Multicast overview Introduction to multicast As a technique that coexists with unicast and broadcast, the multicast technique effectively addresses the issue of point-to-multipoint data transmission. By enabling high-efficiency point-to-multipoint data transmission over a network, multicast greatly saves network bandwidth and reduces network load.
Page 12
Broadcast In broadcast transmission, the information source sends information to all hosts on the subnet, even if some hosts do not need the information. Figure 2 Broadcast transmission Figure 2, only Host B, Host D, and Host E need the information. If the information is broadcast to the subnet, Host A and Host C also receive it.
Figure 3 Multicast transmission The multicast source sends only one copy of the information to a multicast group. Host B, Host D, and Host E, which are information receivers, must join the multicast group. The routers on the network duplicate and forward the information based on the distribution of the group members. Finally, the information is correctly delivered to Host B, Host D, and Host E.
Table 1 Comparing TV program transmission and multicast transmission TV program transmission Multicast transmission A TV station transmits a TV program through a A multicast source sends multicast data to a multicast channel. group. A user tunes the TV set to the channel. A receiver joins the multicast group.
ASM model In the ASM model, any multicast sources can send information to a multicast group. Receivers can join a multicast group and get multicast information addressed to that multicast group from any multicast sources. In this model, receivers do not know the positions of the multicast sources in advance.
Page 16
Table 2 Class D IP address blocks and description Address block Description Reserved permanent group addresses. The IP address 224.0.0.0 is reserved. Other IP addresses can be used by routing protocols and for topology searching, protocol 224.0.0.0 to 224.0.0.255 maintenance, and so on. Table 3 lists common permanent group addresses.
Page 17
Figure 4 IPv6 multicast format The following describes the fields of an IPv6 multicast address: 0xFF—The most significant eight bits are 11111111. Flags—The Flags field contains four bits. Figure 5 Flags field format Table 4 Flags field description Description Reserved, set to 0. •...
Page 18
Value Meaning Global scope. Group ID—The Group ID field contains 112 bits. It uniquely identifies an IPv6 multicast group in the scope that the Scope field defines. Ethernet multicast MAC addresses • IPv4 multicast MAC addresses: As defined by IANA, the most significant 24 bits of an IPv4 multicast MAC address are 0x01005E.
Multicast protocols Multicast protocols include the following categories: • Layer 3 and Layer 2 multicast protocols: Layer 3 multicast refers to IP multicast working at the network layer. Layer 3 multicast protocols—IGMP, MLD, PIM, IPv6 PIM, MSDP, MBGP, and IPv6 MBGP.
Page 20
In the ASM model, multicast routes include intra-domain routes and inter-domain routes. An intra-domain multicast routing protocol discovers multicast sources and builds multicast distribution trees within an AS to deliver multicast data to receivers. Among a variety of mature intra-domain multicast routing protocols, PIM is most widely used. Based on the forwarding mechanism, PIM has dense mode (often referred to as PIM-DM) and sparse mode (often referred to as PIM-SM).
VLAN on the Layer 2 device. This method avoids waste of network bandwidth and extra burden on the Layer 3 device. Multicast packet forwarding mechanism In a multicast model, multicast receivers of a multicast group are usually located at different areas on the network.
• The multi-VPN-instance customer edge (MCE) device connects to the VPNs and PE devices and serves multiple VPNs. Different VPN instances for VPNs can be created on the MCE device to separately maintain their forwarding tables. • The provider edge (PE) devices connect to the public network and the VPNs and serve multiple networks.
Configuring IGMP snooping Overview IGMP snooping runs on a Layer 2 switch as a multicast constraining mechanism to improve multicast forwarding efficiency. It creates Layer 2 multicast forwarding entries from IGMP packets that are exchanged between the hosts and the router. As shown in Figure 11, when IGMP snooping is not enabled, the Layer 2 switch floods multicast...
Page 24
Figure 12 IGMP snooping related ports Receiver Router A Switch A FGE1/0/1 FGE1/0/2 Host A FGE1/0/3 Host B Receiver FGE1/0/1 FGE1/0/2 Source Host C Switch B Router port Member port Multicast packets Host D The following describes the ports involved in IGMP snooping: •...
How IGMP snooping works The ports in this section are dynamic ports. For information about how to configure and remove static ports, see "Configuring static ports." IGMP messages types include general query, IGMP report, and leave message. An IGMP snooping-enabled switch performs differently depending on the message. General query The IGMP querier periodically sends IGMP general queries to all hosts and routers on the local subnet to check for the existence of multicast group members.
• If no match is found, the switch discards the IGMP leave message. • If a match is found but the receiving port is not in the forwarding entry, the switch discards the IGMP leave message. • If a match is found and the receiving port is not the only outgoing interface in the forwarding entry, the switch performs the following actions: Discards the IGMP leave message.
IGMP snooping configuration task list Tasks at a glance Configuring basic IGMP snooping features: • (Required.) Enabling IGMP snooping • (Optional.) Specifying an IGMP snooping version • (Optional.) Setting the maximum number of IGMP snooping forwarding entries • (Optional.) Setting the IGMP last member query interval Configuring IGMP snooping port features: •...
• You can enable IGMP snooping for the specified VLANs in IGMP-snooping view or for a VLAN in VLAN view. For a VLAN, the configuration in VLAN view has the same priority as the configuration in IGMP-snooping view, and the most recent configuration takes effect. Enabling IGMP snooping in IGMP-snooping view Step Command...
Step Command Remarks Specify an IGMP snooping version version-number vlan version for the specified The default setting is 2. vlan-list VLANs. Specifying an IGMP snooping version in VLAN view Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Specify an IGMP snooping igmp-snooping version The default setting is 2.
Setting the IGMP last member query interval globally Step Command Remarks Enter system view. system-view Enter IGMP-snooping view. igmp-snooping Set the IGMP last member The default setting is 1 last-member-query-interval interval query interval globally. second. Setting the IGMP last member query interval in a VLAN Step Command Remarks...
Step Command Remarks Set the aging timer for The default setting is 260 dynamic member ports host-aging-time interval seconds. globally. Setting the aging timers for dynamic ports in a VLAN Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Set the aging timer for The default setting is 260...
Configuring a port as a simulated member host When a port is configured as a simulated member host, it is equivalent to an independent host in the following ways: • It sends an unsolicited IGMP report when you complete the configuration. •...
Step Command Remarks Enable fast-leave igmp-snooping fast-leave [ vlan By default, fast-leave processing processing on the port. vlan-list ] is disabled for a port. Disabling a port from becoming a dynamic router port A receiver host might send IGMP general queries or PIM hello messages for testing purposes. On the Layer 2 device, the port that receives either of the messages becomes a dynamic router port.
Configuration guidelines When you enable the IGMP snooping querier, follow these guidelines: • Do not enable the IGMP snooping querier on a multicast network that runs IGMP. An IGMP snooping querier does not take part in IGMP querier elections. However, it might affect IGMP querier elections if it sends IGMP general queries with a low source IP address.
Configuring parameters for IGMP general queries and responses in a VLAN Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Set the IGMP general query The default setting is 125 igmp-snooping query-interval interval interval in the VLAN. seconds.
Step Command Remarks By default, if the IGMP snooping querier has received IGMP queries, the source IP address of IGMP group-specific Configure the source IP igmp-snooping queries is the source IP address of IGMP address for IGMP special-query source-ip queries. Otherwise, it is the IP address of group-specific queries.
• Determine the maximum number of multicast groups that a port can join. Configuring a multicast group policy This feature enables the switch to filter IGMP reports by using an ACL that specifies multicast groups and the optional sources. It is used to control the multicast groups that receiver hosts can join. Configuration guidelines When you configure a multicast group policy, follow these guidelines: •...
Configuring multicast source port filtering on a port Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface-type interface view. interface-number Enable multicast source port By default, multicast source port igmp-snooping source-deny filtering. filtering is disabled. Enabling dropping unknown multicast data This feature enables the switch to drop all unknown multicast data.
To set the maximum number of multicast groups on a port: Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface-type interface view or Layer 2 interface-number aggregate interface view. Set the maximum number of The default setting is igmp-snooping group-limit limit multicast groups on a port.
# Configure a multicast group policy so that hosts in VLAN 100 can join only the multicast group 224.1.1.1. [SwitchA] acl number 2001 [SwitchA-acl-basic-2001] rule permit source 224.1.1.1 0 [SwitchA-acl-basic-2001] quit [SwitchA] igmp-snooping [SwitchA-igmp-snooping] group-policy 2001 vlan 100 [SwitchA-igmp-snooping] quit Verifying the configuration # Send IGMP reports from Host A and Host B to join the multicast groups 224.1.1.1 and 224.2.2.2.
Page 43
For more information about the STP, see Layer 2—LAN Switching Configuration Guide. Figure 14 Network diagram Switch B Source Switch A FGE1/0/2 FGE1/0/1 1.1.1.2/24 10.1.1.1/24 FGE1/0/1 Router A 1.1.1.1/24 IGMP querier Switch C Host C Host A Receiver Receiver Host B VLAN 100 Configuration procedure Assign an IP address and subnet mask to each interface as shown in...
Page 44
[SwitchA-vlan100] quit # Configure FortyGigE 1/0/3 as a static router port. [SwitchA] interface fortygige 1/0/3 [SwitchA-FortyGigE1/0/3] igmp-snooping static-router-port vlan 100 [SwitchA-FortyGigE1/0/3] quit Configure Switch B: # Enable IGMP snooping globally. <SwitchB> system-view [SwitchB] igmp-snooping [SwitchB-igmp-snooping] quit # Create VLAN 100, and assign FortyGigE 1/0/1 and FortyGigE 1/0/2 to the VLAN. [SwitchB] vlan 100 [SwitchB-vlan100] port fortygige 1/0/1 fortygige 1/0/2 # Enable IGMP snooping for VLAN 100.
Total 1 entries. VLAN 100: Total 1 entries. (0.0.0.0, 224.1.1.1) Host slots (0 in total): Host ports (2 in total): FGE1/0/3 FGE1/0/5 The output shows that FortyGigE 1/0/3 and FortyGigE 1/0/5 on Switch C have become static member ports of the multicast group 224.1.1.1. IGMP snooping querier configuration example Network requirements As shown in...
Page 46
# Enable IGMP snooping globally. <SwitchA> system-view [SwitchA] igmp-snooping [SwitchA-igmp-snooping] quit # Create VLAN 100, and assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port fortygige 1/0/1 to fortygige 1/0/3 # Enable IGMP snooping for VLAN 100. [SwitchA-vlan100] igmp-snooping enable # Enable dropping unknown multicast packets for VLAN 100.
Multicast group policy does not work Symptom Hosts can receive multicast data from multicast groups that are not permitted by the multicast group policy. Solution To resolve the problem: Use the display acl command to verify that the configured ACL meets the multicast group policy requirements.
Configuring PIM snooping Overview PIM snooping runs on Layer 2 devices. It works with IGMP snooping to analyze received PIM messages, and adds the ports that are interested in specific multicast data to a PIM snooping routing entry. In this way, the multicast data can be forwarded to only the ports that are interested in the data. Figure 16 Multicast packet transmission without or with PIM snooping Multicast packet transmission Multicast packet transmission when...
Each PIM router in the VLAN, whether interested in the multicast data or not, can receive all multicast data and all PIM messages except PIM hello messages. • When the Layer 2 switch runs both IGMP snooping and PIM snooping, it performs the following actions: a.
Configuring multicast VLANs Overview As shown in Figure 18, Host A, Host B, and Host C are in different VLANs and the same multicast group. When Switch A (Layer 3 device) receives multicast data for that group, it sends three copies of the multicast data to Switch B (Layer 2 device).
Page 56
Figure 19 Sub-VLAN-based multicast VLAN IGMP snooping manages router ports in the multicast VLAN and member ports in each sub-VLAN. When Switch A receives multicast data from the multicast source, it sends only one copy of the multicast data to the multicast VLAN on Switch B. Then, Switch B sends a separate copy to each sub-VLAN of the multicast VLAN.
Multicast VLAN can be used on networks where multicast sources are connected to downstream devices of a Layer 2 device. Upon receiving multicast traffic from a downstream multicast source, the Layer 2 device changes the user VLAN of the traffic to the associated multicast VLAN. Then, it floods the traffic to the upstream Layer 3 device through the multicast VLAN.
Step Command Remarks Configure a VLAN as a By default, a VLAN is not a multicast VLAN and enter its multicast-vlan vlan-id multicast VLAN. view. Assign the specified VLANs By default, a multicast VLAN does to the multicast VLAN as subvlan vlan-list not have any sub-VLANs.
Assigning user ports to a multicast VLAN You can either assign the user ports to the multicast VLAN in multicast VLAN view, or assign the user ports to the multicast VLAN in interface view. When you perform this task, follow these guidelines: •...
Displaying and maintaining multicast VLANs Execute display commands in any view and reset commands in user view. Task Command Display information about multicast display multicast-vlan [ vlan-id ] VLANs. Display information about multicast display multicast-vlan group [ source-address | group-address | groups in multicast VLANs.
Page 61
Figure 21 Network diagram Source FGE1/0/2 IGMP querier Vlan-int20 Switch A 1.1.1.2/24 FGE1/0/1 1.1.1.1/24 Vlan-int10 10.110.1.1/24 FGE1/0/1 Switch B FGE1/0/2 FGE1/0/4 FGE1/0/3 Receiver Receiver Receiver Host A Host B Host C VLAN 2 VLAN 3 VLAN 4 Configuration procedure Configure Switch A: # Enable IP multicast routing.
