD reports or done messages sent by a simulated member host or an MLD snooping proxy.
Setting the 802.1p precedence for MLD messages globally Step Command Remarks Enter system view. system-view Enter MLD-snooping view. mld-snooping Set the 802.1p precedence for dot1p-priority priority-number The default setting is 0. MLD messages. Setting the 802.1p precedence for MLD messages in a VLAN Step Command Remarks...
Configuring an IPv6 multicast group filter on a port Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface interface-type view. interface-number By default, no IPv6 multicast group Configure an IPv6 multicast mld-snooping group-policy filter is configured for the port. The group filter for the port.
Enabling dropping unknown IPv6 multicast data CAUTION: For MSR routers installed with the Layer 2 switching module SIC 4GSW or SIC 4GSWP, unknown IPv4 multicast data will be dropped if you enable dropping unknown IPv6 multicast data on them. Unknown IPv6 multicast data refers to IPv6 multicast data for which no forwarding entries exist in the MLD snooping forwarding table.
Setting the maximum number of IPv6 multicast groups on a port You can set the maximum number of IPv6 multicast groups on a port to regulate the port traffic. When you set the maximum number of IPv6 multicast groups on a port, follow these guidelines: •...
Step Command Remarks Enable the IPv6 multicast group By default, the IPv6 multicast group overflow-replace [ vlan vlan-list ] replacement function globally. replacement function is disabled. To enable the IPv6 multicast group replacement on a port: Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface interface-type...
# Configure an IPv6 multicast group filter so that the hosts in VLAN 100 can join only the IPv6 multicast group FF1E::101. [SwitchA] acl ipv6 number 2001 [SwitchA-acl6-basic-2001] rule permit source ff1e::101 128 [SwitchA-acl6-basic-2001] quit [SwitchA] mld-snooping [SwitchA–mld-snooping] group-policy 2001 vlan 100 [SwitchA–mld-snooping] quit # Configure GigabitEthernet 2/1/3 and GigabitEthernet 2/1/4 as simulated member hosts to join IPv6 multicast group FF1E::101.
Page 249
Suppose the STP runs on the network. To avoid data loops, the forwarding path from Switch A to • Switch C is blocked under normal conditions. IPv6 multicast data flows to the receivers attached to Switch C only along the path of Switch A—Switch B—Switch C. When this path is blocked, at least one MLD query-response cycle must be completed before IPv6 multicast data flows to the receivers along the path of Switch A—Switch C.
Page 250
[SwitchA-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 2/1/1 through GigabitEthernet 2/1/3 to the VLAN, and enable MLD snooping for the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 2/1/1 to gigabitethernet 2/1/3 [SwitchA-vlan100] mld-snooping enable [SwitchA-vlan100] quit # Configure GigabitEthernet 2/1/3 as a static router port. [SwitchA] interface gigabitethernet 2/1/3 [SwitchA-GigabitEthernet2/1/3] mld-snooping static-router-port vlan 100 [SwitchA-GigabitEthernet2/1/3] quit...
Router ports (1 in total): GE2/1/3 The output shows that GigabitEthernet 2/1/3 on Switch A has become a static router port. # Display information about the static MLD snooping forwarding entries in VLAN 100 on Switch C. [SwitchC] display mld-snooping static-group vlan 100 Total 1 entries).
Page 252
Figure 72 Network diagram Configuration procedure Configure Switch A: # Enable MLD snooping globally. <SwitchA> system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 2/1/1 through GigabitEthernet 2/1/3 to the VLAN, and enable MLD snooping and dropping unknown IPv6 multicast packets for the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 2/1/1 to gigabitethernet 2/1/3 [SwitchA-vlan100] mld-snooping enable...
Page 253
# Enable MLD snooping globally. <SwitchC> system-view [SwitchC] mld-snooping [SwitchC-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 2/1/1 through GigabitEthernet 2/1/3 to the VLAN, and enable MLD snooping and dropping unknown multicast packets for the VLAN. [SwitchC] vlan 100 [SwitchC-vlan100] port gigabitethernet 2/1/1 to gigabitethernet 2/1/3 [SwitchC-vlan100] mld-snooping enable [SwitchC-vlan100] mld-snooping drop-unknown [SwitchC-vlan100] quit...
