Академический Документы
Профессиональный Документы
Культура Документы
V600R001C00
04
Date
2010-08-31
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the
customer. All or part of the products, services and features described in this document may not be within the
purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,
and recommendations in this document are provided "AS IS" without warranties, guarantees or representations
of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Website:
http://www.huawei.com
Email:
support@huawei.com
Issue 04 (2010-08-31)
Related Versions
The following table lists the product versions related to this document.
Product Name
Version
HUAWEI NetEngine80E/40E
Router
V600R001C00
Intended Audience
The intended audience of this document is:
l
Commissioning Engineer
Organization
This document is organized as follows.
Issue 04 (2010-08-31)
Chapter
Describes
1 IP Multicast
Configuration Guide
iii
iv
Chapter
Describes
2 IGMP Configuration
3 Layer 2 Multicast
Configuration
4 PIM-DM (IPv4)
Configuration
5 PIM-SM (IPv4)
Configuration
6 MSDP Configuration
7 MBGP Configuration
11 MLD Configuration
12 PIM-DM (IPv6)
Configuration
13 PIM-SM (IPv6)
Configuration
15 Multicast Network
Management
Issue 04 (2010-08-31)
Chapter
Describes
A Glossary
B Acronyms and
Abbreviations
Conventions
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol
Description
Indicates a hazard with a high level of risk, which if not
avoided, will result in death or serious injury.
General Conventions
The general conventions that may be found in this document are defined as follows.
Issue 04 (2010-08-31)
Convention
Description
Boldface
Italic
Convention
Description
Courier New
Command Conventions
The command conventions that may be found in this document are defined as follows.
Convention
Description
Boldface
Italic
[]
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... }*
[ x | y | ... ]*
&<1-n>
GUI Conventions
The GUI conventions that may be found in this document are defined as follows.
Convention
Description
Boldface
>
Keyboard Operations
The keyboard operations that may be found in this document are defined as follows.
vi
Issue 04 (2010-08-31)
Format
Description
Key
Press the key. For example, press Enter and press Tab.
Key 1+Key 2
Key 1, Key 2
Mouse Operations
The mouse operations that may be found in this document are defined as follows.
Action
Description
Click
Double-click
Drag
Press and hold the primary mouse button and move the
pointer to a certain position.
Update History
Updates between document issues are cumulative. Therefore, the latest document issue contains
all updates made in previous issues.
Issue 04 (2010-08-31)
vii
Contents
Contents
About This Document...................................................................................................................iii
1 IP Multicast Configuration Guide..........................................................................................1-1
1.1 IP Multicast Introduction................................................................................................................................ 1-2
1.1.1 IP Multicast Overview........................................................................................................................... 1-2
1.1.2 IP Multicast Features Supported by the NE80E/40E.............................................................................1-2
1.2 IPv4 Multicast Configuration Guide...............................................................................................................1-2
1.2.1 IPv4 Multicast Addresses.......................................................................................................................1-2
1.2.2 IPv4 Multicast Protocols........................................................................................................................1-3
1.2.3 Typical Configuration Solution..............................................................................................................1-4
1.2.4 Controlling Multicast Forwarding..........................................................................................................1-5
1.3 IPv6 Multicast Configuration Guide...............................................................................................................1-5
1.3.1 IPv6 Multicast Addresses.......................................................................................................................1-6
1.3.2 IPv6 Multicast Protocols........................................................................................................................1-8
1.3.3 Typical Configuration Solution..............................................................................................................1-9
1.3.4 Controlling Multicast Forwarding........................................................................................................1-10
2 IGMP Configuration.................................................................................................................2-1
2.1 IGMP Introduction..........................................................................................................................................2-2
2.1.1 IGMP Overview.....................................................................................................................................2-2
2.1.2 IGMP Features Supported by the NE80E/40E.......................................................................................2-2
2.2 Configuring Basic IGMP Functions................................................................................................................2-3