Page 62
Configure Switch B: # Enable IGMP snooping. <SwitchB> system-view [SwitchB] igmp-snooping [SwitchB-igmp-snooping] quit # Create VLAN 2, assign FortyGigE 1/0/2 to the VLAN, and enable IGMP snooping for the VLAN. [SwitchB] vlan 2 [SwitchB-vlan2] port fortygige 1/0/2 [SwitchB-vlan2] igmp-snooping enable [SwitchB-vlan2] quit # Create VLAN 3, assign FortyGigE 1/0/3 to the VLAN, and enable IGMP snooping for the VLAN.
[SwitchB] display multicast-vlan group Total 1 entries. Multicast VLAN 10: Total 1 entries. (0.0.0.0, 224.1.1.1) Sub-VLANs (3 in total): VLAN 2 VLAN 3 VLAN 4 The output shows that the multicast VLAN (VLAN 10) contains sub-VLANs VLAN 2 through VLAN 4. Switch B will replicate the multicast data of VLAN 10 to VLAN 2 through VLAN 4.
Page 64
[SwitchA-mrib] quit # Create VLAN 20, and assign FortyGigE 1/0/2 to the VLAN. [SwitchA] vlan 20 [SwitchA-vlan20] port fortygige 1/0/2 [SwitchA-vlan20] quit # Assign an IP address to VLAN-interface 20, and enable PIM-DM on the interface. [SwitchA] interface vlan-interface 20 [SwitchA-Vlan-interface20] ip address 1.1.1.2 24 [SwitchA-Vlan-interface20] pim dm [SwitchA-Vlan-interface20] quit...
Page 65
[SwitchB-FortyGigE1/0/2] port hybrid vlan 2 untagged [SwitchB-FortyGigE1/0/2] port hybrid vlan 10 untagged [SwitchB-FortyGigE1/0/2] quit # Configure FortyGigE 1/0/3 as a hybrid port, and configure VLAN 3 as the PVID of the hybrid port. [SwitchB] interface fortygige 1/0/3 [SwitchB-FortyGigE1/0/3] port link-type hybrid [SwitchB-FortyGigE1/0/3] port hybrid pvid vlan 3 # Assign FortyGigE 1/0/3 to VLAN 3 and VLAN 10 as an untagged VLAN member.
Page 66
Host slots (0 in total): Host ports (3 in total): FGE1/0/2 (00:03:23) FGE1/0/3 (00:04:07) FGE1/0/4 (00:04:16) The output shows that IGMP snooping maintains the user ports in VLAN 10. Switch B will forward the multicast data of VLAN 10 through these user ports.
Configuring multicast routing and forwarding Overview The following tables are involved in multicast routing and forwarding: • Multicast routing table of each multicast routing protocol, such as the PIM routing table. • General multicast routing table that summarizes multicast routing information generated by different multicast routing protocols.
Page 68
If the router does not use the longest prefix match principle, the route with a higher route preference becomes the RPF route. If the routes have the same preference, the unicast route becomes the RPF route. The RPF route determines the RPF interface and the RPF neighbor. If the RPF route is a unicast route, the outgoing interface of the route is the RPF interface, and the next hop is the RPF neighbor.
Figure 23 RPF check process IP Routing Table on Switch C Receiver Switch B Destination/Mask Interface 192.168.0.0/24 Vlan-int20 Vlan-int10 Source Switch A 192.168.0.1/24 Receiver Vlan-int10 Vlan-int20 Multicast packets Switch C As shown in Figure 23, assume that unicast routes are available in the network and no static multicast routes have been configured on Switch C.
Page 70
Figure 24 Changing an RPF route As shown in Figure 24, when no static multicast route is configured, Switch C's RPF neighbor on the path back to the source is Switch A. The multicast data from the source travels through Switch A to Switch C.
NOTE: A static multicast route is effective only on the multicast router on which it is configured, and will not be advertised throughout the network or redistributed to other routers. Multicast forwarding across unicast subnets Routers forward the multicast data from a multicast source hop by hop along the forwarding tree, but some routers might not support multicast protocols in a network.
Enabling IP multicast routing Enable IP multicast routing before you configure any Layer 3 multicast functionality on the public network or VPN instance. To enable IP multicast routing: Step Command Remarks Enter system view. system-view Enable IP multicast routing multicast routing [ vpn-instance By default, IP multicast routing is and enter MRIB view.
Specifying the longest prefix match principle You can enable the multicast router to use the longest prefix match principle for RPF route selection. For more information about RPF route selection, see "RPF check process." To specify the longest prefix match principle: Step Command Remarks...
Configuring static multicast MAC address entries In Layer 2 multicast, multicast MAC address entries can be dynamically created or added through Layer 2 multicast protocols (such as IGMP snooping). You can also manually configure static multicast MAC address entries by binding multicast MAC addresses and ports to control the destination ports of the multicast data.
Step Command Remarks Configure multicast By default, multicast data multicast forwarding supervlan forwarding among cannot be forwarded among community sub-VLANs of a super VLAN. sub-VLANs of a super VLAN. reset multicast [ vpn-instance vpn-instance-name ] Clear all multicast forwarding forwarding-table { { source-address entries with the super VLAN [ mask { mask-length | mask } ] | interface as the incoming...
[SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] pim dm [SwitchA-Vlan-interface102] quit [SwitchA] interface vlan-interface 103 [SwitchA-Vlan-interface103] pim dm [SwitchA-Vlan-interface103] quit # Enable IP multicast routing and PIM-DM on Switch C in the same way Switch A is configured. (Details not shown.) Display the RPF route to Source on Switch B. [SwitchB] display multicast rpf-info 50.1.1.100 RPF information about source 50.1.1.100: RPF interface: Vlan-interface102, RPF neighbor: 30.1.1.2...
Page 79
Figure 28 Network diagram Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 28. (Details not shown.) Configure OSPF on Switch B and Switch C. (Details not shown.) Enable IP multicast routing, and enable IGMP and PIM-DM: # On Switch C, enable IP multicast routing.
[SwitchC] display multicast rpf-info 50.1.1.100 No output is displayed, because no RPF routes to Source 2 exist on Switch B or Switch C. Configure a static multicast route: # Configure a static multicast route on Switch B, specifying Switch A as its RPF neighbor on the route to Source 2.
Page 81
Figure 29 Network diagram Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 29. (Details not shown.) Configure OSPF on all the switches. (Details not shown.) Configure a GRE tunnel: # Create service loopback group 1 on Switch A and specify the unicast tunnel service for the group <SwitchA>...
Page 82
[SwitchC-Tunnel0] ip address 50.1.1.2 24 [SwitchC-Tunnel0] source 30.1.1.2 [SwitchC-Tunnel0] destination 20.1.1.1 [SwitchC-Tunnel0] quit Enable IP multicast routing, PIM-DM, and IGMP: # On Switch A, enable multicast routing, and enable PIM-DM on each interface. [SwitchA] multicast routing [SwitchA-mrib] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] pim dm [SwitchA-Vlan-interface100] quit [SwitchA] interface vlan-interface 101...
Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface200 Protocol: igmp, UpTime: 00:04:25, Expires: - (10.1.1.100, 225.1.1.1) Protocol: pim-dm, Flag: ACT UpTime: 00:06:14 Upstream interface: Tunnel0 Upstream neighbor: 50.1.1.1 RPF prime neighbor: 50.1.1.1 Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface200 Protocol: pim-dm, UpTime: 00:04:25, Expires: - The output shows that Switch A is the RPF neighbor of Switch C and the multicast data from Switch...
Configuring IGMP Overview Internet Group Management Protocol (IGMP) establishes and maintains the multicast group memberships between a Layer 3 multicast device and hosts on the directly connected subnet. IGMP has the following versions: • IGMPv1 (defined by RFC 1112) • IGMPv2 (defined by RFC 2236) •...
As shown in Figure 30, Host B and Host C are interested in the multicast data addressed to the multicast group G1. Host A is interested in the multicast data addressed to G2. The following process describes how the hosts join the multicast groups and how the IGMP querier (Router B in Figure maintains the multicast group memberships: The hosts send unsolicited IGMP reports to the multicast groups they want to join without...
"Leave group" mechanism In IGMPv1, when a host leaves a multicast group, it does not send any notification to the multicast routers. The multicast routers determine whether a group has members by using the maximum response time. This adds to the leave latency. In IGMPv2, when a host is leaving a multicast group, the following process occurs: The host sends a leave message (with the destination of 224.0.0.2) to all routers on the local subnet.
In IGMPv3, Host B can explicitly express that it needs to receive the multicast data addressed to G from Source 1 but not from Source 2. As a result, Host B receives only multicast data from Source 1. Enhancements in query and report capabilities IGMPv3 introduces IGMP group-and-source queries and IGMP reports carrying group records.
IGMP configuration task list Tasks at a glance Configuring basic IGMP features • (Required.) Enabling IGMP • (Optional.) Specifying an IGMP version • (Optional.) Configuring a static group member • (Optional.) Configuring a multicast group policy Adjusting IGMP performance • (Optional.) Configuring IGMP query and response parameters •...
To specify an IGMP version: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Specify an IGMP version. The default setting is 2. igmp version version-number Configuring a static group member You can configure an interface as a static group member of a multicast group. The interface can always receive multicast data for the group.
Step Command Remarks policy. Hosts attached to the interface can join any multicast groups. Adjusting IGMP performance Before adjusting IGMP performance, complete the following tasks: • Configure any unicast routing protocol so that all devices can interoperate at the network layer. •...
Page 91
For IGMP general queries, the maximum response time is set by the max-response-time command. For IGMP group-specific queries and IGMP group-and-source-specific queries, the maximum response time equals the IGMP last member query interval. • The following configurations take effect only on the devices that run IGMPv2 and IGMPv3: Maximum response time for IGMP general queries.
Step Command Remarks interval. query interval equals one quarter interval of the IGMP general query interval. By default, the IGMP startup Set the IGMP startup query query count equals the IGMP igmp startup-query-count count count. querier's robustness variable. Set the IGMP general query By default, the IGMP general igmp query-interval interval interval.
• Configure any unicast routing protocol so that all devices in the domain can interoperate at the network layer. • Configure basic IGMP features. Configuration procedure To configure IGMP SSM mappings: Step Command Remarks Enter system view. system-view igmp [ vpn-instance Enter IGMP view.
Task Command [ source-address [ mask { mask | mask-length } ] ] } } IGMP configuration examples Basic IGMP features configuration example Network requirements As shown in Figure • OSPF and PIM-DM run on the network. • VOD streams are sent to receiver hosts in multicast. Receiver hosts of different organizations form stub networks N1 and N2.
Page 95
[SwitchA] multicast routing [SwitchA-mrib] quit # Enable IGMP on the receiver-side interface VLAN-interface 100. [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] igmp enable [SwitchA-Vlan-interface100] quit # Enable PIM-DM on VLAN-interface 101. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim dm [SwitchA-Vlan-interface101] quit # On Switch B, enable IP multicast routing. <SwitchB>...
IGMP version: 2 Query interval for IGMP: 125s Other querier present time for IGMP: 255s Maximum query response time for IGMP: 10s Querier for IGMP: 10.110.2.1 (This router) IGMP groups reported in total: 1 IGMP SSM mapping configuration example Network requirements As shown in Figure •...
Page 97
Device Interface IP address Device Interface IP address Switch B 192.168.2.1/24 Switch D 192.168.4.1/24 Vlan-int102 Vlan-int104 Configuration procedure Assign an IP address and subnet mask to each interface according to Table 6. (Details not shown.) Configure OSPF on the switches in the PIM-SM domain. (Details not shown.) Enable IP multicast routing, PIM-SM, and IGMP: # On Switch D, enable IP multicast routing.
Page 98
[SwitchD-acl-basic-2000] quit [SwitchD] pim [SwitchD-pim] ssm-policy 2000 [SwitchD-pim] quit # Configure the SSM group range on Switch A, Switch B, and Switch C in the same way Switch D is configured. (Details not shown.) Configure IGMP SSM mappings on Switch D. [SwitchD] igmp [SwitchD-igmp] ssm-mapping 133.133.1.1 2000 [SwitchD-igmp] ssm-mapping 133.133.3.1 2000...
RPF prime neighbor: 192.168.3.1 Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface400 Protocol: igmp, UpTime: 00:13:25, Expires: - Troubleshooting IGMP No membership information on the receiver-side router Symptom When a host sends a report for joining the multicast group G, no membership information of the multicast group G exists on the router closest to that host.
Page 100
• Although IGMP routers are partially compatible with hosts that separately run different versions of IGMP, all routers on the same subnet must run the same version of IGMP. Inconsistent IGMP versions running on routers on the same subnet leads to inconsistency of IGMP memberships. Solution To resolve the problem: Use the display current-configuration command to verify the IGMP information on the...
Configuring PIM Overview Protocol Independent Multicast (PIM) provides IP multicast forwarding by leveraging unicast static routes or unicast routing tables generated by any unicast routing protocol, such as RIP, OSPF, IS-IS, or BGP. PIM uses the underlying unicast routing to generate a multicast routing table without relying on any particular unicast routing protocol.
Page 102
The nodes without downstream receivers are pruned. A router that has no downstream receivers multicasts a prune message to all PIM routers on the subnet. When an upstream node receives the prune message, it removes the receiving interface from the (S, G) entry. In this way, the upstream stream node stops forwarding subsequent packets addressed to that multicast group down to this node.
Figure 35 Assert mechanism As shown in Figure 35, after Router A and Router B receive an (S, G) packet from the upstream node, they both forward the packet to the local subnet. As a result, the downstream node Router C receives two identical multicast packets.
Page 104
PIM-DM does not require a DR. However, if IGMPv1 runs on any shared-media LAN in a PIM-DM domain, a DR must be elected to act as the IGMPv1 querier for the LAN. For more information about IGMP, see "Configuring IGMP." IMPORTANT: IGMP must be enabled on the device that acts as the receiver-side DR.