If MLD snooping is enabled globally but not enabled for the VLAN, use the mld-snooping enable command in VLAN view to enable MLD snooping for the VLAN. If the problem persists, contact HP Support. IPv6 multicast group filter does not work...
Configuring IPv6 multicast routing and forwarding In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. Overview IPv6 multicast routing and forwarding uses the following tables: IPv6 multicast protocols' routing tables, such as the IPv6 PIM routing table.
Page 256
priority as the RPF route. If the routes have the same priority, the router selects the IPv6 MBGP route as the RPF route. For more information about the route preference, see Layer 3—IP Routing Configuration Guide. If the router does not use the longest prefix match principle, the router selects the route that has a higher priority as the RPF route.
Figure 73 RPF check process IPv6 Routing Table on Router C Receiver Router B Destination/Prefix Interface 2000::/16 GE1/0/2 GE1/0/1 Source Router A 2000::101/16 Receiver GE1/0/1 GE1/0/2 IPv6 Multicast packets Router C As shown in Figure 73, assume that IPv6 unicast routes are available in the network, IPv6 MBGP is not configured.
As shown in Figure 74, a tunnel is established between the multicast routers Router A and Router B. Router A encapsulates the IPv6 multicast data in unicast IPv6 packets, and forwards them to Router B across the tunnel through unicast routers. Then, Router B strips off the unicast IPv6 header and continues to forward the IPv6 multicast data down toward the receivers.
Step Command Remarks Configure the device to select By default, the route with the the RPF route based on the longest-match highest priority is selected as the longest prefix match. RPF route. Configuring IPv6 multicast load splitting By configuring per-source or per-source-and-group load splitting, you can optimize the traffic delivery when multiple IPv6 multicast data streams are handled.
Displaying and maintaining IPv6 multicast routing and forwarding CAUTION: The reset commands might cause IPv6 multicast data transmission failures. Execute display commands in any view and reset commands in user view. Task Command Display information about the interfaces display ipv6 mrib [ vpn-instance vpn-instance-name ] maintained by the IPv6 MRIB.
Task Command display ipv6 multicast [ vpn-instance vpn-instance-name ] routing-table [ ipv6-source-address [ prefix-length ] | Display information about the IPv6 multicast ipv6-group-address [ prefix-length ] | incoming-interface routing table. interface-type interface-number | outgoing-interface { exclude | include | match } interface-type interface-number ] Display the RPF route information of the display ipv6 multicast [ vpn-instance vpn-instance-name ] specified IPv6 multicast source.
Page 262
Figure 75 Network diagram Configuration procedure Assign an IP address and prefix length to each interface according to Figure 75. (Details not shown.) Configure OSPFv3 on the routers to make sure the following conditions are met: (Details not shown.) The routers are interoperable at the network layer. The routers can dynamically update their routing information.
Page 263
[RouterA-GigabitEthernet2/1/1] ipv6 pim dm [RouterA-GigabitEthernet2/1/1] quit [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] ipv6 pim dm [RouterA-GigabitEthernet2/1/2] quit [RouterA] interface tunnel 0 [RouterA-Tunnel0] ipv6 pim dm [RouterA-Tunnel0] quit # On Router C, enable IPv6 multicast routing. [RouterC] ipv6 multicast routing [RouterC-mrib6] quit # Enable MLD on GigabitEthernet 2/1/1 (the interface that connects to the receiver host).
Page 264
Downstream interface(s) information: Total number of downstreams: 1 1: GigabitEthernet2/1/1 Protocol: pim-dm, UpTime: 00:04:25, Expires: - The output shows the following: • Router A is the RPF neighbor of Router C. The IPv6 multicast data from Router A is delivered over a GRE tunnel to Router C. •...
Configuring MLD MLD is not supported on SIC-4FSW, 4FSWP, SIC-9FSW, or 9FSWP. Overview Multicast Listener Discovery (MLD) establishes and maintains IPv6 multicast group memberships between a Layer 3 multicast device and its directly connected hosts. MLD has two versions: MLDv1 (defined by RFC 2710), which is derived from IGMPv2. •...