2.2.1 Establishing the Configuration Task......................................................................................................2-4
2.2.2 Enabling IP Multicast Routing...............................................................................................................2-5
2.2.3 Enabling Basic IGMP Functions............................................................................................................2-5
2.2.4 Configuring IGMP Version....................................................................................................................2-6
2.2.5 Configuring a Static IGMP Group.........................................................................................................2-6
2.2.6 (Optional) Configuring an Interface to Join a Multicast Group in a Certain Range..............................2-7
2.2.7 Checking the Configuration...................................................................................................................2-8
2.3 Configuring Options of an IGMP Packet........................................................................................................2-8
2.3.1 Establishing the Configuration Task......................................................................................................2-8
2.3.2 Configuring a Router to Reject IGMP Packets Without the Router-Alert Option.................................2-9
2.3.3 Configuring a Router to Send IGMP Packets Without the Router-Alert Option.................................2-10
2.3.4 Configuring Host Address-based IGMP Report Message Filtering.....................................................2-11
Issue 04 (2010-08-31)
ix
Contents
Issue 04 (2010-08-31)
Contents
xi
Contents
Issue 04 (2010-08-31)
Contents
xiii
Contents
Issue 04 (2010-08-31)
Contents
xv
Contents
6 MSDP Configuration.................................................................................................................6-1
6.1 MSDP Introduction.........................................................................................................................................6-3
6.1.1 MSDP Overview....................................................................................................................................6-3
6.1.2 MSDP Features Supported by the NE80E/40E......................................................................................6-3
6.2 Configuring PIM-SM Inter-domain Multicast................................................................................................6-5
6.2.1 Establishing the Configuration Task......................................................................................................6-6
6.2.2 Configuring Intra-AS MSDP Peers........................................................................................................6-6
6.2.3 Configuring Inter-AS MSDP Peers on MBGP Peers.............................................................................6-8
6.2.4 Configuring Static RPF Peers................................................................................................................6-9
6.2.5 Checking the Configuration.................................................................................................................6-10
6.3 Configuring an Anycast RP in a PIM-SM Domain.......................................................................................6-10
6.3.1 Establishing the Configuration Task....................................................................................................6-10
6.3.2 Configuring the Interface Address of an RP........................................................................................6-11
6.3.3 Configuring a C-RP..............................................................................................................................6-12
6.3.4 Statically Configuring an RP................................................................................................................6-13
6.3.5 Configuring an MSDP Peer..................................................................................................................6-13
6.3.6 Specifying the Logical RP Address for an SA Message......................................................................6-14
6.3.7 Checking the Configuration.................................................................................................................6-15
6.4 Managing MSDP Peer Connections..............................................................................................................6-16
6.4.1 Establishing the Configuration Task....................................................................................................6-16
6.4.2 Controlling the Sessions Between MSDP Peers..................................................................................6-17
6.4.3 Adjusting the interval for Retrying Setting up an MSDP Peer Connection.........................................6-17
xvi
Issue 04 (2010-08-31)
Contents
7 MBGP Configuration................................................................................................................7-1
7.1 MBGP Introduction.........................................................................................................................................7-2
7.1.1 MBGP Overview....................................................................................................................................7-2
7.1.2 MBGP Features Supported by the NE80E/40E.....................................................................................7-2
7.2 Configuring Basic MBGP Functions..............................................................................................................7-2