Page 105
As shown in Figure 37, each C-RP periodically unicasts its advertisement messages (C-RP-Adv messages) to the BSR. An advertisement message contains the address of the advertising C-RP and the multicast group range to which it is designated. The BSR collects these advertisement messages and organizes the C-RP information into an RP-set, which is a database of mappings between multicast groups and RPs.
Page 106
As shown in Figure 38, the process of building an RPT is as follows: When a receiver wants to join the multicast group G, it uses an IGMP message to inform the receiver-side DR. After getting the receiver information, the DR sends a join message, which is forwarded hop by hop to the RP for the multicast group.
Switchover to SPT CAUTION: If the switch is an RP, disabling switchover to SPT might cause multicast traffic forwarding failures on the source-side DR. When disabling switchover to SPT, be sure you fully understand its impact on your network. In a PIM-SM domain, only one RP and one RPT provide services for a specific multicast group. Before the switchover to SPT occurs, the source-side DR encapsulates all multicast data addressed to the multicast group in register messages and sends them to the RP.
Page 108
forwards the data to the receivers. Each router along the bidirectional RPT needs to maintain only one (*, G) entry, saving system resources. BIDIR-PIM is suitable for a network with dense multicast sources and receivers. Neighbor discovery BIDIR-PIM uses the same neighbor discovery mechanism as PIM-SM does. For more information, "Neighbor discovery."...
Page 109
Bidirectional RPT building A bidirectional RPT comprises a receiver-side RPT and a source-side RPT. The receiver-side RPT is rooted at the RP and takes the routers that directly connect to the receivers as leaves. The source-side RPT is also rooted at the RP but takes the routers that directly connect to the sources as leaves.
Figure 42 RPT building at the multicast source side As shown in Figure 42, the process for building a source-side RPT is relatively simple: When a multicast source sends multicast packets to the multicast group G, the DF in each subnet unconditionally forwards the packets to the RP.
Page 111
specific group range cannot cross the boundary of the admin-scoped zone for the group range. Multicast group ranges that are associated with different admin-scoped zones can have intersections. However, the multicast groups in an admin-scoped zone are valid only within the local zone, and theses multicast groups are regarded as private group addresses.
Figure 44 Relationship in view of multicast group address ranges Admin-scope 1 Admin-scope 3 G1 address G3 address Admin-scope 2 Global-scope G2 address − − G2 address As shown in Figure 44, the admin-scoped zones 1 and 2 have no intersection, but the admin-scoped zone 3 is a subset of the admin-scoped zone 1.
Figure 45 SPT building in PIM-SSM Host A Source Receiver Host B Server Receiver Subscribe message Multicast packets Host C As shown in Figure 45, Host B and Host C are receivers. They send IGMPv3 report messages to their DRs to express their interest in the multicast information that the multicast source S sends to the multicast group G.
Figure 46 Relationship among PIM protocols A receiver joins multicast group G. G is in the A multicast source is SSM group range? specified? BIDIR-PIM is enabled? PIM-SM runs for G. G has a BIDIR-PIM RP? PIM-SSM runs for G. BIDIR-PIM runs for G.
PIM-DM configuration task list Tasks at a glance (Required.) Enabling PIM-DM (Optional.) Enabling the state refresh feature (Optional.) Configuring state refresh parameters (Optional.) Configuring PIM-DM graft retry timer (Optional.) Configuring common PIM features Configuration prerequisites Before you configure PIM-DM, configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer Enabling PIM-DM Enable IP multicast routing before you configure PIM.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Enable the state refresh By default, the state refresh pim state-refresh-capable feature. feature is enabled. Configuring state refresh parameters The state refresh interval determines the interval at which a router sends state refresh messages. It is configurable.
For more information about the configuration of other timers in PIM-DM, see "Configuring common timers." Configuring PIM-SM This section describes how to configure PIM-SM. PIM-SM configuration task list Tasks at a glance Remarks (Required.) Enabling PIM-SM (Required.) Configuring an • Configuring a static RP You must configure a static RP, a C-RP, or both in a •...
Step Command Remarks Return to system view. quit interface interface-type Enter interface view. interface-number Enable PIM-SM. By default, PIM-SM is disabled. pim sm Configuring an RP An RP can provide services for multiple or all multicast groups. However, only one RP can forward multicast traffic for a multicast group at a time.
Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] c-rp ip-address [ advertisement-interval adv-interval | Configure a C-RP. By default, no C-RPs exist. group-policy acl-number | holdtime hold-time | priority priority ] * (Optional.) Configure a By default, no C-RP policy crp-policy acl-number C-RP policy.
Page 120
• When an attacker controls a router on the network, the attacker can configure the router as a C-BSR to win the BSR election. Through this router, the attacker controls the advertising of RP information. When you configure a C-BSR, follow these guidelines: •...
To disable BSM semantic fragmentation: Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] Disable BSM semantic By default, BSM semantic undo bsm-fragment enable fragmentation. fragmentation is enabled. NOTE: Generally, a BSR performs BSM semantic fragmentation according to the MTU of its BSR interface. For BSMs originated due to learning of a new PIM neighbor, semantic fragmentation is performed according to the MTU of the interface that sends the BSMs.
Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] By default, the device spt-switch-threshold { immediacy immediately triggers the Configure the switchover to | infinity } [ group-policy switchover to SPT after SPT. acl-number ] receiving the first multicast packet.
Step Command Remarks Enter system view. system-view Enable IP multicast routing multicast routing [ vpn-instance By default, IP multicast routing is and enter MRIB view. vpn-instance-name ] disabled. Return to system view. quit interface interface-type Enter interface view. interface-number Enable PIM-SM. By default, PIM-SM is disabled.
Page 124
Configuring a C-RP IMPORTANT: When you configure a C-RP, reserve a large bandwidth between the C-RP and other devices in the BIDIR-PIM domain. In a BIDIR-PIM domain, if you want a router to become the RP, you can configure the router as a C-RP.
To set the maximum number of BIDIR-PIM RPs: Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] Set the maximum number of By default, the maximum number bidir-rp-limit limit BIDIR-PIM RPs. of BIDIR-PIM RPs is 6. Configuring a BSR You must configure a BSR if C-RPs are configured to dynamically select the RP.
Page 126
Step Command Remarks Enter system view. system-view pim [ vpn-instance Enter PIM view. vpn-instance-name ] c-bsr ip-address [ scope group-address { mask-length | By default, no C-BSR is Configure a C-BSR. mask } ] [ hash-length configured. hash-length | priority priority ] * (Optional.) Configure a BSR By default, no BSR policy exists.
Configuring PIM-SSM PIM-SSM requires IGMPv3 support. Enable IGMPv3 on PIM routers that connect to multicast receivers. PIM-SSM configuration task list Tasks at a glance (Required.) Enabling PIM-SM (Optional.) Configuring the SSM group range (Optional.) Configuring common PIM features Configuration prerequisites Before you configure PIM-SSM, configure a unicast routing protocol so that all devices in the domain can interoperate at the network layer.
• Configure the same SSM group range on all routers in the PIM-SSM domain. Otherwise, multicast information cannot be delivered through the SSM model. • When a member of a multicast group in the SSM group range sends an IGMPv1 or IGMPv2 report message, the device does not trigger a (*, G) join.
Step Command Remarks pim [ vpn-instance Enter PIM view. vpn-instance-name ] Configure a multicast source By default, no multicast source source-policy acl-number policy. policy exists. Configuring a PIM hello policy This feature enables the router to filter PIM hello messages by using an ACL that specifies the packet source addresses.
Page 130
You can enable neighbor tracking on an upstream router to track the states of the downstream nodes for which the joined state holdtime timer has not expired. If you want to enable neighbor tracking, you must enable it on all PIM routers on a shared-media LAN. Otherwise, the upstream router cannot track join messages from every downstream routers.
Configuring common PIM timers IMPORTANT: To prevent the upstream neighbors from aging out, you must configure the interval for sending join/prune messages to be less than the joined/pruned state holdtime timer. The following are common timers in PIM: • Hello interval—Interval at which a PIM router sends hello messages to discover PIM neighbors and maintain PIM neighbor relationship.
Configuring common PIM timers on an interface Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Set the hello interval. The default setting is 30 seconds. pim timer hello interval Set the triggered hello delay. The default setting is 5 seconds. pim triggered-hello-delay delay The default setting is 60 seconds.
Enabling PIM passive mode To guard against PIM hello spoofing, you can enable PIM passive mode on an interface which is directly connected to user hosts. The PIM passive interface cannot receive or forward PIM protocol messages (excluding register, register-stop and C-RP-Adv messages), and it acts as the DR on the subnet.
Task Command display pim [ vpn-instance vpn-instance-name ] c-rp Display C-RP information in the PIM-SM domain. [ local ] display pim [ vpn-instance vpn-instance-name ] Display DF information in the BIDIR-PIM domain. df-info [ rp-address ] display pim [ vpn-instance vpn-instance-name ] Display PIM information for interfaces.
Page 135
Figure 47 Network diagram Receiver Host A Switch A Vlan-int100 Host B Receiver Vlan-int300 Vlan-int101 Vlan-int200 Vlan-int101 Source Host C Switch D Switch B 10.110.5.100/24 Vlan-int200 PIM-DM Switch C Host D Table 7 Interface and IP address assignment Device Interface IP address Device Interface...
Page 136
[SwitchA-Vlan-interface103] quit # Enable IP multicast routing, IGMP, and PIM-DM on Switch B and Switch C in the same way Switch A is configured. (Details not shown.) # On Switch D, enable IP multicast routing, and enable PIM-DM on each interface. <SwitchD>...
RPF prime neighbor: NULL Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface100 Protocol: igmp, UpTime: 00:04:25, Expires: - (10.110.5.100, 225.1.1.1) Protocol: pim-dm, Flag: ACT UpTime: 00:06:14 Upstream interface: Vlan-interface103 Upstream neighbor: 192.168.1.2 RPF prime neighbor: 192.168.1.2 Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface100 Protocol: pim-dm, UpTime: 00:04:25, Expires: -...
Page 138
• Specify VLAN-interface 102 on Switch E as a C-BSR and a C-RP. The C-RP is designated to the multicast group range 225.1.1.0/24. Specify VLAN-interface 101 of Switch D as the static RP on all the switches to back up the dynamic RP. •...
Page 139
[SwitchA-mrib] quit # Enable IGMP on the receiver-side interface VLAN-interface 100. [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] igmp enable [SwitchA-Vlan-interface100] quit # Enable PIM-SM on the other interfaces. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] pim sm [SwitchA-Vlan-interface102] quit # Enable IP multicast routing, IGMP, and PIM-SM on Switch B and Switch C in the same way...
Elected BSR address: 192.168.9.2 Priority: 64 Hash mask length: 30 Uptime: 00:11:18 # Display BSR information on Switch E. [SwitchE] display pim bsr-info Scope: non-scoped State: Elected Bootstrap timer: 00:01:44 Elected BSR address: 192.168.9.2 Priority: 64 Hash mask length: 30 Uptime: 00:11:18 Candidate BSR address: 192.168.9.2 Priority: 64...
Page 141
Figure 49 Network diagram Table 9 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Vlan-int100 192.168.1.1/24 Switch D Vlan-int105 10.110.5.2/24 Switch A Vlan-int101 10.110.1.1/24 Switch D Vlan-int108 10.110.7.1/24 Switch B Vlan-int200 192.168.2.1/24 Switch D Vlan-int107 10.110.8.1/24 Switch B...
Page 142
Configuration procedure Assign an IP address and subnet mask to each interface according to Figure 49. (Details not shown.) Configure OSPF on all switches in the PIM-SM domain. (Details not shown.) Enable IP multicast routing, and enable IGMP and PIM-SM: # On Switch A, enable IP multicast routing.
Page 143
# On Switch C, configure VLAN-interface 103 and VLAN-interface 106 as the boundaries of admin-scoped zone 2. <SwitchC> system-view [SwitchC] interface vlan-interface 103 [SwitchC-Vlan-interface103] multicast boundary 239.0.0.0 8 [SwitchC-Vlan-interface103] quit [SwitchC] interface vlan-interface 106 [SwitchC-Vlan-interface106] multicast boundary 239.0.0.0 8 [SwitchC-Vlan-interface106] quit # On Switch D, configure VLAN-interface 107 as the boundary of admin-scoped zone 2.
Scope: non-scoped Group/MaskLen: 224.0.0.0/4 RP address Priority HoldTime Uptime Expires 10.110.9.1 00:03:39 00:01:51 Scope: 239.0.0.0/8 Group/MaskLen: 239.0.0.0/8 RP address Priority HoldTime Uptime Expires 10.110.1.2 (local) 00:07:44 00:01:51 # Display RP information on Switch D. [SwitchD] display pim rp-info BSR RP information: Scope: non-scoped Group/MaskLen: 224.0.0.0/4 RP address...
Page 146
Figure 50 Network diagram Loop0 Receiver 1 Receiver 2 Switch B Vlan-int200 Vlan-int102 Vlan-int102 Switch C Host A Host B Vlan-int101 Vlan-int103 BIDIR-PIM Source 1 Source 2 Vlan-int101 Vlan-int103 Vlan-int100 Vlan-int400 Switch A Switch D Table 10 Interface and IP address assignment Device Interface IP address...
Page 147
[SwitchA] pim [SwitchA-pim] bidir-pim enable [SwitchA-pim] quit # On Switch B, enable IP multicast routing. <SwitchB> system-view [SwitchB] multicast routing [SwitchB-mrib] quit # Enable IGMP on the receiver-side interface VLAN-interface 200. [SwitchB] interface vlan-interface 200 [SwitchB-Vlan-interface200] igmp enable [SwitchB-Vlan-interface200] quit # Enable PIM-SM on the other interfaces.