Page 266
Joining an IPv6 multicast group Figure 76 MLD queries and reports IPv6 network Querier Router A Router B Ethernet Host A Host B Host C (G2) (G1) (G1) Query Report As shown in Figure 76, Host B and Host C want to receive the IPv6 multicast data addressed to IPv6 multicast group G1.
The host sends an MLD done message to all IPv6 multicast routers on the local subnet. The destination address is FF02::2. After receiving the MLD done message, the querier sends a configurable number of multicast-address-specific queries to the group that the host is leaving. The IPv6 multicast addresses queried include both the destination address field and the group address field of the message.
When MLDv2 runs on the hosts and routers, Host B can explicitly express its interest in the IPv6 multicast data that Source 1 sends to G (denoted as (S1, G)). It can also explicitly express that it does not want to receive the IPv6 multicast data that Source 2 sends to G (denoted as (S2, G)).
If G is in the IPv6 SSM group range but does not have relevant MLD SSM mappings, Router A drops • the packet. If G is in the IPv6 SSM group range, and has relevant MLD SSM mappings, Router A translates the •...
An MLD proxy device performs host functions on the upstream interface based on the membership database. It responds to the MLD queries according to the information in the database or sends report/done messages when the database changes. The MLD proxy device performs router functions on the downstream interfaces by participating in the querier election, sending queries, and maintaining memberships based on the reports.
Enabling MLD Enable MLD on the interface on which IPv6 multicast group memberships are created and maintained. To enable MLD: Step Command Remarks Enter system view. system-view By default, IPv6 Enable IPv6 multicast routing ipv6 multicast routing [ vpn-instance multicast routing is and enter IPv6 MRIB view.
Configuration procedure To configure an interface as a static member interface: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, an interface is not a mld static-group Configure the interface as a static member of any IPv6 multicast ipv6-group-address [ source static member interface.
When multiple IPv6 multicast routers exist on the same subnet, only the MLD querier sends MLD queries. When a non-querier router receives an MLD query, it starts an MLD other querier present timer. If it receives a new MLD query before the timer expires, it resets the timer. Otherwise, it considers that the querier has failed and starts a new querier election.
Configuration prerequisites Before you configure the MLD SSM mapping feature, complete the following tasks: Configure an IPv6 unicast routing protocol so that all devices in the domain are interoperable at the • network layer. • Configure basic MLD functions. Configuration procedure To configure MLD SSM mappings: Step Command...
Step Command Remarks Enable IPv6 multicast ipv6 multicast routing [ vpn-instance By default, IPv6 multicast routing routing and enter IPv6 vpn-instance-name ] is disabled. MRIB view. Return to system view. quit Enter interface view. interface interface-type interface-number Enable the MLD proxying By default, MLD proxying is mld proxy enable feature.
Step Command Remarks Enable load splitting By default, the load splitting proxy multipath function on the MLD proxy. function is disabled. Displaying and maintaining MLD CAUTION: The reset mld group command might cause IPv6 multicast data transmission failures. Execute display commands in any view and reset commands in user view. Task Command Remarks...
Page 277
VOD streams are sent to receiver hosts in multicast. Receiver hosts of different organizations form • stub networks N1 and N2. Host A and Host C are multicast receiver hosts in N1 and N2, respectively. • MLDv1 runs between Router A and N1, and between the other two routers (Router B and Router C) and N2.
Querier for MLD: FE80::200:5EFF:FE66:5100 (this router) MLD groups reported in total: 1 MLD SSM mapping configuration example Network requirements As shown in Figure The IPv6 PIM-SM domain uses both the ASM model and SSM model for IPv6 multicast delivery. • GigabitEthernet 2/1/3 of Router D serves as the C-BSR and C-RP.
Page 280
Configure OSPFv3 on the routers in the IPv6 PIM-SM domain to make sure the following conditions are met: (Details not shown.) The routers are interoperable at the network layer. The routers can dynamically update their routing information. Enable IPv6 multicast routing, IPv6 PIM-SM, and MLD: # On Router D, enable IPv6 multicast routing.
Page 281
[RouterD-pim6] ssm-policy 2000 [RouterD-pim6] quit # Configure Router A, Router B, and Router C in the same way Router D is configured. (Details not shown.) Configure MLD SSM mappings on Router D. [RouterD] mld [RouterD-mld] ssm-mapping 1001::1 2000 [RouterD-mld] ssm-mapping 3001::1 2000 [RouterD-mld] quit Verifying the configuration # Display MLD SSM mapping information for IPv6 multicast group FF3E::101 on Router D.