7.2.1 Establishing the Configuration Task......................................................................................................7-3
Issue 04 (2010-08-31)
xvii
Contents
Issue 04 (2010-08-31)
Contents
xix
Contents
11 MLD Configuration...............................................................................................................11-1
11.1 MLD Introduction.......................................................................................................................................11-2
11.1.1 MLD Overview..................................................................................................................................11-2
11.1.2 MLD Features Supported by the NE80E/40E....................................................................................11-2
11.2 Configuring Basic MLD Functions.............................................................................................................11-3
11.2.1 Establishing the Configuration Task..................................................................................................11-3
11.2.2 Enabling IPv6 Multicast Routing.......................................................................................................11-4
11.2.3 Enabling MLD....................................................................................................................................11-4
11.2.4 (Optional) Configuring the MLD Version.........................................................................................11-5
11.2.5 (Optional) Configuring an Interface to Statically Join a Group.........................................................11-5
11.2.6 (Optional) Configuring the Range of Groups an Interface Can Join.................................................11-6
11.2.7 Checking the Configuration...............................................................................................................11-7
11.3 Configuring Options of an MLD Packet.....................................................................................................11-7
11.3.1 Establishing the Configuration Task..................................................................................................11-7
xx
Issue 04 (2010-08-31)
Contents
xxi
Contents
Issue 04 (2010-08-31)
Contents
xxiii
Contents
Issue 04 (2010-08-31)
Contents
A Glossary.....................................................................................................................................A-1
B Acronyms and Abbreviations.................................................................................................B-1
Issue 04 (2010-08-31)
xxv
Figures
Figures
Figure 1-1 Location of each IPv4 multicast protocol...........................................................................................1-3
Figure 1-2 Format of an IPv6 multicast address..................................................................................................1-6
Figure 1-3 Location of each IPv6 multicast protocol...........................................................................................1-8
Figure 2-1 Networking diagram of configuring basic IGMP functions.............................................................2-26
Figure 2-2 SSM mapping network.....................................................................................................................2-29
Figure 2-3 Networking diagram of configuring IGMP Limit............................................................................2-34
Figure 2-4 Networking diagram of sub-interface for QinQ termination to statically join multicast group
.............................................................................................................................................................................2-37
Figure 3-1 Networking diagram of Layer 2 multicast CAC.................................................................................3-6
Figure 3-2 Application on replication of the multicast VLAN..........................................................................3-32
Figure 3-3 Application of 1+1 protection of multicast VLANs.........................................................................3-37
Figure 3-4 Networking diagram of H-VPLS......................................................................................................3-69
Figure 3-5 Networking diagram of configuring IGMP snooping for a VSI.......................................................3-77
Figure 3-6 Example for configuring IGMP Snooping for a VLAN...................................................................3-83
Figure 3-7 Networking diagram of configuring replication of the multicast VLAN on Router A....................3-86
Figure 3-8 Networking diagram of configuring 1+1 protection of multicast VLANs.......................................3-89
Figure 3-9 Networking diagram of adding an interface to a multicast group statically.....................................3-94
Figure 3-10 Networking diagram of Layer 2 multicast CAC for a VLAN........................................................3-96
Figure 3-11 Networking diagram of Layer 2 multicast CAC for a VSI...........................................................3-100
Figure 3-12 Networking diagram of Layer 2 multicast CAC for a PW...........................................................3-107
Figure 3-13 Networking diagram of Layer 2 multicast SSM mapping............................................................3-113
Figure 3-14 Networking diagram of multicast CAC on a sub-interface for VLAN tag termination...............3-117
Figure 4-1 Location of PIM-DM in the multicast network..................................................................................4-2