Page 148
# Enable PIM-SM on the other interfaces. [SwitchD] interface vlan-interface 400 [SwitchD-Vlan-interface400] pim sm [SwitchD-Vlan-interface400] quit [SwitchD] interface vlan-interface 103 [SwitchD-Vlan-interface103] pim sm [SwitchD-Vlan-interface103] quit # Enable BIDIR-PIM. [SwitchD] pim [SwitchD-pim] bidir-pim enable [SwitchD-pim] quit On Switch C, configure VLAN interface 102 as the C-BSR, and Loopback 0 as the C-RP for the entire BIDIR-PIM domain.
[SwitchA] display multicast forwarding df-info Total 1 RP, 1 matched 00001. RP address: 1.1.1.1 Flags: 0x0 Uptime: 00:08:32 RPF interface: Vlan-interface101 List of 1 DF interfaces: 1: Vlan-interface100 # Display information about the DF for multicast forwarding on Switch B. [SwitchB] display multicast forwarding df-info Total 1 RP, 1 matched 00001.
Page 150
• The receivers receive VOD information through multicast. The receiver groups of different organizations form stub networks, and one or more receiver hosts exist in each stub network. The entire PIM domain operates in the SSM mode. • Host A and Host C are multicast receivers in two stub networks. •...
Page 151
<SwitchA> system-view [SwitchA] multicast routing [SwitchA-mrib] quit # Enable IGMPv3 on the receiver-side interface VLAN-interface 100. [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] igmp enable [SwitchA-Vlan-interface100] igmp version 3 [SwitchA-Vlan-interface100] quit # Enable PIM-SM on the other interfaces. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102...
the existing unicast route and is independent of PIM. The RPF interface must be enabled with PIM, and the RPF neighbor must be a PIM neighbor. If PIM is not enabled on the RPF interface or the RPF neighbor, the multicast distribution tree cannot be built correctly. This causes incorrect multicast forwarding.
If the problem persists, contact Hewlett Packard Enterprise Support. An RP cannot join an SPT in PIM-SM Symptom An RPT cannot be correctly built, or an RP cannot join the SPT toward the multicast source. Analysis Possible reasons for the problem include the following: •...
Page 155
Use display pim rp-info to verify that the RP information is correct on each router. Use display pim neighbor to verify that PIM neighboring relationship has been correctly established among the routers. If the problem persists, contact Hewlett Packard Enterprise Support.
Configuring MSDP Overview MSDP is an inter-domain multicast solution that addresses the interconnection of PIM-SM domains. It discovers multicast source information in other PIM-SM domains. In the basic PIM-SM mode, a multicast source registers only with the RP in the local PIM-SM domain, and the multicast source information in each domain is isolated.
Page 157
• MSDP peers created on RPs: Source-side MSDP peer—MSDP peer closest to the multicast source, such as RP 1. The source-side RP creates and sends SA messages to its remote MSDP peer to notify the MSDP peer of the locally registered multicast source information. A source-side MSDP peer must be created on the source-side RP.
Page 158
The process of implementing PIM-SM inter-domain multicast delivery by leveraging MSDP peers is as follows: The multicast source in PIM-SM 1 sends the first multicast packet to multicast group G. When DR 1 receives this multicast packet, it encapsulates the multicast data within a register message and sends the register message to RP 1.
As shown in Figure 54, within a PIM-SM domain, a multicast source sends multicast data to multicast group G, and the receiver joins the multicast group. To implement Anycast RP: Configure the same IP address (known as Anycast RP address, typically a private address) to an interface on Router A and Router B.
Creating an MSDP peering connection An MSDP peering relationship is identified by an address pair (the addresses of the local MSDP peer and the remote MSDP peer). To create an MSDP peering connection, you must perform the creation operation on both devices that are a pair of MSDP peers. If an MSDP peer and a BGP peer share the same interface, configure the same IP address for the MSDP peer and the BGP peer as a best practice.
Step Command Remarks Enter system view. system-view msdp [ vpn-instance Enter MSDP view. vpn-instance-name ] Configure the description for By default, an MSDP peer is not peer peer-address description an MSDP peer configured with a description. text Configuring an MSDP mesh group An AS might contain multiple MSDP peers.
IMPORTANT: The MSDP peers involved in MD5 authentication must be configured with the same authentication method and password. Otherwise, the authentication fails and the TCP connection cannot be established. To control MSDP peering connections: Step Command Remarks Enter system view. system-view msdp [ vpn-instance Enter MSDP view.
actual RP address. A logical RP address is the address of a logical interface on the router where the RP resides. To configure the SA message contents: Step Command Remarks Enter system view. system-view msdp [ vpn-instance Enter MSDP view. vpn-instance-name ] Enable multicast data By default, an SA message...
• SA incoming or outgoing policy—Limits the receipt or forwarding of SA messages. This policy enables the router to receive or forward SA messages based on the used ACL that specifies the multicast sources and groups. By default, multicast data packets are encapsulated in SA messages and forwarded to MSDP peers only if the TTL values in the packets are larger than zero.
Step Command Remarks Configure the maximum number of (S, G) entries The default setting is peer peer-address learned from the specified 4294967295. sa-cache-maximum sa-limit MSDP peer that the router can cache. Displaying and maintaining MSDP Execute display commands in any view and reset commands in user view. Task Command Display brief information about...
Page 167
Figure 55 Network diagram Table 12 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Vlan-int103 10.110.1.2/24 Switch D Vlan-int104 10.110.4.2/24 Switch A Vlan-int100 10.110.2.1/24 Switch D Vlan-int300 10.110.5.1/24 Switch A Vlan-int200 10.110.3.1/24 Switch E Vlan-int105 10.110.6.1/24 Switch B...
Page 168
[SwitchA] interface vlan-interface 103 [SwitchA-Vlan-interface103] pim sm [SwitchA-Vlan-interface103] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] pim sm [SwitchA-Vlan-interface100] quit # Enable IGMP on the receiver-side interface VLAN-interface 200. [SwitchA] interface vlan-interface 200 [SwitchA-Vlan-interface200] igmp enable [SwitchA-Vlan-interface200] quit # Enable IP multicast routing and PIM-SM on Switch B, Switch C, Switch D, Switch E, and Switch F in the same way Switch A is configured.
Page 169
[SwitchB] ospf 1 [SwitchB-ospf-1] import-route bgp [SwitchB-ospf-1] quit Configure MSDP peers: # Configure an MSDP peer on Switch B. [SwitchB] msdp [SwitchB-msdp] peer 192.168.1.2 connect-interface vlan-interface 101 [SwitchB-msdp] quit # Configure an MSDP peer on Switch C. [SwitchC] msdp [SwitchC-msdp] peer 192.168.1.1 connect-interface vlan-interface 101 [SwitchC-msdp] peer 192.168.3.2 connect-interface vlan-interface 102 [SwitchC-msdp] quit # Configure MSDP peers on Switch E.
Page 170
Network NextHop LocPrf PrefVal Path/Ogn * > 1.1.1.1/32 192.168.1.1 100? * >i 2.2.2.2/32 0.0.0.0 * > 192.168.1.0 0.0.0.0 * > 192.168.1.1/32 0.0.0.0 * > 192.168.1.2/32 0.0.0.0 When Source 1 in PIM-SM 1 and Source 2 in PIM-SM 2 send multicast information, receivers in PIM-SM 1 and PIM-SM 3 can receive the multicast data.
Information about (Source, Group)-based SA filtering policy: Import policy: None Export policy: None Information about SA-Requests: Policy to accept SA-Requests: None Sending SA-Requests status: Disable Minimum TTL to forward SA with encapsulated data: 0 SAs learned from this peer: 0, SA cache maximum for the peer: 4294967295 Input queue size: 0, Output queue size: 0 Counters for MSDP messages: RPF check failure: 0...
Page 172
Figure 56 Network diagram Table 13 Interface and IP address assignment Device Interface IP address Device Interface IP address Source 1 — 10.110.5.100/24 Switch C Vlan-int101 192.168.1.2/24 Source 2 — 10.110.6.100/24 Switch C Vlan-int102 192.168.2.2/24 Switch A Vlan-int300 10.110.5.1/24 Switch D Vlan-int200 10.110.3.1/24 Switch A...
Page 173
[SwitchB-Vlan-interface100] quit # Enable PIM-SM on the other interfaces. [SwitchB] interface vlan-interface 103 [SwitchB-Vlan-interface103] pim sm [SwitchB-Vlan-interface103] quit [SwitchB] interface Vlan-interface 101 [SwitchB-Vlan-interface101] pim sm [SwitchB-Vlan-interface101] quit [SwitchB] interface loopback 0 [SwitchB-LoopBack0] pim sm [SwitchB-LoopBack0] quit [SwitchB] interface loopback 10 [SwitchB-LoopBack10] pim sm [SwitchB-LoopBack10] quit [SwitchB] interface loopback 20...
Page 174
# Display brief information about MSDP peers on Switch D. [SwitchD] display msdp brief Configured Established Listen Connect Shutdown Disabled Peer address State Up/Down time SA count Reset count 1.1.1.1 Established 00:10:57 Verify that Switch B acts as the RP for Source 1 and Host A. # Send an IGMP report from Host A to join the multicast group 225.1.1.1.
# Display the PIM routing table on Switch D. [SwitchD] display pim routing-table Total 1 (*, G) entry; 1 (S, G) entry (*, 225.1.1.1) RP: 10.1.1.1 (local) Protocol: pim-sm, Flag: WC UpTime: 00:12:07 Upstream interface: Register Upstream neighbor: NULL RPF prime neighbor: NULL Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface200...
Page 176
Figure 57 Network diagram PIM-SM 1 PIM-SM 2 PIM-SM 3 Loop0 Source 2 Vlan-int100 Switch A Loop0 Receiver Host A Vlan-int400 Switch C Vlan-int104 Vlan-int104 Switch D Vlan-int300 Vlan-int500 Source 1 Vlan-int200 Switch B Receiver Receiver Host B Host C MSDP peers Table 14 Interface and IP address assignment Device...
Page 177
[SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] pim sm [SwitchA-Vlan-interface102] quit [SwitchA] interface loopback 0 [SwitchA-LoopBack0] pim sm [SwitchA-LoopBack0] quit # Enable IP multicast routing, IGMP, and PIM-SM on Switch B, Switch C, and Switch D in the same way Switch A is configured.
[SwitchC] acl number 3001 [SwitchC-acl-adv-3001] rule deny ip source 10.110.3.100 0 destination 225.1.1.0 0.0.0.3 [SwitchC-acl-adv-3001] rule permit ip source any destination any [SwitchC-acl-adv-3001] quit [SwitchC] msdp [SwitchC-msdp] peer 10.110.5.2 sa-policy export acl 3001 [SwitchC-msdp] quit # Configure an SA creation policy on Switch D so that Switch D will not create SA messages for Source 2.
MSDP peers stay in disabled state Symptom The configured MSDP peers stay in disabled state. Analysis Possible reasons for the problem include the following: • A TCP connection-based MSDP peering relationship is established between the local interface address and the MSDP peer. •...
No exchange of locally registered (S, G) entries between RPs Symptom RPs fail to exchange their locally registered (S, G) entries with one another in the Anycast RP application. Analysis Possible reasons for the problem include the following: • In the Anycast RP application, RPs in the same PIM-SM domain are configured to be MSDP peers to achieve redundancy backup among the RPs.
Configuring multicast VPN Overview Multicast VPN is a technique that implements multicast delivery in VPNs. A VPN comprises multiple sites of the customer network and the public network provided by the network service provider. The sites communicate through the public network. As shown in Figure •...
Figure 59 Multicast in multiple VPN instances Through multicast VPN, multicast data of VPN A for a multicast group can arrive at only multicast receivers in Site 1, Site 3, and Site 5 of VPN A. The data is multicast in these sites and on the public network.
Page 183
Table 15 Basic MD-VPN concepts Concept Description An MD is a set of VPN instances running on PE devices that can Multicast domain (MD) send multicast traffic to each other. Each MD uniquely corresponds to the same set of VPN instances. An MDT is a multicast distribution tree constructed by all PE Multicast distribution tree (MDT) devices in the same VPN.
Page 184
• Inside an MD, all the private traffic is transmitted through the MT. The process of multicast traffic transmission through an MT is as follows: a. The local PE device encapsulates a VPN multicast packet into a public network multicast packet.
b. After a data-delay period has passed, an MDT switchover process starts. All VPN multicast packets that have entered the public network through that PE device are not encapsulated with the default-group address. They are encapsulated into public network multicast packets with the data-group address.
How MD-VPN works This section describes how the MD-VPN technology is implemented, including the default-MDT construction, multicast traffic delivery based on the default-MDT, and inter-AS MD-VPN implementation. For a VPN instance, multicast data transmission on the public network is transparent. The VPN data is exchanged between the MTIs of the local PE and the remote PE.
Page 187
Default-MDT establishment in a PIM-SM network Figure 63 Default-MDT establishment in a PIM-SM network As shown in Figure 63, PIM-SM is enabled in the network, and all the PE devices support VPN instance A. The process of establishing a default-MDT is as follows: The public network interface of PE 1 initiates a join to the public network RP by specifying the multicast group address as the default-group address in the join message.
Default-MDT-based delivery The default-MDT delivers multicast protocol packets and multicast data packets differently. Multicast protocol packet delivery To forward the multicast protocol packets of a VPN over the public network, the local PE device encapsulates them into public network multicast data packets. These packets are transmitted along the default-MDT and are then decapsulated on the remote PE device to go into the normal protocol procedure.
Page 189
Figure 64 Transmission of multicast protocol packets BGP: 11.1.3.1/24 PE 3 Source Receiver CE 1 CE 2 PE 1 PE 2 Site 1 Site 2 BGP: 11.1.1.1/24 BGP: 11.1.2.1/24 S: 192.1.1.1/24 Public instance BGP peers G: 225.1.1.1 VPN instance join (*, 225.1.1.1) Default-group: 239.1.1.1 Public instance join (11.1.2.1, 239.1.1.1) The multicast protocol packet is delivered as follows:...