Upstream neighbor: 3002::1 RPF prime neighbor: 3002::1 Downstream interface(s) information: Total number of downstreams: 1 1: GigabitEthernet2/1/1 Protocol: mld, UpTime: 00:13:25, Expires: - MLD proxying configuration example Network requirements As shown in Figure 82, IPv6 PIM-DM runs on the core network. Host A and Host C in the stub network receive VOD information sent to IPv6 multicast group FF3E::101.
Use the display current-configuration interface command to verify that no ACL has been configured to filter out the reports to the IPv6 multicast group G. If the problem persists, contact HP Support. Inconsistent membership information on the routers on the same...
Configuring IPv6 PIM Overview IPv6 Protocol Independent Multicast (IPv6 PIM) provides IPv6 multicast forwarding by leveraging IPv6 unicast static routes or IPv6 unicast routing tables generated by any IPv6 unicast routing protocol, such as RIPng, OSPFv3, IPv6 IS-IS, or IPv6 BGP. IPv6 PIM uses the underlying IPv6 unicast routing to generate an IPv6 multicast routing table without relying on any particular IPv6 unicast routing protocol.
Page 286
routers discover their IPv6 PIM neighbors, maintain IPv6 PIM neighboring relationship with other routers, and build and maintain SPTs. SPT building The process of building an SPT is the flood-and-prune process: In an IPv6 PIM-DM domain, the IPv6 multicast data from the IPv6 multicast source S to the IPv6 multicast group G is flooded throughout the domain.
The node that needs to receive the IPv6 multicast data sends a graft message to its upstream node, telling it to rejoin the SPT. After receiving this graft message, the upstream node adds the receiving interface to the outgoing interface list of the (S, G) entry for the IPv6 multicast group. It also sends a graft-ack message to the graft sender.
Page 288
The basic implementation of IPv6 PIM-SM is as follows: • IPv6 PIM-SM assumes that no hosts need IPv6 multicast data. In the IPv6 PIM-SM mode, a host must express its interest in the IPv6 multicast data for an IPv6 multicast group before the data is forwarded to it.
Page 289
Figure 85 DR election As shown in Figure 85, the DR election process is as follows: The routers on the shared-media LAN send hello messages to one another. The hello messages contain the DR priority for DR election. The router with the highest DR priority is elected as the DR. The router with the highest IPv6 link-local address wins the DR election under either of the following conditions: All the routers have the same DR priority.
Page 290
The BSR encapsulates the RP-set information in the bootstrap messages (BSMs) and floods the BSMs to the entire IPv6 PIM-SM domain. Figure 86 Information exchange between C-RPs and BSR Based on the information in the RP-set, all routers in the network can select an RP for a specific IPv6 multicast group based on the following rules: The C-RP that is designated to the smallest IPv6 multicast group range wins.
Page 291
Anycast RP has the following benefits: • Optimal RP path—An IPv6 multicast source registers with the nearest RP to build an optimal SPT. A receiver joins the nearest RP to build an optimal RPT. Redundancy backup among RPs—When an RP fails, the RP-related sources and receiver-side DRs •...
Page 292
RPT building Figure 88 RPT building in an IPv6 PIM-SM domain Host A Source Receiver Host B Server Receiver Join message IPv6 multicast packets Host C As shown in Figure 88, the process of building an RPT is as follows: When a receiver wants to join the IPv6 multicast group G, it uses an MLD message to inform the receiver-side DR.
Page 293
Figure 89 IPv6 multicast source registration As shown in Figure 89, the IPv6 multicast source registers with the RP as follows: The IPv6 multicast source S sends the first multicast packet to the IPv6 multicast group G. When receiving the multicast packet, the source-side DR that directly connects to the IPv6 multicast source encapsulates the packet into a register message and unicasts the message to the RP.
SPT branch. The subsequent IPv6 multicast data is forwarded to the RP along the SPT without being encapsulated into register messages. For more information about the switchover to SPT initiated by the RP, see "IPv6 multicast source registration." The receiver-side DR initiates a switchover to SPT: •...