Figure 4-2 Networking diagram for configuring basic PIM-DM functions.......................................................4-31
Figure 5-1 Application of PIM-SM a the multicast network...............................................................................5-3
Figure 5-2 Networking diagram for configuring PIM-SM multicast network...................................................5-51
Figure 5-3 Networking diagram for performing SPT switchover in a PIM-SM domain...................................5-60
Figure 5-4 Networking diagram of applying PIM BFD on a multi-router network segment............................5-64
Figure 5-5 Networking diagram of PIM GR......................................................................................................5-68
Figure 6-1 Networking diagram of configuring PIM-SM inter-domain multicast.............................................6-37
Figure 6-2 Networking diagram of configuring inter-AS multicast by using static RPF peers.........................6-44
Figure 6-3 Networking diagram of configuring anycast RP..............................................................................6-48
Figure 7-1 MBGP path selection networking diagram......................................................................................7-29
Figure 8-1 Multicast VPN based on multi-instance.............................................................................................8-2
Issue 04 (2010-08-31)
xxvii
Figures
xxviii
Issue 04 (2010-08-31)
Tables
Tables
Table 1-1 Class D addresses.................................................................................................................................1-3
Table 1-2 Multicast protocols...............................................................................................................................1-4
Table 1-3 Description of IPv6 Multicast Addresses.............................................................................................1-7
Table 1-4 Description of commonly-used IPv6 multicast Addresses..................................................................1-7
Table 1-5 IPv6 multicast protocols.......................................................................................................................1-9
Table 8-1 Configuration information about interfaces.......................................................................................8-12
Table 8-2 Networking requirements of Single-AS MD VPN solution..............................................................8-14
Table 8-3 Configuration of router interface........................................................................................................8-32
Table 8-4 Networking requirements of inter-AS MD VPN...............................................................................8-33
Issue 04 (2010-08-31)
xxix
Issue 04 (2010-08-31)
1-1
1-2
Issue 04 (2010-08-31)
Description
224.0.0.0 to 224.0.0.255
224.0.1.0 to 231.255.255.255
233.0.0.0 to 238.255.255.255
232.0.0.0 to 232.255.255.255
239.0.0.0 to 239.255.255.255
IPv4 Network
AS1
IPv4 Network
AS2
Source
PIM
MSDP
PIM
IGMP
IGMP
User
Issue 04 (2010-08-31)
User
1-3
Objectives
Multicast Protocol
Between hosts
and multicast
routers
Between intradomain
multicast
routers
Between interdomain
multicast
routers
Protocol Independent
Multicast (PIM), including
Protocol Independent
Multicast - Dense Mode (PIMDM) and Protocol
Independent Multicast Sparse Mode (PIM-SM)
Multicast Source Discovery
Protocol (MSDP)
CAUTION
Customize configuration solutions according to the actual network conditions and service
requirements. The configuration solution in this section functions only as a reference.
The network environments are classified into two types, which need different configuration
solutions. For details, refer to the HUAWEI NetEngine80E/40E Router Configuration Guide IP Multicast.
NOTE
Ensure that unicast routes work normally in the network before configuring IP multicast.
1-4
Issue 04 (2010-08-31)
Small-Scale Network
A small-scale network, such as a test network, is suitable to implement multicast data
transmission in a Local Area Network (LAN), and does not interconnect with the Internet.
Perform the following configurations:
1.
2.
3.
4.
Large-Scale Network
A large-scale network is suitable to bear multicast services on an ISP network, and interconnects
with the Internet.
Perform the following configurations:
1.
2.
3.
4.
5.
6.
Configure MSDP in the PIM-SM domain and implement the anycast RP.
7.
Configure MSDP between PIM-SM domains. Generally, MSDP cooperates with MBGP.
8.
1-5
7
FF
11
flags
15
scope
31
reserved (80bit)
group ID (32bit)
Other: indicates unallocated ones. It can also indicate the multicast addresses within the
ASM group address range.
Scope (four-bit): indicates that the multicast group contains only the nodes of the same
local network, the same site, and the same organization. The meaning of each field is as
follows:
0: reserved
1: node/interface-local scope
2: link-local scope
3: reserved
4: admin-local scope
5: site-local scope
8: organization-local scope
E: global scope
F: reserved
Other: unassigned
Table 1-3 shows the scopes and meanings of fixed IPv6 multicast addresses.
1-6
Issue 04 (2010-08-31)
Description
FF0x::/32
FF1x::/32 (x cannot be 1 or 2)
FF2x::/32 (x cannot be 1 or 2)
FF3x::/32 (x cannot be 1 or 2)
Issue 04 (2010-08-31)
Scope
IPv6 Multicast
Address
Description
Node/interface-local
scope
FF01:0:0:0:0:0:0:1
FF01:0:0:0:0:0:0:2
Link-local scope
FF02:0:0:0:0:0:0:1
FF02:0:0:0:0:0:0:2
FF02:0:0:0:0:0:0:3
FF02:0:0:0:0:0:0:4
FF02:0:0:0:0:0:0:5
FF02:0:0:0:0:0:0:6
FF02:0:0:0:0:0:0:7
Indicates ST routers.