Page 190
VPN multicast data packets are forwarded across the public network differently in the following circumstances: • If PIM-DM or PIM-SSM is running in the VPN, the multicast source forwards multicast data packets to the receivers along the VPN SPT across the public network. •...
If the outgoing interface list of the forwarding entry contains an MTI, PE 1 processes the VPN multicast data packet as described in step 3. The VPN instance on PE 1 considers the VPN multicast data packet to have been sent out of the MTI, because step 3 is transparent to it. PE 1 encapsulates the VPN multicast data packet into a public network multicast packet (11.1.1.1, 239.1.1.1) by using the GRE method.
For a given VPN instance, the default-MDT and the data-MDT are both forwarding tunnels in the same MD. A default-MDT is uniquely identified by a default-group address, and a data-MDT is uniquely identified by a data-group address. Each default-group is uniquely associated with a data-group address range.
• PE 3 and PE 4 are interconnected through their respective public network instance and treat each other as a P device. Figure 67 Multihop EBGP interconnectivity By using this method, only one MD needs to be established for all the ASs. Public network multicast traffic between different ASs is transmitted within this MD.
Configuration prerequisites Before you configure MD-VPN, complete the following tasks: • Configure a unicast routing protocol on the public network. • Configure MPLS L3VPN on the public network. • Configure PIM (PIM-DM or PIM-SM) on the public network. • Determine the VPN instance names and RDs. •...
Step Command Remarks Create the MD for the VPN By default, the VPN instance does multicast-domain vpn-instance instance and enter MD view. not have an MD. vpn-instance-name Specifying the default-group address The MTI uses the default-group address as the destination address to encapsulate the VPN multicast packets.
it keeps receiving multicast packets for the VPN before the timer expires, a switchover to data-MDT takes place. Otherwise, the default-MDT is still used for multicast forwarding. Perform the following configuration on the PE. To configure MDT switchover parameters: Step Command Remarks Enter system view.
• Determine the cluster IDs of the route reflectors. Configuring BGP MDT peers or peer groups Configure a BGP MDT peer or peer group on a PE router in BGP IPv4 MDT address family view. Then, the PE router can exchange MDT information with the BGP peer or peer group. MDT information includes the IP address of the PE and default-group to which the PE belongs.
Step Command Remarks Enter system view. system-view Enter BGP instance view. bgp as-number Enter BGP IPv4 MDT address-family ipv4 mdt address family view. By default, neither route reflectors Configure the router as a nor clients exist. route reflector and specify a peer { group-name | ip-address For more information about this peer or peer group as its...
Multicast VPN configuration examples This section provides examples of configuring multicast VPN on switches. Intra-AS MD-VPN configuration example Network requirements Item Network requirements • In VPN instance a, S 1 is a multicast source, and R 1, R 2 and R 3 are receivers. •...
Page 200
Figure 68 Network diagram VPN a Loop1 VPN b CE a2 VPN a Vlan-int30 Loop1 CE b1 Vlan-int50 Loop1 Loop1 CE a3 PE 2 Vlan-int19 Vlan-int19 PE 3 Loop2 Vlan-int60 PE 1 CE a1 CE b2 Public Vlan-int10 Loop1 VPN b VPN a Table 16 Interface and IP address assignment Device...
Page 201
# Configure a Router ID globally, and enable IP multicast routing on the public network. <PE1> system-view [PE1] router id 1.1.1.1 [PE1] multicast routing [PE1-mrib] quit # Configure an MPLS LSR ID, and enable the LDP capability. [PE1] mpls lsr-id 1.1.1.1 [PE1] mpls ldp [PE1-ldp] quit # Create VPN instance a and configure an RD and route target attributes for it.
Page 202
[PE1] interface vlan-interface 11 [PE1-Vlan-interface11] ip binding vpn-instance a [PE1-Vlan-interface11] ip address 10.110.2.1 24 [PE1-Vlan-interface11] pim sm [PE1-Vlan-interface11] quit # Assign an IP address to Loopback 1, and enable PIM-SM on this interface. [PE1] interface loopback 1 [PE1-LoopBack1] ip address 1.1.1.1 32 [PE1-LoopBack1] pim sm [PE1-LoopBack1] quit # Configure BGP.
Page 203
# Create VPN instance b and configure an RD and route target attributes for it. [PE2] ip vpn-instance b [PE2-vpn-instance-b] route-distinguisher 200:1 [PE2-vpn-instance-b] vpn-target 200:1 export-extcommunity [PE2-vpn-instance-b] vpn-target 200:1 import-extcommunity [PE2-vpn-instance-b] quit # Create service loopback group 1, and specify its type as multicast tunnel. [PE2] service-loopback group 1 type multicast-tunnel # Select an unused interface, and assign the interface to service loopback group 1.
Page 204
[PE2] interface vlan-interface 13 [PE2-Vlan-interface13] ip binding vpn-instance b [PE2-Vlan-interface13] ip address 10.110.3.1 24 [PE2-Vlan-interface13] pim sm [PE2-Vlan-interface13] quit # Bind VLAN-interface 14 with VPN instance a, assign an IP address to VLAN-interface 14, and enable PIM-SM on the interface. [PE2] interface vlan-interface 14 [PE2-Vlan-interface14] ip binding vpn-instance a [PE2-Vlan-interface14] ip address 10.110.4.1 24...
Page 205
[PE2-rip-2] network 10.0.0.0 [PE2-rip-2] import-route bgp [PE2-rip-2] quit [PE2] rip 3 vpn-instance b [PE2-rip-3] network 10.0.0.0 [PE2-rip-3] import-route bgp [PE2-rip-3] return Configure PE 3: # Configure a Router ID globally, and enable IP multicast routing on the public network. <PE3> system-view [PE3] router id 1.1.1.3 [PE3] multicast routing [PE3-mrib] quit...
Page 206
# Create the MD for VPN instance b, and specify the default-group, MD source interface, and data-group address range for it. [PE3] multicast-domain vpn-instance b [PE3-md-b] default-group 239.2.2.2 [PE3-md-b] source loopback 1 [PE3-md-b] data-group 225.4.4.0 28 [PE3-md-b] quit # Assign an IP address to the public network interface VLAN-interface 19, and enable PIM-SM, MPLS capability, and LDP capability on it.
Page 207
[PE3-bgp] peer vpn-g connect-interface loopback 1 [PE3-bgp] peer 1.1.1.1 group vpn-g [PE3-bgp] peer 1.1.1.2 group vpn-g [PE3–bgp] ip vpn-instance a [PE3-bgp-a] address-family ipv4 [PE3-bgp-ipv4-a] import-route rip 2 [PE3-bgp-ipv4-a] import-route direct [PE3-bgp-ipv4-a] quit [PE3-bgp-a] quit [PE3–bgp] ip vpn-instance b [PE3-bgp-b] address-family ipv4 [PE3-bgp-ipv4-b] import-route rip 3 [PE3-bgp-ipv4-b] import-route direct [PE3-bgp-ipv4-b] quit...
Page 208
[P-Vlan-interface12] ip address 192.168.6.2 24 [P-Vlan-interface12] pim sm [P-Vlan-interface12] mpls enable [P-Vlan-interface12] mpls ldp enable [P-Vlan-interface12] quit # Assign an IP address to the public network interface VLAN-interface 15, and enable PIM-SM, MPLS capability, and LDP capability on it. [P] interface vlan-interface 15 [P-Vlan-interface15] ip address 192.168.7.2 24 [P-Vlan-interface15] pim sm [P-Vlan-interface15] mpls enable...
Page 209
[CEa1-Vlan-interface11] ip address 10.110.2.2 24 [CEa1-Vlan-interface11] pim sm [CEa1-Vlan-interface11] quit # Configure RIP. [CEa1] rip 2 [CEa1-rip-2] network 10.0.0.0 Configure CE b1: # Enable IP multicast routing. <CEb1> system-view [CEb1] multicast routing [CEb1-mrib] quit # Assign an IP address to VLAN-interface 30, and enable PIM-SM on this interface. [CEb1] interface vlan-interface 30 [CEb1-Vlan-interface30] ip address 10.110.8.1 24 [CEb1-Vlan-interface30] pim sm...
Page 210
[CEa2-LoopBack1] pim sm [CEa2-LoopBack1] quit # Configure Loopback 1 as a BSR and RP for VPN instance a. [CEa2] pim [CEa2-pim] c-bsr 22.22.22.22 [CEa2-pim] c-rp 22.22.22.22 [CEa2-pim] quit # Configure RIP. [CEa2] rip 2 [CEa2-rip-2] network 10.0.0.0 [CEa2-rip-2] network 22.0.0.0 Configure CE a3: # Enable IP multicast routing.
[CEb2-Vlan-interface18] pim sm [CEb2-Vlan-interface18] quit # Configure RIP. [CEb2] rip 3 [CEb2-rip-3] network 10.0.0.0 Verifying the configuration # Display information about the default-groups in VPN instances on PE 1. [PE1] display multicast-domain default-group Group address Source address Interface VPN instance 239.1.1.1 1.1.1.1 MTunnel0...
Page 212
Item Network requirements • Enable IP multicast routing on CE a1, CE a2, CE b1, and CE b2. • Run IGMPv2 on VLAN-interface 30 of CE a2. IGMP • Run IGMPv2 on VLAN-interface 40 of CE b2. • Enable PIM-SM on all public network interfaces of PE 2 and PE 3. •...
Page 213
Devic Interface IP address Device Interface IP address PE 2 Vlan-int2 10.10.1.2/24 PE 4 Vlan-int4 10.10.2.2/24 PE 2 Vlan-int3 192.168.1.1/24 PE 4 Vlan-int13 10.11.3.1/24 PE 2 Loop1 1.1.1.2/32 PE 4 Vlan-int14 10.11.4.1/32 PE 2 Loop2 Loop2 11.11.11.11/32 PE 4 1.1.1.4/32 CE a1 Vlan-int10 10.11.5.1/24...
Page 214
# Create VPN instance b and configure an RD and route target attributes for it. [PE1] ip vpn-instance b [PE1-vpn-instance-b] route-distinguisher 200:1 [PE1-vpn-instance-b] vpn-target 200:1 export-extcommunity [PE1-vpn-instance-b] vpn-target 200:1 import-extcommunity [PE1-vpn-instance-b] quit # Enable IP multicast routing in VPN instance b. [PE1] multicast routing vpn-instance b [PE1-mrib-b] quit # Create the MD for VPN instance b, and specify the default-group, MD source interface, and...
Page 215
[PE1-bgp] group pe1-pe4 external [PE1-bgp] peer pe1-pe4 as-number 200 [PE1-bgp] peer pe1-pe4 ebgp-max-hop 255 [PE1-bgp] peer pe1-pe4 connect-interface loopback 1 [PE1-bgp] peer 1.1.1.4 group pe1-pe4 [PE1–bgp] ip vpn-instance a [PE1-bgp-a] address-family ipv4 [PE1-bgp-ipv4-a] import-route ospf 2 [PE1-bgp-ipv4-a] import-route direct [PE1-bgp-ipv4-a] quit [PE1-bgp-a] quit [PE1–bgp] ip vpn-instance b [PE1-bgp-b] address-family ipv4...
Page 216
[PE2] multicast routing [PE2-mrib] quit # Configure an MPLS LSR ID, and enable the LDP capability. [PE2] mpls lsr-id 1.1.1.2 [PE2] mpls ldp [PE2-ldp] quit # Assign an IP address to the public network interface VLAN-interface 2, and enable PIM-SM, MPLS capability, and LDP capability on it.
Page 218
[PE3-Vlan-interface4] mpls enable [PE3-Vlan-interface4] mpls ldp enable [PE3-Vlan-interface4] quit # Assign an IP address to the public network interface VLAN-interface 3, and enable PIM-SM and MPLS on it. [PE3] interface vlan-interface 3 [PE3-Vlan-interface3] ip address 192.168.1.2 24 [PE3-Vlan-interface3] pim sm [PE3-Vlan-interface3] mpls enable [PE3-Vlan-interface3] quit # Assign an IP address to Loopback 1, and enable PIM-SM on this interface.
Page 220
# Create the MD for VPN instance a, and specify the default-group, MD source interface, and data-group address range for it. [PE4] multicast-domain vpn-instance a [PE4-md-a] default-group 239.1.1.1 [PE4-md-a] source loopback 1 [PE4-md-a] data-group 225.1.1.0 28 [PE4-md-a] quit # Create VPN instance b and configure an RD and route target attributes for it. [PE4] ip vpn-instance b [PE4-vpn-instance-b] route-distinguisher 200:1 [PE4-vpn-instance-b] vpn-target 200:1 export-extcommunity...
Page 221
[PE4-LoopBack1] quit # Configure BGP. [PE4] bgp 200 [PE4-bgp] group pe4-pe3 internal [PE4-bgp] peer pe4-pe3 connect-interface loopback 1 [PE4-bgp] peer 1.1.1.3 group pe4-pe3 [PE4-bgp] group pe4-pe1 external [PE4-bgp] peer pe4-pe1 as-number 100 [PE4-bgp] peer pe4-pe1 ebgp-max-hop 255 [PE4-bgp] peer pe4-pe1 connect-interface loopback 1 [PE4-bgp] peer 1.1.1.1 group pe4-pe1 [PE4–bgp] ip vpn-instance a [PE4-bgp-a] address-family ipv4...
Page 222
[PE4-ospf-3-area-0.0.0.0] quit [PE4-ospf-3] quit Configure CE a1: # Enable IP multicast routing. <CEa1> system-view [CEa1] multicast routing [CEa1-mrib] quit # Assign an IP address to VLAN-interface 10, and enable PIM-SM on this interface. [CEa1] interface vlan-interface 10 [CEa1-Vlan-interface10] ip address 10.11.5.1 24 [CEa1-Vlan-interface10] pim sm [CEa1-Vlan-interface10] quit # Assign an IP address to VLAN-interface 11, and enable PIM-SM on this interface.