Page 295
DF election On a subnet with multiple multicast routers, duplicate multicast packets might be forwarded to the RP. To address this issue, IPv6 BIDIR-PIM uses a designated forwarder (DF) election mechanism to elect a unique DF for each RP on each subnet in the IPv6 BIDIR-PIM domain. Only the DF can forward IPv6 multicast data to the RP.
Page 296
Figure 91 RPT building at the receiver side As shown in Figure 91, the process for building a receiver-side RPT is the same as the process for building an RPT in IPv6 PIM-SM: When a receiver wants to join the IPv6 multicast group G, it uses an MLD message to inform the directly connected router.
Figure 92 RPT building at the IPv6 multicast source side As shown in Figure 92, the process for building a source-side RPT is relatively simple: When an IPv6 multicast source sends multicast packets to the IPv6 multicast group G, the DF in each subnet unconditionally forwards the packets to the RP.
Page 298
An IPv6 admin-scoped zone is designated to particular IPv6 multicast groups with the same scope field value in their group addresses. Zone border routers (ZBRs) form the boundary of an IPv6 admin-scoped zone. Each IPv6 admin-scoped zone maintains one BSR for IPv6 multicast groups with the same scope field value.
Figure 94 IPv6 multicast address format An IPv6 admin-scoped zone with a larger scope field value contains an IPv6 admin-scoped zone with a smaller scope field value. The zone with the scope field value of E is the IPv6 global-scoped zone.
SPT building When a receiver joins an IPv6 multicast group, the receiver-side DR uses the IPv6 SSM group range to determine whether to build an RPT for IPv6 PIM-SM or an SPT for IPv6 PIM-SSM. The IPv6 SSM group range reserved by IANA is FF3x::/32, where "x" represents any legal address scope. Figure 95 SPT building in IPv6 PIM-SSM Host A Source...
Figure 96 Relationship among IPv6 PIM protocols A receiver joins IPv6 multicast group G. G is in the IPv6 An IPv6 multicast source is SSM group range? specified? IPv6 BIDIR-PIM is enabled? An MLD-SSM mapping is configured for G? IPv6 PIM-SM runs for G. G has an IPv6 BIDIR-PIM IPv6 PIM-SSM runs for G.
With IPv6 PIM-DM enabled on interfaces, routers can establish IPv6 PIM neighbor relationship and process IPv6 PIM messages from their IPv6 PIM neighbors. When you deploy an IPv6 PIM-DM domain, HP recommends that you enable IPv6 PIM-DM on all non-border interfaces of routers. IMPORTANT: All the interfaces on a device must operate in the same IPv6 PIM mode in the public network or the same VPN instance.
To enable the state refresh feature on all routers in IPv6 PIM-DM domain: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, the state refresh feature Enable the state refresh feature. ipv6 pim state-refresh-capable is enabled.
With IPv6 PIM-SM enabled on interfaces, routers can establish IPv6 PIM neighbor relationship and process IPv6 PIM messages from their IPv6 PIM neighbors. When you deploy an IPv6 PIM-SM domain, HP recommends that you enable IPv6 PIM-SM on all non-border interfaces.
In an IPv6 PIM-SM domain, if you want a router to become the RP, you can configure the router as a C-RP. HP recommends that you configure C-RPs on backbone routers. The C-RPs periodically send advertisement messages to the BSR, which collects RP set information for the...
Page 306
• set on each member RP device. HP recommends that you configure no more than 16 Anycast RP members for an Anycast RP set. • HP recommends that you configure the loopback interface address of an RP member RP device as •...
Step Command Remarks Enter system system-view view. Enter IPv6 PIM ipv6 pim [ vpn-instance vpn-instance-name ] view. By default, Anycast RP is not configured. You can repeat this Configure anycast-rp ipv6-anycast-rp-address command to add multiple RP Anycast RP. ipv6-member-address member addresses to an Anycast RP set.
Page 308
When an attacker controls a router on the network, the attacker can configure the router as a C-BSR • to win the BSR election. Through this router, the attacker controls the advertising of RP information. For security purposes, you can configure a legal BSR address range on all routers on the network. All routers will discard BSMs that are out of the legal address range.