FF02:0:0:0:0:0:0:8
Indicates ST hosts.
FF02:0:0:0:0:0:0:9
FF02:0:0:0:0:0:0:A
FF02:0:0:0:0:0:0:B
FF02:0:0:0:0:0:0:D
FF02:0:0:0:0:0:0:E
FF02:0:0:0:0:0:1:1
FF02:0:0:0:0:0:1:2
FF02:0:0:0:0:1:FFXX:X
XXX
1-7
Scope
IPv6 Multicast
Address
Description
Site-local scope
FF05:0:0:0:0:0:0:2
FF05:0:0:0:0:0:1:3
FF05:0:0:0:0:0:1:4
FF05:0:0:0:0:0:1:1000 to
FF05:0:0:0:0:0:1:13FF
IPv6 Network
Receiver
UserA
PIM
Source
Multicast
Server
MLD
Receiver
UserB
PIM
PIM
MLD
Receiver
UserC
UserD
1-8
Issue 04 (2010-08-31)
Objectives
Multicast Protocol
Between hosts
and multicast
routers
Between
multicast
routers
CAUTION
Customize the configuration solutions according to the actual network conditions and service
requirements. The configuration solution in this section functions only as a reference.
The network environments are classified into two types, which are suitable for different
configuration solutions. For details, refer to the HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Multicast.
NOTE
Ensure that IPv6 unicast routes work normally in the network before configuring IP multicast.
Small-Scale Network
A small-scale network, such as the test network, is suitable to implement multicast data
transmission in a Local Area Network (LAN), and does not interconnect with the Internet.
Perform the following configurations:
1.
2.
3.
Issue 04 (2010-08-31)
1-9
Large-Scale Network
A large-scale network is suitable to carry multicast services on an ISP network, and interconnects
with the Internet.
Perform the following configurations:
1.
2.
3.
4.
Configure an RP. You can configure an embedded RP, a static RP, or a BSR-RP.
1-10
Issue 04 (2010-08-31)
2 IGMP Configuration
IGMP Configuration
Issue 04 (2010-08-31)
2-1
2 IGMP Configuration
The Operating System (OS) of a host determines which version of IGMP is supported by the host.
l
All hosts that participate in multicast transmission must be enabled with IGMP. Hosts can
randomly join or leave the related multicast groups, and the number of hosts is not limited.
Through IGMP, a multicast router can know whether there is a member of a certain group
in the network segment to which each interface of the router is connected. Hosts store
information only about the multicast groups they join.
At present, IGMP has three versions, that is, IGMPv1 (defined in RFC 1112), IGMPv2 (defined
in RFC 2236), and IGMPv3 (defined in RFC 3376). All IGMP versions support the Any-Source
Multicast (ASM) model. IGMPv3 can be directly applied to the Source-Specific Multicast
(SSM) model, whereas IGMPv1 and IGMPv2 require the technical support of SSM mapping
when they are applied to the SSM model.
Supporting IGMPv1, IGMPv2, and IGMPv3. The IGMP version can be configured.
Currently, IGMPv3 supported by the NE80E/40E can process the packets matching the
following situations:
l
2-2
Issue 04 (2010-08-31)
2 IGMP Configuration
The group address is within the ASM group address range, the mode of Group Record is
MODE_IS_EXCLUDE or CHANGE_TO_EXCLUDE_MODE, and the source address list
is null.
All the packets that do not match these conditions are not processed.
Router-Alert
Through Router-Alert, IGMP sends the messages related to the group that the local device does
not join to the upper protocol for processing.