Page 223
[CEb1-Vlan-interface12] pim sm [CEb1-Vlan-interface12] quit # Configure OSPF. [CEb1] ospf 1 [CEb1-ospf-1] area 0.0.0.0 [CEb1-ospf-1-area-0.0.0.0] network 10.11.0.0 0.0.255.255 [CEb1-ospf-1-area-0.0.0.0] quit [CEb1-ospf-1] quit Configure CE a2: # Enable IP multicast routing. <CEa2> system-view [CEa2] multicast routing [CEa2-mrib] quit # Assign an IP address to VLAN-interface 30, and enable IGMP on this interface. [CEa2] interface vlan-interface 30 [CEa2-Vlan-interface30] ip address 10.11.7.1 24 [CEa2-Vlan-interface30] igmp enable...
between the VPN instance on the local PE device and the same VPN instance on the remote PE device. • BGP and unicast route configurations are prerequisites for PIM to obtain correct routing information. PIM can only be enabled on the MTI interface if at least one interface of the VPN instance is enabled with PIM.
Configuring MLD snooping Overview MLD snooping runs on a Layer 2 switch as an IPv6 multicast constraining mechanism to improve multicast forwarding efficiency. It creates Layer 2 multicast forwarding entries from MLD messages that are exchanged between the hosts and the router. As shown in Figure 70, when MLD snooping is not enabled, the Layer 2 switch floods IPv6 multicast...
Page 227
Figure 71 MLD snooping related ports The following describes the ports involved in MLD snooping, as shown in Figure • Router port—Layer 3 multicast device-side port. Layer 3 multicast devices include designated routers and MLD queriers. In Figure 71, FortyGigE 1/0/1 of Switch A and FortyGigE 1/0/1 of Switch B are the router ports.
How MLD snooping works The ports in this section are dynamic ports. For information about how to configure and remove static ports, see "Configuring static ports." MLD messages include general query, MLD report, and done message. An MLD snooping-enabled switch performs differently depending on the MLD message. General query The MLD querier periodically sends MLD general queries to all hosts and routers on the local subnet to check for the existence of IPv6 multicast group members.
• If a match is found and the receiving port is not the only outgoing interface in the forwarding entry, the switch performs the following actions: Discards the MLD done message. Sends an MLD multicast-address-specific query to identify whether the group has active listeners attached to the receiving port.
MLD snooping configuration task list Tasks at a glance Configuring basic MLD snooping features: • (Required.) Enabling MLD snooping • (Optional.) Specifying an MLD snooping version • (Optional.) Setting the maximum number of MLD snooping forwarding entries • (Optional.) Setting the MLD last listener query interval Configuring MLD snooping port features: •...
You can enable MLD snooping for the specified VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the configuration in VLAN interface has the same priority as the configuration in MLD-snooping view, and the most recent configuration takes effect. Enabling MLD snooping in MLD-snooping view Step Command...
Step Command Remarks Specify an MLD snooping version version-number vlan version for the specified The default setting is 1. vlan-list VLANs. Specifying an MLD snooping version in VLAN view Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Specify an MLD snooping mld-snooping version The default setting is 1.
Setting the MLD last listener query interval globally Step Command Remarks Enter system view. system-view Enter MLD-snooping view. mld-snooping Set the MLD last listener The default setting is 1 last-listener-query-interval interval query interval globally. second. Setting the MLD last listener query interval in a VLAN Step Command Remarks...
Step Command Remarks Set the aging timer for The default setting is 260 dynamic router ports router-aging-time interval seconds. globally. Set the aging timer for The default setting is 260 dynamic member ports host-aging-time interval seconds. globally. Setting the aging timers for dynamic ports in a VLAN Step Command Remarks...
Configuring a port as a simulated member host When a port is configured as a simulated member host, it is equivalent to an independent host in the following ways: • It sends an unsolicited MLD report when you complete the configuration. •...
Step Command Remarks Enter Layer 2 Ethernet interface interface-type interface view or Layer 2 interface-number aggregate interface view. Enable fast-leave mld-snooping fast-leave [ vlan By default, fast-leave processing processing on the port. vlan-list ] is disabled for a port. Disabling a port from becoming a dynamic router port A receiver host might send MLD general queries or IPv6 PIM hello messages for testing purposes.
Enabling the MLD snooping querier This feature enables the switch to periodically send MLD general queries to establish and maintain multicast forwarding entries at the data link Layer. You can configure an MLD snooping querier on a network without Layer 3 multicast devices. When you enable the MLD snooping querier, follow these guidelines: •...
Configuring parameters for MLD general queries and responses in a VLAN Step Command Remarks Enter system view. system-view Enter VLAN view. vlan vlan-id Set the MLD general query The default setting is 125 mld-snooping query-interval interval for the VLAN. seconds. interval Set the maximum response mld-snooping...
Step Command Remarks By default, if the MLD snooping querier has received MLD general queries, the source IPv6 address of MLD multicast-address-specific queries is the source IPv6 Configure the source IPv6 address of MLD general queries. address for MLD mld-snooping special-query Otherwise, it is the IPv6 link-local multicast-address-specific source-ip ipv6-address...
Configuring MLD snooping policies Before you configure MLD snooping policies, complete the following tasks: • Enable MLD snooping for the VLAN. • Determine the ACL used as the IPv6 multicast group policy. • Determine the maximum number of IPv6 multicast groups that a port can join. Configuring an IPv6 multicast group policy This feature enables the switch to filter MLD reports by using an ACL that specifies IPv6 multicast groups and the optional sources.
Enabling IPv6 multicast source port filtering globally Step Command Remarks Enter system view. system-view Enter MLD-snooping view. mld-snooping Enable IPv6 multicast By default, IPv6 multicast source source-deny port interface-list source port filtering. port filtering is disabled. Enabling IPv6 multicast source port filtering on a port Step Command Remarks...
Setting the maximum number of IPv6 multicast groups on a port You can set the maximum number of IPv6 multicast groups on a port to regulate the port traffic. Configuration guidelines When you set the maximum number of IPv6 multicast groups on a port, follow these guidelines: •...
Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface interface-type interface view or Layer 2 interface-number aggregate interface view. Enable the IPv6 multicast By default, the IPv6 multicast mld-snooping overflow-replace group replacement feature group replacement feature is [ vlan vlan-list ] on the port.
MLD snooping configuration examples IPv6 group policy configuration example Network requirements As shown in Figure 72, Router A runs MLDv1 and acts as the MLD querier, and Switch A runs MLDv1 snooping. Configure a group policy to meet the following requirements: •...
# Enable MLD snooping globally. <SwitchA> system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, and assign FortyGigE 1/0/1 through FortyGigE 1/0/4 to the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port fortygige 1/0/1 to fortygige 1/0/4 # Enable MLD snooping for VLAN 100. [SwitchA-vlan100] mld-snooping enable # Enable dropping IPv6 unknown multicast data for VLAN 100.
Page 246
• To enhance the reliability of IPv6 multicast traffic transmission, configure FortyGigE 1/0/3 and FortyGigE 1/0/5 on Switch C as static member ports for the IPv6 multicast group FF1E::101. • Suppose the STP runs on the network. To avoid data loops, the forwarding path from Switch A to Switch C is blocked under normal conditions.
Page 247
[RouterA-FortyGigE1/0/2] ipv6 pim dm [RouterA-FortyGigE1/0/2] quit Configure Switch A: # Enable MLD snooping globally. <SwitchA> system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, and assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port fortygige 1/0/1 to fortygige 1/0/3 # Enable MLD snooping for VLAN 100.
Verifying the configuration # Display static router port information in VLAN 100 on Switch A. [SwitchA] display mld-snooping static-router-port vlan 100 VLAN 100: Router slots (1 in total): Router ports (1 in total): FGE1/0/3 The output shows that FortyGigE 1/0/3 on Switch A has become a static router port. # Display static MLD snooping forwarding entries in VLAN 100 on Switch C.
Page 249
Figure 74 Network diagram Source 1 Source 2 VLAN 100 1::10/64 1::20/64 Receiver Receiver FGE1/0/2 FGE1/0/2 FGE1/0/1 FGE1/0/3 FGE1/0/3 FGE1/0/1 Host A Host B FGE1/0/4 Switch A Switch B Querier Receiver Receiver FGE1/0/2 FGE1/0/1 FGE1/0/2 FGE1/0/3 FGE1/0/1 Host D Host C Switch D Switch C Configuration procedure...
Page 250
# Enable MLD snooping globally. <SwitchC> system-view [SwitchC] mld-snooping [SwitchC-mld-snooping] quit # Create VLAN 100, and assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to the VLAN. [SwitchC] vlan 100 [SwitchC-vlan100] port fortygige 1/0/1 to fortygige 1/0/3 # Enable MLD snooping for VLAN 100. [SwitchC-vlan100] mld-snooping enable # Enable dropping unknown multicast packets for VLAN 100.
Troubleshooting MLD snooping Layer 2 multicast forwarding cannot function Symptom Layer 2 multicast forwarding cannot function through MLD snooping. Solution To resolve the problem: Use the display mld-snooping command to display MLD snooping status. If MLD snooping is not enabled, use the mld-snooping command in system view to enable MLD snooping globally.
Configuring IPv6 PIM snooping Overview IPv6 PIM snooping runs on Layer 2 devices. It works with MLD snooping to analyze received IPv6 PIM messages, and adds the ports that are interested in specific multicast data to an IPv6 PIM snooping routing entry. In this way, the multicast data can be forwarded to only the ports that are interested in the data.
b. Broadcasts all other types of received IPv6 PIM messages except PIM hello messages in the VLAN. c. Forwards all multicast data to all router ports in the VLAN. Each IPv6 PIM-capable router in the VLAN, whether interested in the multicast data or not, can receive all multicast data and all IPv6 PIM messages except IPv6 PIM hello messages.
Displaying and maintaining IPv6 PIM snooping Execute display commands in any view and reset commands in user view. Task Command Display IPv6 PIM snooping neighbor display ipv6 pim-snooping neighbor [ vlan vlan-id ] [ slot information. slot-number ] [ verbose ] Display IPv6 PIM snooping routing display ipv6 pim-snooping routing-table [ vlan vlan-id ] [ slot entries.
Page 255
Configuration procedure Assign an IPv6 address and prefix length for each interface according to Figure 76. (Details not shown.) Configure OSPFv3 on all the routers. (Details not shown.) Configure Router A: # Enable IPv6 multicast routing globally. <RouterA> system-view [RouterA] ipv6 multicast routing [RouterA-mrib6] quit # Enable IPv6 PIM-SM on each interface.
The output shows that Router A, Router B, Router C, and Router D are IPv6 PIM snooping neighbors. # On Switch A, display IPv6 PIM snooping routing entries for VLAN 100. [SwitchA] display pim-snooping ipv6 routing-table vlan 100 Total 2 entries. FSM flag: NI-no info, J-join, PP-prune pending VLAN 100: Total 2 entries.
Page 258
If MLD snooping is not enabled, enable MLD snooping globally, and then enable MLD snooping and IPv6 PIM snooping for the VLAN. If IPv6 PIM snooping is not enabled, enable IPv6 PIM snooping for the VLAN. If the problem persists, contact Hewlett Packard Enterprise Support.
Configuring IPv6 multicast VLANs Overview As shown in Figure 77, Host A, Host B, and Host C are in different VLANs and the same IPv6 multicast group. When Switch A (Layer 3 device) receives IPv6 multicast data for that group, it sends three copies of the data to Switch B (Layer 2 device).
Page 260
Figure 78 Sub-VLAN-based multicast VLAN MLD snooping manages router ports in the IPv6 multicast VLAN and member ports in each sub-VLAN. When Switch A receives IPv6 multicast data from the multicast source, it sends only one copy of the IPv6 multicast data to the IPv6 multicast VLAN on Switch B. Then, Switch B sends a separate copy to each sub-VLAN of the IPv6 multicast VLAN.
IPv6 multicast VLAN configuration task list Tasks at a glance (Required.) Perform one of the following tasks: • Configuring a sub-VLAN-based IPv6 multicast VLAN • Configuring a port-based IPv6 multicast VLAN Configuring user port attributes Assigning user ports to an IPv6 multicast VLAN (Optional.) Setting the maximum number of IPv6 multicast VLAN forwarding entries If you have configured both a sub-VLAN-based IPv6 multicast VLAN and a port-based IPv6 multicast...
Configuring a port-based IPv6 multicast VLAN To configure a port-based IPv6 multicast VLAN, perform the following steps: Configure a VLAN as an IPv6 multicast VLAN. Configure the attributes for user ports that are connected to the multicast receivers. Assign the user ports to the IPv6 multicast VLAN. You can assign only Layer 2 Ethernet interfaces and Layer 2 aggregate interfaces as user ports to an IPv6 multicast VLAN.
Assigning ports to an IPv6 multicast VLAN in IPv6 multicast VLAN view Step Command Remarks Enter system view. system-view Configure an IPv6 VLAN as By default, a VLAN is not an IPv6 an IPv6 multicast VLAN and ipv6 multicast-vlan vlan-id multicast VLAN.
IPv6 multicast VLAN 10: Total 1 entries. (::, FF1E::101) Sub-VLANs (3 in total): VLAN 2 VLAN 3 VLAN 4 The output shows that the IPv6 multicast VLAN (VLAN 10) contains sub-VLANs VLAN 2 through VLAN 4. Switch B will replicate the IPv6 multicast data of VLAN 10 to VLAN 2 through VLAN 4. Port-based IPv6 multicast VLAN configuration example Network requirements As shown in...