If the RP-set information is carried in one BSMF, the router directly updates the RP-set information for • the group range. If the RP-set information is carried in multiple BSMFs, the router updates the RP-set information for the • group range after receiving all these BSMFs. The loss of some IP fragments does not result in dropping of the entire BSM.
expires, it resets its register-stop timer. Otherwise, the DR starts sending register messages with encapsulated data again. The register-stop timer is set to a random value chosen uniformly from (0.5 × register_suppression_time minus register_probe_time) to (1.5 × register_suppression_time minus register_probe_time). The register_probe_time is (5 seconds).
Because IPv6 BIDIR-PIM is implemented on the basis of IPv6 PIM-SM, you must enable IPv6 PIM-SM before enabling IPv6 BIDIR-PIM. When you deploy an IPv6 BIDIR-PIM domain, HP recommends that you enable IPv6 PIM-SM on all non-border interfaces of the domain.
IPv6 BIDIR-PIM. preferred ] * configured. Configuring a C-RP IMPORTANT: When you configure a C-RP, reserve a large bandwidth between the C-RP and other devices in the IPv6 • BIDIR-PIM domain. • HP recommends that you configure C-RPs on backbone routers.
In an IPv6 BIDIR-PIM domain, one DF election per RP is implemented on all IPv6 PIM-enabled interfaces. To avoid unnecessary DF elections, HP recommends not configuring multiple RPs for BIDIR-PIM. This configuration sets a limit on the number of IPv6 BIDIR-PIM RPs. If the number of RPs exceeds the limit, excess RPs do not take effect and can be used only for DF election rather than IPv6 multicast data forwarding.
Page 314
Configuring a C-BSR IMPORTANT: Because the BSR and other devices exchange a large amount of information in the IPv6 BIDIR-PIM domain, reserve a large bandwidth between the C-BSR and other devices. C-BSRs should be configured on routers on the backbone network. The BSR election process is summarized as follows: Initially, each C-BSR regards itself as the BSR of the IPv6 BIDIR-PIM domain and sends BSMs to other routers in the domain.
Page 315
Step Command Remarks (Optional.) Configure a legal By default, no restrictions are bsr-policy acl6-number BSR address range. defined. Configuring an IPv6 PIM domain border As the administrative core of an IPv6 BIDIR-PIM domain, the BSR sends the collected RP-set information in the bootstrap messages to all routers in the IPv6 BIDIR-PIM domain.
NOTE: Generally, a BSR performs BSM semantic fragmentation according to the MTU of its BSR interface. For BSMs originated due to learning of a new IPv6 PIM neighbor, semantic fragmentation is performed according to the MTU of the interface that sends the BSMs. Configuring IPv6 PIM-SSM IPv6 PIM-SSM requires MLDv2 support.
Configuring the IPv6 SSM group range When an IPv6 PIM-SM enabled interface receives an IPv6 multicast packet, it checks whether the IPv6 multicast group address of the packet is in the IPv6 SSM group range. If the IPv6 multicast group address is in this range, the IPv6 PIM mode for this packet is IPv6 PIM-SSM.
Configuring an IPv6 multicast data filter To control IPv6 multicast traffic and the information available to downstream receivers, you can configure an IPv6 router as an IPv6 multicast data filter. The router will check IPv6 multicast packets that pass by and determine to forward or discard the packets.
Page 319
Holdtime—IPv6 PIM neighbor lifetime. If a router receives no hello message from a neighbor when • the neighbor lifetime expires, it regards the neighbor failed or unreachable. LAN_Prune_Delay—Delay of forwarding prune messages on a shared-media LAN. This option • consists of LAN delay (namely, prune message delay), override interval, and neighbor tracking support (namely, the capability to disable join message suppression).
If you configure hello message options in both IPv6 PIM view and interface view, the configuration in interface view always takes precedence. TIP: For a network without special requirements, HP recommends that you use the defaults.
Configuring common IPv6 PIM timers globally Step Command Remarks Enter system view. system-view ipv6 pim [ vpn-instance Enter IPv6 PIM view. vpn-instance-name ] Set the interval for sending By default, the interval to send timer hello interval hello messages. hello messages is 30 seconds. By default, the interval to send join/prune messages is 60 seconds.