According to requirements, users can determine whether to set Router-Alert in IGMP packets
to be sent, and whether to require that the received IGMP packets contain Router-Alert.
SSM-Mapping
You can configure SSM mapping on routers to provide SSM services for hosts that run IGMPv1
or IGMPv2.
Limiting the total number of IGMP group memberships on a router: The total number of
IGMP group memberships created by a router cannot exceed the limit value. When the total
number of IGMP group memberships created by a router exceeds the limit value, no IGMP
entry can be created.
Limiting the total number of IGMP group memberships in a single instance: The total
number of IGMP group memberships related to an instance cannot exceed the limit value.
When the total number of IGMP group memberships related to an instance reaches the limit
value, no IGMP entry can be created.
Limiting the total number of IGMP group memberships on an interface: The total number
of IGMP group memberships created on an interface cannot exceed the limit value. When
the total number of IGMP group memberships created on an interface reaches the limit
value, no IGMP entry can be created.
2-3
2 IGMP Configuration
Pre-configuration Tasks
Before configuring basic IGMP functions, complete the following tasks:
l
Configuring the link layer protocol parameters and an IP address for each interface to make
the link protocol of the interface Up
Data Preparation
To configure basic IGMP functions, you need the following data.
2-4
No.
Data
IGMP version
Group address and source address used to configure multicast static routes
Issue 04 (2010-08-31)
2 IGMP Configuration
NOTE
The configuration in the IGMP view is globally effective, whereas the configuration in the interface
view is effective only on the interface.
When the command is not used in the interface view, the global values set in the IGMP view are used.
When the command is used in both views, the values set in the interface view are preferred.
Procedure
Step 1 Run:
system-view
CAUTION
Configurations related to VPN instances are applicable only to PE routers. On the PE, if the
VPN instance interface is connected to hosts, you need to perform Step 3 and Step 4.
Step 3 (Optional) Run:
ip vpn-instance vpn-instance-name
2-5
2 IGMP Configuration
Procedure
Step 1 Run:
system-view
IGMP is enabled.
By default, IGMP is not enabled on the interface.
----End
CAUTION
All the routers on the same subnet must be configured with the same IGMP version. By default,
IGMPv2 is adopted.
Do as follows on the router connected to hosts:
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
2 IGMP Configuration
Context
The configuration is optional. By default, the interface does not statically join any multicast
group.
Do as follows on the router connected to hosts:
Procedure
Step 1 Run:
system-view
To configure sub-interface for QinQ termination or Dot1q termination to statically join one
or multiple multicast groups, run:
igmp static-group group-address [ inc-step-mask { group-mask | group-masklength } number group-number ] { qinq pe-vid pe-vid ce-vid low-ce-vid [ to highce-vid ] | dot1q vid low-pe-vid [ to high-pe-vid ] }
NOTE
The static group with VLAN tag can be configured only on the sub-interface for QinQ termination or
the sub-interface for Dot1q termination.
After the interface joins the multicast groups, the router considers that the members of the
multicast groups exist on the network segment where the interface resides.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
2-7
2 IGMP Configuration
The range of multicast groups that the interface is allowed to join is configured.
----End
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * static command to check the
members of static IGMP multicast groups.
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * verbose command to check the
members of an IGMP multicast group.
----End
Pre-configuration Tasks
Before configuring options of an IGMP message, complete the following task:
2-8
Issue 04 (2010-08-31)
2 IGMP Configuration
Data Preparation
To configure options of an IGMP message, you need the following data.
No.
Data
Type and number of the interface on which IGMP Report messages need to be filtered
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
igmp [ vpn-instance vpn-instance-name ]
Run:
require-router-alert
The router is configured to receive only the IGMP packets with the Router-Alert
option.
The IGMP packets without the Router-Alert option are discarded.
Issue 04 (2010-08-31)
2-9
2 IGMP Configuration
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
igmp require-router-alert
The router is configured to receive only the IGMP packets with the Router-Alert
option.