Page 268
[SwitchA] vlan 20 [SwitchA-vlan20] port fortygige 1/0/2 [SwitchA-vlan20] quit # Assign an IPv6 address to VLAN-interface 20, and enable IPv6 PIM-DM on the interface. [SwitchA] interface vlan-interface 20 [SwitchA-Vlan-interface20] ipv6 address 1::2 64 [SwitchA-Vlan-interface20] ipv6 pim dm [SwitchA-Vlan-interface20] quit # Create VLAN 10, and assign FortyGigE 1/0/1 to the VLAN. [SwitchA] vlan 10 [SwitchA-vlan10] port fortygige 1/0/1 [SwitchA-vlan10] quit...
Page 269
[SwitchB-FortyGigE1/0/2] quit # Configure FortyGigE 1/0/3 as a hybrid port, and configure VLAN 3 as the PVID of the hybrid port. [SwitchB] interface fortygige 1/0/3 [SwitchB-FortyGigE1/0/3] port link-type hybrid [SwitchB-FortyGigE1/0/3] port hybrid pvid vlan 3 # Assign FortyGigE 1/0/3 to VLAN 3 and VLAN 10 as an untagged VLAN member. [SwitchB-FortyGigE1/0/3] port hybrid vlan 3 untagged [SwitchB-FortyGigE1/0/3] port hybrid vlan 10 untagged [SwitchB-FortyGigE1/0/3] quit...
Page 270
FGE1/0/2 (00:03:23) FGE1/0/3 (00:04:07) FGE1/0/4 (00:04:16) The output shows that MLD snooping maintains the user ports in VLAN 10. Switch B will forward the IPv6 multicast data of VLAN 10 through these user ports.
Configuring IPv6 multicast routing and forwarding Overview IPv6 multicast routing and forwarding uses the following tables: • IPv6 multicast protocols' routing tables, such as the IPv6 PIM routing table. • General IPv6 multicast routing table that summarizes the multicast routing information generated by different IPv6 multicast routing protocols.
Page 272
the incoming interface of the (S, G) forwarding entry. After the router receives another (S, G) packet, it looks up its IPv6 multicast forwarding table for the matching (S, G) entry: • If a match is not found, the router first determines the RPF route back to the packet source. Then, it creates a forwarding entry with the RPF interface as the incoming interface and performs one of the following tasks: If the receiving interface is the RPF interface, the router forwards the packet out of all...
IPv6 multicast forwarding across IPv6 unicast subnets Routers forward the IPv6 multicast data from an IPv6 multicast source hop by hop along the forwarding tree, but some routers might not support IPv6 multicast protocols in a network. When the IPv6 multicast data is forwarded to a router that does not support IPv6 multicast, the forwarding path is blocked.
Configuring IPv6 multicast routing and forwarding Before you configure IPv6 multicast routing and forwarding, complete the following tasks: • Configure an IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer. • Configure IPv6 PIM-DM or IPv6 PIM-SM. Specifying the longest prefix match principle You can enable the IPv6 multicast router to use the longest prefix match principle for RPF route selection.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number ipv6 multicast boundary Configure the interface as By default, the interface is not { ipv6-group-address prefix-length | an IPv6 multicast configured as an IPv6 multicast scope { scope-id | admin-local | forwarding boundary for an forwarding boundary for any global | organization-local |...
Configuring IPv6 multicast forwarding among sub-VLANs of a super VLAN A super VLAN is associated with multiple sub-VLANs. Sub-VLANs are isolated with each other at Layer 2. For information about the super VLAN and sub-VLANs, see Layer 2—LAN Switching Configuration Guide. To configure multicast forwarding among sub-VLANs of a super VLAN: Step Command...
Task Command ipv6-group-address [ prefix-length ] | incoming-interface interface-type interface-number | outgoing-interface { exclude | include | match } interface-type interface-number | slot slot-number | statistics ] * display ipv6 multicast [ vpn-instance vpn-instance-name ] Display information about the DF list in the forwarding-table df-list [ ipv6-group-address ] [ verbose ] IPv6 multicast forwarding table.
Page 278
Figure 84 Network diagram Configuration procedure Assign an IPv6 address and prefix length to each interface as shown in Figure 84. (Details not shown.) Configure OSPFv3 on all the switches. (Details not shown.) Configure a GRE tunnel: # Create service loopback group 1 on Switch A and specify its service type as Tunnel. <SwitchA>...
Page 279
[SwitchC-Tunnel0] source 3001::2 [SwitchC-Tunnel0] destination 2001::1 [SwitchC-Tunnel0] quit Enable IPv6 multicast routing, IPv6 PIM-DM, and MLD: # On Switch A, enable IPv6 multicast routing, and enable IPv6 PIM-DM on each interface. [SwitchA] ipv6 multicast routing [SwitchA-mrib6] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] ipv6 pim dm [SwitchA-Vlan-interface100] quit [SwitchA] interface vlan-interface 101...
Page 280
Protocol: mld, UpTime: 00:04:25, Expires: - (1001::100, FF1E::101) Protocol: pim-dm, Flag: ACT UpTime: 00:06:14 Upstream interface: Tunnel0 Upstream neighbor: FE80::A01:101:1 RPF prime neighbor: FE80::A01:101:1 Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface200 Protocol: pim-dm, UpTime: 00:04:25, Expires: - The output shows that Switch A is the RPF neighbor of Switch C and the IPv6 multicast data from Switch A is delivered over a GRE tunnel to Switch C.
Configuring MLD Overview Multicast Listener Discovery (MLD) establishes and maintains IPv6 multicast group memberships between a Layer 3 multicast device and hosts on the directly connected subnet. MLD has the following versions: • MLDv1 (defined by RFC 2710), which is derived from IGMPv2. •...
Page 282
Joining an IPv6 multicast group Figure 85 MLD queries and reports As shown in Figure 85, Host B and Host C are interested in the IPv6 multicast data addressed to IPv6 multicast group G1. Host A is interested in the IPv6 multicast data addressed to G2. The following process describes how the hosts join the IPv6 multicast groups and how the MLD querier (Router B in Figure...
After receiving the MLD done message, the querier sends a configurable number of multicast-address-specific queries to the group that the host is leaving. The IPv6 multicast addresses queried include both the destination address field and the group address field of the message.
• Filter mode—Router keeps tracing the Include or Exclude state. • List of sources—Router keeps tracing the newly added or deleted IPv6 multicast source. • Timers—Filter timers, which include the time that the router waits before switching to the Include mode after an IPv6 multicast address times out, and the source timer for source recording.
Enabling MLD Enable MLD on the interface on which IPv6 multicast group memberships are created and maintained. To enable MLD: Step Command Remarks Enter system view. system-view ipv6 multicast routing Enable IPv6 multicast routing By default, IPv6 multicast routing [ vpn-instance and enter IPv6 MRIB view.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, the interface is not a mld static-group Configure the interface as a ipv6-group-address [ source static member of any IPv6 static group member. ipv6-source-address ] multicast groups.
Page 287
interval at which a querier sends multicast-address-and-source-specific queries after receiving a report that changes IPv6 multicast source and group mappings. • MLD last listener query count—In MLDv1, it sets the number of multicast-address-specific queries that the querier sends after receiving a done message. In MLDv2, it sets the number of multicast-address-and-source-specific queries that the querier sends after receiving a report that changes IPv6 multicast group and source mappings.
Step Command Remarks By default, the MLD other querier present timer is [ MLD general 10. Set the MLD other querier query interval ] × [ MLD other-querier-present-timeout present timer. robustness variable ] + [ maximum time response time for MLD general queries ] / 2.
Step Command Remarks Enable fast-leave mld fast-leave [ group-policy By default, fast-leave processing processing. acl6-number ] is disabled. Configuring MLD SSM mappings This feature enables the switch to provide SSM services for MLDv1 hosts. This feature does not process MLDv2 messages. As a best practice, enable MLDv2 on the receiver-side interface to ensure that MLDv2 reports can be processed.
Displaying and maintaining MLD CAUTION: The reset mld group command might cause IPv6 multicast data transmission failures. Execute display commands in any view and reset commands in user view. Task Command display mld [ vpn-instance vpn-instance-name ] Display information about MLD groups. group [ ipv6-group-address | interface interface-type interface-number ] [ static | verbose ] display mld [ vpn-instance vpn-instance-name ]...
Page 291
Figure 87 Network diagram Receiver IPv6 PIM-DM Host A Vlan-int100 3000::12/64 Switch A Host B Querier Vlan-int200 3001::10/64 Receiver Host C Switch B Vlan-int200 3001::12/64 Host D Switch C Configuration procedure Assign an IPv6 address and prefix length to each interface as shown in Figure 87.
Page 293
Configure the MLD SSM mapping feature on Switch D so that the receiver host will receive IPv6 multicast data only from Source 1 and Source 3. Figure 88 Network diagram Source 2 Source 3 Switch B Switch C Vlan-int200 Vlan-int102 Vlan-int300 Vlan-int102 Vlan-int103...
Page 294
[SwitchD-Vlan-interface104] ipv6 pim sm [SwitchD-Vlan-interface104] quit # On Switch A, enable IPv6 multicast routing. <SwitchA> system-view [SwitchA] ipv6 multicast routing [SwitchA-mrib6] quit # Enable IPv6 PIM-SM on each interface. [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] ipv6 pim sm [SwitchA-Vlan-interface100] quit [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 104...
• If the MLD version on the router interface is lower than that on the host, the router cannot recognize the MLD report from the host. • If the mld group-policy command has been configured on an interface, the interface cannot receive report messages that fail to pass filtering.
Configuring IPv6 PIM Overview IPv6 Protocol Independent Multicast (IPv6 PIM) provides IPv6 multicast forwarding by leveraging IPv6 unicast static routes or IPv6 unicast routing tables generated by any IPv6 unicast routing protocol, such as RIPng, OSPFv3, IPv6 IS-IS, or IPv6 BGP. IPv6 PIM uses the underlying IPv6 unicast routing to generate an IPv6 multicast routing table without relying on any particular IPv6 unicast routing protocol.
Page 298
data to all downstream nodes in the network. In the flooding process, all the routers in the IPv6 PIM-DM domain create the (S, G) entry. The nodes without downstream receivers are pruned. A router that has no downstream receivers multicasts a prune message to all IPv6 PIM routers on the subnet. When the upstream node receives the prune message, it removes the receiving interface from the (S, G) entry.
Assert On a subnet with more than one multicast router, the assert mechanism shuts off duplicate multicast flows to the network. It does this by electing a unique multicast forwarder for the subnet. Figure 90 Assert mechanism As shown in Figure 90, after Router A and Router B receive an (S, G) packet from the upstream node, they both forward the packet to the local subnet.
Page 300
DR election A DR is required on both the source-side network and receiver-side network. A source-side DR acts on behalf of the IPv6 multicast source to send register messages to the RP. The receiver-side DR acts on behalf of the receiver hosts to send join messages to the RP. IMPORTANT: MLD must be enabled on the device that acts as the receiver-side DR.
Page 301
NOTE: • An RP can provide services for multiple IPv6 multicast groups, but an IPv6 multicast group only uses one RP. • A device can act as a C-RP and a C-BSR at the same time. As shown in Figure 92, each C-RP periodically unicasts its advertisement messages (C-RP-Adv messages) to the BSR.
Page 302
RPT building Figure 93 RPT building in an IPv6 PIM-SM domain Host A Source Receiver Host B Server Receiver Join message IPv6 multicast packets Host C As shown in Figure 93, the process of building an RPT is as follows: When a receiver wants to join the IPv6 multicast group G, it uses an MLD message to inform the receiver-side DR.
Page 303
Figure 94 IPv6 multicast source registration As shown in Figure 94, the IPv6 multicast source registers with the RP as follows: The IPv6 multicast source S sends the first multicast packet to the IPv6 multicast group G. When receiving the multicast packet, the source-side DR that directly connects to the IPv6 multicast source encapsulates the packet into an register message and unicasts the message to the RP.
• The RP initiates the switchover to SPT: After receiving the first (S, G) multicast packet, the RP immediately sends an (S, G) source-specific join message toward the IPv6 multicast source. The routers along the path from the RP to the IPv6 multicast source constitute an SPT branch. The subsequent IPv6 multicast data for the IPv6 multicast group is forwarded to the RP along the SPT without being encapsulated in register messages.
Page 305
DF election On a subnet with multiple multicast routers, duplicate multicast packets might be forwarded to the RP. To address this issue, IPv6 BIDIR-PIM uses a designated forwarder (DF) election mechanism to elect a unique DF on each subnet. Only the DFs can forward IPv6 multicast data to the RP. DF election is not necessary for an RPL.
Page 306
Figure 96 RPT building at the receiver side As shown in Figure 96, the process for building a receiver-side RPT is the same as the process for building an RPT in IPv6 PIM-SM: When a receiver wants to join the IPv6 multicast group G, it uses an MLD message to inform the directly connected router.
Figure 97 RPT building at the IPv6 multicast source side As shown in Figure 97, the process for building a source-side RPT is relatively simple: When an IPv6 multicast source sends multicast packets to the IPv6 multicast group G, the DF in each subnet unconditionally forwards the packets to the RP.
Page 308
with the same scope field value. IPv6 multicast protocol packets, such as assert messages and BSMs, of these IPv6 multicast groups cannot cross the boundary of the IPv6 admin-scoped zone for the group range. The IPv6 multicast group ranges to which different IPv6 admin-scoped zones are designated can have intersections.
Figure 99 IPv6 multicast address format An IPv6 admin-scoped zone with a larger scope field value contains an IPv6 admin-scoped zone with a smaller scope field value. The zone with the scope field value of E is the IPv6 global-scoped zone. Table 19 lists the possible values of the scope field.