Step Command Remarks Enter system view. system-view ipv6 pim [ vpn-instance Enter IPv6 PIM view. vpn-instance-name ] By default, the maximum size of a Set the maximum size of each jp-pkt-size size join or prune message is 8100 join or prune message. bytes.
Displaying and maintaining IPv6 PIM Execute display commands in any view. Task Command Display information about the display interface [ register-tunnel [ interface-number ] ] [ brief register-tunnel interface. [ description| down ] ] Display BSR information in the IPv6 display ipv6 pim [ vpn-instance vpn-instance-name ] bsr-info PIM-SM domain.
Page 324
Figure 97 Network diagram Table 21 Interface and IPv6 address assignment IPv6 Device Interface IPv6 address Device Interface address Router A GigabitEthernet 2/1/1 1001::1/64 Router C GigabitEthernet 2/1/2 3001::1/64 Router A GigabitEthernet 2/1/2 1002::1/64 Router D GigabitEthernet 2/1/1 4001::1/64 Router B GigabitEthernet 2/1/1 2001::1/64 Router D...
Page 325
[RouterA-GigabitEthernet2/1/1] mld enable [RouterA-GigabitEthernet2/1/1] quit # Enable IPv6 PIM-DM on GigabitEthernet 2/1/2. [RouterA] interface gigabitethernet 2/1/2 [RouterA-GigabitEthernet2/1/2] ipv6 pim dm [RouterA-GigabitEthernet2/1/2] quit # Enable IPv6 multicast routing, MLD, and IPv6 PIM-DM on Router B and Router C in the same way Router A is configured.
Page 326
# Send IPv6 multicast data from the IPv6 multicast source 4001::100/64 to the IPv6 multicast group FF0E::101. (Details not shown.) # Display IPv6 PIM multicast routing table information on Router A. [RouterA] display ipv6 pim routing-table Total 1 (*, G) entry; 1 (S, G) entry (*, FF0E::101) Protocol: pim-dm, Flag: WC UpTime: 00:01:24...
IPv6 PIM-SM non-scoped zone configuration example Network requirements As shown in Figure VOD streams are sent to receiver hosts in multicast. The receivers of different subnets form stub • networks, and at least one receiver host exist in each stub network. The entire IPv6 PIM-SM domain contains only one BSR.
Page 328
IPv6 Device Interface IPv6 address Device Interface address Router C GigabitEthernet 2/1/2 3001::1/64 Router E GigabitEthernet 2/1/4 4002::2/64 Configuration procedure Assign an IPv6 address and prefix length to each interface according to Figure 98. (Details not shown.) Enable OSPFv3 on all routers on the IPv6 PIM-SM network to make sure the following conditions are met: (Details not shown.) The routers are interoperable at the network layer.
Page 329
[RouterA] ipv6 pim [RouterA-pim6] static-rp 1002::2 [RouterA-pim6] quit # Configure a static RP on Router B, Router C, and Router D in the same way Router A is configured. (Details not shown.) Verifying the configuration # Display IPv6 PIM information on Router A. [RouterA] display ipv6 pim interface Interface NbrCnt HelloInt...
IPv6 PIM-SM admin-scoped zone configuration example Network requirements As shown in Figure VOD streams are sent to receiver hosts in multicast. The entire IPv6 PIM-SM domain is divided into • IPv6 admin-scoped zone 1, IPv6 admin-scoped zone 2, and the IPv6 global-scoped zone. Router B, Router C, and Router D are ZBRs of the three zones, respectively.
Page 331
IPv6 Device Interface Device Interface IPv6 address address Router A GigabitEthernet 2/1/2 1002::1/64 Router E GigabitEthernet 2/1/3 6001::2/64 Router B GigabitEthernet 2/1/1 2001::1/64 Router F GigabitEthernet 2/1/1 8001::1/64 Router B GigabitEthernet 2/1/2 1002::2/64 Router F GigabitEthernet 2/1/2 6002::2/64 Router B GigabitEthernet 2/1/3 2002::1/64 Router F...