The IGMP packets without the Router-Alert option are discarded.
----End
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
igmp [ vpn-instance vpn-instance-name ]
Run:
undo send-router-alert
The header of a sent IGMP packet does not contain the Router-Alert option.
2-10
Issue 04 (2010-08-31)
2 IGMP Configuration
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
undo igmp send-router-alert
The header of a sent IGMP packet does not contain the Router-Alert option.
----End
Processing the IGMP Report messages whose host addresses are at the same network
segment with the addresses of the inbound interfaces of the IGMP Report messages or
processing the IGMP Report messages whose host addresses are 0.0.0.0
Discarding the IGMP Report messages if the host addresses in the IP headers are at different
network segments from the addresses of the inbound interfaces of the IGMP Report
messages
When you need to filter IGMP Report messages based on host addresses, do as follows on the
interface of the router connected with the host:
Procedure
Step 1 Run:
system-view
2-11
2 IGMP Configuration
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * [ static ] [ verbose ] command to
check information about the members of an IGMP group.
----End
CAUTION
A great many of IGMP interfaces exist on the network and the IGMP interfaces are mutually
restricted. Therefore, ensure that all the IGMP parameter values of all the IGMP router interfaces
on the same network segment are identical. Otherwise, the network may be faulty.
The querier periodically sends IGMP query messages on a shared network connected to
receivers. When receiving a Report message from a member, the querier refreshes information
about the members.
If non-queriers do not receive any general query message within the Keepalive period of other
IGMP queriers, the querier is considered faulty, and a new round of querier election is triggered
automatically.
In ADSL dial-up access, the querier corresponds to only one host because a single host
corresponds to one port. When a receiver frequently joins or leaves multiple multicast groups,
like switchover among TV channels, you can enable the mechanism of fast leave on the querier.
Pre-configuration Tasks
Before configuring IGMP query control, complete the following tasks:
2-12
Issue 04 (2010-08-31)
2 IGMP Configuration
Data Preparation
To configure IGMP query control, you need the following data.
No.
Data
Robustness variable
CAUTION
This configuration is applicable only to IGMPv1.
This configuration is optional. Do as follows on the router connected to hosts.
NOTE
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
igmp [ vpn-instance vpn-instance-name ]
2-13
2 IGMP Configuration
3.
Run:
timer query interval
Run:
robust-count robust-value
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
igmp timer query interval
Run:
igmp robust-count robust-value
CAUTION
This configuration is applicable only to IGMPv2 and IGMPv3. In actual configuration, ensure
that the interval for sending general query messages is greater than the maximum response time
but is smaller than the Keepalive time of other IGMP queriers.
This configuration is optional. Do as follows on the router connected to hosts.
NOTE
2-14
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Issue 04 (2010-08-31)
2 IGMP Configuration
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
igmp [ vpn-instance vpn-instance-name ]
Run:
timer query interval
Run:
robust-count robust-value
For IGMPv2, the router sends group-specific query messages for the number of
robust-value times. The sending interval is the interval for sending IGMP groupspecific query messages.
For IGMPv3, the router sends group-and-source-specific query messages for the
number of robust-value times. The sending interval is the interval for sending
IGMP group-and-source-specific query messages.
The greater the robustness variable is, the more robust the IGMP router is. However,
the timeout period of the group is longer.
5.
Run:
max-response-time interval
The maximum response time is set for the Query messages on the IGMP router.
By default, the maximum IGMP response time is 10 seconds.
6.
Run:
timer other-querier-present interval
Run:
lastmember-queryinterval interval
Issue 04 (2010-08-31)
2-15
2 IGMP Configuration
The interval for sending IGMP last member query messages is set.
The shorter the interval is, the more flexible the querier is.
By default, the interval for sending IGMP last member query messages is 1 second.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
igmp timer query interval
Run:
igmp max-response-time interval
Run:
igmp timer other-querier-present interval
Run:
igmp robust-count robust-value
Run:
igmp lastmember-queryinterval interval
Run:
igmp on-demand
9.