SPT building The decision to build an RPT for IPv6 PIM-SM or an SPT for IPv6 PIM-SSM depends on whether the IPv6 multicast group that the multicast receiver joins is in the IPv6 SSM group range. The IPv6 SSM group range reserved by IANA is FF3x::/32, where "x" represents any legal address scope. Figure 100 SPT building in IPv6 PIM-SSM Host A Source...
Figure 101 Relationship among IPv6 PIM protocols A receiver joins IPv6 multicast group G. G is in the IPv6 A IPv6 multicast source is SSM group range? specified? IPv6 BIDIR-PIM is enabled? IPv6 PIM-SM runs for G. G has an IPv6 BIDIR-PIM IPv6 PIM-SSM runs for G.
IPv6 PIM-DM configuration task list Tasks at a glance (Required.) Enabling IPv6 PIM-SM (Optional.) Enabling the state refresh feature (Optional.) Configuring state refresh parameters (Optional.) Configuring IPv6 PIM-DM graft retry timer (Optional.) Configuring common IPv6 PIM features Configuration prerequisites Before you configure IPv6 PIM-DM, configure an IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Enable the state refresh By default, the state refresh ipv6 pim state-refresh-capable feature. feature is enabled. Configuring state refresh parameters The state refresh interval determines the interval at which a router sends state refresh messages. It is configurable.
For more information about the configuration of other timers in IPv6 PIM-DM, see "Configuring common IPv6 PIM timers." Configuring IPv6 PIM-SM This section describes how to configure IPv6 PIM-SM. IPv6 PIM-SM configuration task list Tasks at a glance Remarks (Required.) Enabling IPv6 PIM-SM (Required.) Configuring an...
Step Command Remarks interface interface-type Enter interface view. interface-number By default, IPv6 PIM-SM is Enable IPv6 PIM-SM. ipv6 pim sm disabled. Configuring an RP An RP can provide services for multiple or all IPv6 multicast groups. However, only one RP at a time can forward IPv6 multicast traffic for an IPv6 multicast group.
Configuring IPv6 multicast source registration An IPv6 PIM register policy enables an RP to filter register messages by using an ACL that specifies the IPv6 multicast sources and groups. The policy limits the IPv6 multicast sources and groups to which an RP is designated. If a register message is denied by the ACL or does not match the ACL, the RP discards the register message and sends a register-stop message to the source-side DR.
IPv6 BIDIR-PIM configuration task list Tasks at a glance Remarks (Required.) Enabling IPv6 BIDIR-PIM (Required.) Configuring an RP: • Configuring a static RP You must configure a static RP, a C-RP, or both in an • Configuring a C-RP IPv6 BIDIR-SM domain. •...
Configuring an RP CAUTION: When both IPv6 PIM-SM and IPv6 BIDIR-PIM run on the IPv6 PIM network, do not use the same RP to provide services for IPv6 PIM-SM and IPv6 BIDIR-PIM. Otherwise, exceptions might occur to the IPv6 PIM routing table. An RP can provide services for multiple or all IPv6 multicast groups.
An advertisement message contains a holdtime option, which defines the C-RP lifetime for the advertising C-RP. After the BSR receives an advertisement message from a C-RP, it starts a timer for the C-RP. If the BSR does not receive any advertisement message when the timer expires, it considers the C-RP failed or unreachable.
Page 322
BSR address to replace its own BSR address and no longer regards itself as the BSR. The winner retains its own BSR address and continues to regard itself as the BSR. The elected BSR distributes the RP-set information collected from C-RPs to all routers in the IPv6 BIDIR-PIM domain.
a BSMF as an entire BSM and updates the RP-set information each time it receives a BSMF. It learns only part of the RP-set information, which further affects the RP election. To disable BSM semantic fragmentation: Step Command Remarks Enter system view. system-view ipv6 pim [ vpn-instance Enter IPv6 PIM view.
Step Command Remarks Enter system view. system-view ipv6 multicast routing Enable IP multicast routing, By default, IPv6 multicast routing [ vpn-instance and enter MRIB view. is disabled. vpn-instance-name ] Return to system view. quit interface interface-type Enter interface view. interface-number By default, IPv6 PIM-SM is Enable IPv6 PIM-SM.
Tasks at a glance (Optional.) Enabling BFD for IPv6 PIM (Optional.) Enabling IPv6 PIM passive mode (Optional.) Enabling IPv6 PIM NSR Configuration prerequisites Before you configure common IPv6 PIM features, complete the following tasks: • Configure an IPv6 unicast routing protocol so that all devices in the domain can interoperate at the network layer.
Configuring IPv6 PIM hello message options In either an IPv6 PIM-DM domain or an IPv6 PIM-SM domain, hello messages exchanged among routers contain the following configurable options: • DR_Priority (for IPv6 PIM-SM only)—Priority for DR election. The device with the highest priority wins the DR election.
Step Command Remarks The default setting is 2500 hello-option override-interval Set the override interval. milliseconds. interval By default, neighbor tracking is Enable neighbor tracking. hello-option neighbor-tracking disabled. Configuring hello message options on an interface Step Command Remarks Enter system view. system-view interface interface-type Enter interface view.
You can configure common IPv6 PIM timers for all interfaces in IPv6 PIM view or for the current interface in interface view. The configuration made in interface view takes priority over the configuration made in IPv6 PIM view. TIP: As a best practice, use the default settings for a network without special requirements. Configuring common IPv6 PIM timers globally Step Command...
Step Command Remarks Enter system view. system-view ipv6 pim [ vpn-instance Enter IPv6 PIM view. vpn-instance-name ] Set the maximum size of By default, the maximum size of each join or prune a join or prune message is 8100 jp-pkt-size size message.
Step Command Remarks interface interface-type Enter interface view. interface-number Enable IPv6 PIM passive By default, IPv6 PIM passive ipv6 pim passive mode on the interface. mode is disabled. Enabling IPv6 PIM NSR Use this feature to avoid route flapping and forwarding interruption for IPv6 PIM when an active/standby switchover occurs.
[SwitchD] display ipv6 pim routing-table Total 0 (*, G) entry; 1 (S, G) entry (4001::100, FF0E::101) Protocol: pim-dm, Flag: LOC ACT UpTime: 00:02:19 Upstream interface: Vlan-interface300 Upstream neighbor: NULL RPF prime neighbor: NULL Downstream interface(s) information: Total number of downstreams: 2 1: Vlan-interface103 Protocol: pim-dm, UpTime: 00:02:19, Expires: - 2: Vlan-interface102...
Page 335
Figure 103 Network diagram Table 21 Interface and IPv6 address assignment Device Interface IPv6 address Device Interface IPv6 address Switch A Vlan-int100 1001::1/64 Switch D Vlan-int300 4001::1/64 Switch A Vlan-int101 1002::1/64 Switch D Vlan-int101 1002::2/64 Switch A Vlan-int102 1003::1/64 Switch D Vlan-int105 4002::1/64 Switch B...
Page 336
[SwitchA-Vlan-interface100] quit # Enable IPv6 PIM-SM on the other interfaces. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] ipv6 pim sm [SwitchA-Vlan-interface102] quit # Enable IPv6 multicast routing, MLD, and IPv6 PIM-SM on Switch B and Switch C in the same way Switch A is configured.
Uptime: 00:11:18 # Display BSR information on Switch E. [SwitchE] display ipv6 pim bsr-info Scope: non-scoped State: Elected Bootstrap timer: 00:01:44 Elected BSR address: 1003::2 Priority: 64 Hash mask length: 126 Uptime: 00:11:18 Candidate BSR address: 1003::2 Priority: 64 Hash mask length: 126 # Display RP information on Switch A.
Page 338
Figure 104 Network diagram Table 22 Interface and IPv6 address assignment Device Interface IPv6 address Device Interface IPv6 address Switch A Vlan-int100 1001::1/64 Switch D Vlan-int105 3003::2/64 Switch A Vlan-int101 1002::1/64 Switch D Vlan-int108 6001::1/64 Switch B Vlan-int200 2001::1/64 Switch D Vlan-int107 6002::1/64 Switch B...
Page 339
Configuration procedure Assign an IPv6 address and prefix length to each interface according to Figure 104. (Details not shown.) Configure OSPFv3 on all switches in the IPv6 PIM-SM domain. (Details not shown.) Enable IPv6 multicast routing, MLD, and IPv6 PIM-SM: # On Switch A, enable IPv6 multicast routing globally.
Page 340
# On Switch C, configure VLAN-interface 103 and VLAN-interface 106 as the boundaries of IPv6 admin-scoped zone 2. <SwitchC> system-view [SwitchC] interface vlan-interface 103 [SwitchC-Vlan-interface103] ipv6 multicast boundary scope 4 [SwitchC-Vlan-interface103] quit [SwitchC] interface vlan-interface 106 [SwitchC-Vlan-interface106] ipv6 multicast boundary scope 4 [SwitchC-Vlan-interface106] quit # On Switch D, configure VLAN-interface 107 as the boundary of IPv6 admin-scoped zone 2.
RP address Priority HoldTime Uptime Expires 1002::2 (local) 00:02:03 00:02:56 # Display RP information on Switch F. [SwitchF] display ipv6 pim rp-info BSR RP information: Scope: non-scoped Group/MaskLen: FF00::/8 RP address Priority HoldTime Uptime Expires 8001::1 (local) 00:10:28 00:02:31 IPv6 BIDIR-PIM configuration example Network requirements As shown in Figure...
Page 344
Device Interface IPv6 address Device Interface IPv6 address Switch C Vlan-int103 3001::1/64 Receiver 2 — 4001::2/64 Switch C Loop0 6001::1/128 Configuration procedure Assign an IPv6 address and prefix length to each interface according to Figure 105. (Details not shown.) Configure OSPFv3 on the switches in the IPv6 BIDIR-PIM domain. (Details not shown.) Enable IPv6 multicast routing, IPv6 PIM-SM, IPv6 BIDIR-PIM, and MLD: # On Switch A, enable IPv6 multicast routing globally, enable IPv6 PIM-SM on each interface, and enable IPv6 BIDIR-PIM.
2: Vlan-interface200 # Display information about the DF for IPv6 multicast forwarding on Switch C. [SwitchC] display ipv6 multicast forwarding df-info Total 1 RP, 1 matched 00001. RP address: 6001::1 Flags: 0x0 Uptime: 00:07:21 RPF interface: LoopBack0 List of 2 DF interfaces: 1: Vlan-interface102 2: Vlan-interface103 # Display information about the DF for IPv6 multicast forwarding on Switch D.
Page 348
Figure 106 Network diagram Table 24 Interface and IPv6 address assignment Device Interface IPv6 address Device Interface IPv6 address Switch A Vlan-int100 1001::1/64 Switch D Vlan-int300 4001::1/64 Switch A Vlan-int101 1002::1/64 Switch D Vlan-int101 1002::2/64 Switch A Vlan-int102 1003::1/64 Switch D Vlan-int105 4002::1/64 Switch B...
Page 349
[SwitchA-Vlan-interface100] mld version 2 [SwitchA-Vlan-interface100] quit # Enable IPv6 PIM-SM on the other interfaces. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] ipv6 pim sm [SwitchA-Vlan-interface102] quit # Enable IPv6 multicast routing, MLD, and IPv6 PIM-SM on Switch B and Switch C in the same way Switch A is configured.
[SwitchD] display ipv6 pim routing-table Total 0 (*, G) entry; 1 (S, G) entry (4001::100, FF3E::101) Protocol: pim-ssm, Flag: LOC UpTime: 00:08:02 Upstream interface: Vlan-interface300 Upstream neighbor: NULL RPF prime neighbor: NULL Downstream interface(s) information: Total number of downstreams: 1 1: Vlan-interface105 Protocol: pim-ssm, UpTime: 00:08:02, Expires: 00:03:25 The output shows that switches on the SPT path (Switch A and Switch D) have generated the correct...
a router and the interface of the router's RPF neighbor operate in different IPv6 PIM modes, the multicast distribution tree cannot be correctly built. This causes abnormal multicast forwarding. • The same IPv6 PIM mode must run on the entire network. Otherwise, the multicast distribution tree cannot be correctly built, causing abnormal multicast forwarding.
An RP cannot join an SPT in IPv6 PIM-SM Symptom An RPT cannot be correctly built, or an RP cannot join the SPT toward the IPv6 multicast source. Analysis Possible reasons for the problem might include the following: • RPs are the core of an IPv6 PIM-SM domain. An RP provides services for a specific IPv6 multicast group, and multiple RPs can coexist on a network.
Page 353
Use display ipv6 pim rp-info to verify that the RP information is correct on each router. Use display ipv6 pim neighbor to verify that IPv6 PIM neighboring relationship has been correctly established among the routers. If the problem persists, contact Hewlett Packard Enterprise Support.
Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Bold text represents commands and keywords that you enter literally as shown. Boldface Italic text represents arguments that you replace with actual values.
Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title, part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
Page 365
PIM-DM graft retry timer, 106 IGMPv3. See IGMPv3 IP multicast VPN inter-AS MD-VPN configuration, 201 IPv6 multicast/GRE tunnel forwarding, 267 maintain, 83 multicast forwarding/GRE tunnel, 70 MLD basics configuration, 280 group MLD configuration, 271, 274, 280 IGMP snooping multicast group policy, 27 MLD SSM mapping configuration, 282 IP multicast MD-VPN default group address, 185...
Page 366
message 802.1p priority, 26 Group Management Protocol. Use IGMP message parameter configuration, 25 IP addressing message source IP address, 25 IGMP snooping message source IP address, 25 multicast group policy configuration, 27 IP multicast address, 5, 5 multicast group replacement, 29 IP multicast packet forwarding, 11 multicast groups on port max, 28 IP multicast...
Need help?
Do you have a question about the FlexFabric 5930 Series and is the answer not in the manual?
Questions and answers