Page 332
# On Router B, enable IPv6 multicast routing, and enable IPv6 PIM-SM on each interface. <RouterB> system-view [RouterB] ipv6 multicast routing [RouterB-mrib6] quit [RouterB] interface gigabitethernet 2/1/1 [RouterB-GigabitEthernet2/1/1] ipv6 pim sm [RouterB-GigabitEthernet2/1/1] quit [RouterB] interface gigabitethernet 2/1/2 [RouterB-GigabitEthernet2/1/2] ipv6 pim sm [RouterB-GigabitEthernet2/1/2] quit [RouterB] interface gigabitethernet 2/1/3 [RouterB-GigabitEthernet2/1/3] ipv6 pim sm...
Page 333
[RouterB-pim6] quit # On Router D, configure GigabitEthernet 2/1/1 as a C-BSR and a C-RP for IPv6 admin-scoped zone 2. [RouterD] ipv6 pim [RouterD-pim6] c-bsr 3003::2 scope 4 [RouterD-pim6] c-rp 3003::2 scope 4 [RouterD-pim6] quit # On Router F, configure GigabitEthernet 2/1/1 as a C-BSR and a C-RP for the IPv6 global-scoped zone.
Page 334
Bootstrap timer: 00:01:25 Elected BSR address: 3003::2 Priority: 64 Hash mask length: 126 Uptime: 00:01:45 Candidate BSR address: 3003::2 Priority: 64 Hash mask length: 126 # Display BSR information on Router F. [RouterF] display ipv6 pim bsr-info Scope: non-scoped State: Elected Bootstrap timer: 00:00:49 Elected BSR address: 8001::1 Priority: 64...
2: GigabitEthernet2/1/2 # Display information about the DF for IPv6 multicast forwarding on Router D. [RouterD] display ipv6 multicast forwarding df-info Total 1 RP, 1 matched 00001. RP address: 6001::1 Flags: 0x0 Uptime: 00:05:12 RPF interface: GigabitEthernet2/1/3 List of 2 DF interfaces: 1: GigabitEthernet2/1/1 2: GigabitEthernet2/1/2 IPv6 PIM-SSM configuration example...
Page 341
Table 25 Interface and IPv6 address assignment IPv6 Device Interface Device Interface IPv6 address address Router A GigabitEthernet 2/1/1 1001::1/64 Router D GigabitEthernet 2/1/1 4001::1/64 Router A GigabitEthernet 2/1/2 1002::1/64 Router D GigabitEthernet 2/1/2 1002::2/64 Router A GigabitEthernet 2/1/3 1003::1/64 Router D GigabitEthernet 2/1/3 4002::1/64...
Page 342
[RouterA] ipv6 pim [RouterA-pim6] ssm-policy 2000 [RouterA-pim6] quit Configure the IPv6 SSM group range on Router B, Router C, Router D and Router E in the same way Router A is configured. (Details not shown.) Verifying the configuration # Display IPv6 PIM information on Router A. [RouterA] display ipv6 pim interface Interface NbrCnt HelloInt...
Troubleshooting IPv6 PIM A multicast distribution tree cannot be correctly built Symptom An IPv6 multicast distribution tree cannot be correctly built because no IPv6 multicast forwarding entries are established on the routers (including routers directly connected with multicast sources or receivers) in an IPv6 PIM network.
Use display current-configuration to verify that the same IPv6 PIM mode is enabled on all routers on the network. For IPv6 PIM-SM, verify that the BSR and C-RPs are correctly configured. If the problem persists, contact HP Support. IPv6 multicast data is abnormally terminated on an...
If the problem persists, contact HP Support. An RPT cannot be built or IPv6 multicast source registration fails in IPv6 PIM-SM Symptom The C-RPs cannot unicast advertisement messages to the BSR. The BSR does not advertise BSMs containing C-RP information and has no IPv6 unicast route to any C-RP. An RPT cannot be correctly established, or the source-side DR cannot register the IPv6 multicast source with the RP.
Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
Page 348
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Page 349
Configuring PIM-SSM,108 Configuring SA message related parameters,147 Adjusting IGMP performance,64 Configuring the MLD snooping querier,228 Adjusting MLD performance,262 Contacting HP,336 Conventions,337 Configuration examples,48 Configuration task list,248 Displaying and maintaining IGMP,68 Configuring an IGMP snooping querier,23 Displaying and maintaining IGMP snooping,30...
Need help?
Do you have a question about the MSR2003 and is the answer not in the manual?
Questions and answers