Example: Configuring Proxy Rp - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Example: Configuring Proxy RP

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
You can configure a virtual router to function as a proxy rendezvous point (RP). A proxy
RP acts as the RP for groups learned from other zones. To configure a virtual router as a
proxy RP, select Proxy when configuring the RP for PIM-SM.
In this example, the hosts in the Trust zone are to receive the multicast stream for the
multicast group 224.4.4.1/32. You configure RIP as the unicast routing protocol and create
a firewall rule to pass data traffic between the Trust and Untrust zones. You create a
PIM instance on the trust-vr and enable PIM on ethernet1 in the Trust zone, and on
ethernet2 in the Untrust zone. ethernet1 is connected to the potential receivers; so, you
also configure IGMP in router mode on this interface. You then create a multicast rule
that permits PIM-SM BSR and join-prune messages between the zones.
To configure proxy RP:
Configure zones and interfaces.
1.
Configure ethernet1 and bind it to the Trust zone.
Select IGMP in router mode on ethernet1.
Configure ethernet2 and bind it to the Untrust zone.
Configure the following address objects:
2.
Multicast group IP address.
Source IP address
Configure the access list that permits traffic from multicast group 224.4.4.
Configure RIP.
3.
Create a RIP instance on the trust-vr.
Select RIP on ethernet1 and on ethernet3.
Configure PIM-SM.
4.
Create a PIM-SM instance on the trust-vr.
Select Enable in the Parameters screen.
Select PIM-SM on ethernet1 and on ethernet3.
Configure a firewall rule that permits unicast and multicast data traffic to pass between
5.
zones.
Configure a multicast rule permitting PIM-SM messages to pass between zones
6.
Access List Overview on page 298
RIP Overview on page 321
Multicast Route Overview on page 337
Chapter 10: Routing
345