Run:
igmp prompt-leave [ group-policy { acl-number | acl-name acl-name } ]
Issue 04 (2010-08-31)
2 IGMP Configuration
IGMP routing entries are generated on an interface only when the interface is configured with IGMP
but not PIM and the interface functions as an IGMP querier. You can run the display igmp routingtable command to view IGMP routing entries.
----End
Pre-configuration Tasks
To configure SSM mapping, complete the following task:
l
Data Preparation
To configure SSM mapping, you need the following data.
Issue 04 (2010-08-31)
2-17
2 IGMP Configuration
No.
Data
Multicast group address and mask, and multicast source address and mask
Procedure
Step 1 Run:
system-view
IGMP is enabled.
Step 4 Run:
igmp version 3
IGMPv3 is configured.
To ensure that hosts that run any IGMP version on the network segment can obtain SSM services,
you are recommended to configure IGMPv3 on the interface.
Step 5 Run:
igmp ssm-mapping enable
Issue 04 (2010-08-31)
2 IGMP Configuration
Procedure
Step 1 Run:
system-view
group-address { mask | mask-length }: specifies the group address and the mask.
source-address: specifies the address of the source that sets up the mapping with the group.
----End
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * ssm-mapping [ verbose ] command
to check information about groups involved in SSM mapping.
----End
2-19
2 IGMP Configuration
If the IGMP limit function is required to be configured globally, for a single instance, and for an interface
on the same router, it is recommended that the limits on the number of global IGMP group memberships,
the number of IGMP group memberships in the single instance, and the number of IGMP group
memberships on the interface should be in descending order.
Pre-configuration Tasks
Before configuring the IGMP limit function, complete the following task:
l
Data Preparation
To configure the IGMP limit function, you need the following data.
No.
Data
Issue 04 (2010-08-31)
2 IGMP Configuration
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
2-21
2 IGMP Configuration
Step 2 Run:
interface interface-type interface-number
If except is not set in the command, the router is limited by the maximum number of IGMP entries when
creating the entries for all the groups or source/groups.
Before setting except, you need to configure the related ACL. The interface then filters the received IGMP
Join messages according to the ACL. The number of entries specified to be filtered by the ACL is not
limited by the maximum number of IGMP entries.
----End
Procedure
Step 1 Run:
system-view
In the case of a Layer 2 Ethernet interface, Layer 2 GE interface, Layer 2 Eth-Trunk interface,
dot1q terminating sub-interface, or QinQ stacking sub-interface, run the cp-rate-limit
igmp cir cir-value [ cbs cbs-value ] vlan vlan-id1 [ to vlan-id2 ] command to set the rate of
the IGMP packets to be sent to the CPU.
In the case of a QinQ terminating sub-interface, run the cp-rate-limit igmp cir cir-value
[ cbs cbs-value ] pe-vid pe-vid ce-vid begin-vid [ to end-vid ] command to set the rate of the
IGMP packets to be sent to the CPU.
For the detailed configurations of QinQ interfaces, refer to the Configuration Guide - LAN Access
and MAN Access.
----End
2-22
Issue 04 (2010-08-31)
2 IGMP Configuration
Run the following commands to check information about the members of an IGMP
multicast group.
display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] [ verbose ]
Run the display cp-rate-limit [ slot slot-id ] [ verbose ] command to check the
configuration about all the users that use IGMP packets to launch attacks.
Run the display cp-rate-limit interface interface-type interface-number pe-vid pe-vid cevid ce-vid [ verbose ] command to check the configuration about the attackers on a QinQ
interface.
----End
Example
# Run the display igmp interface command to view the configuration and running status of
IGMP on the router interface. The display information is as follows:
<RouterA> display igmp interface gigabitethernet 1/0/0
Ethernet0/0/0(10.2.1.1):
IGMP is enabled
Current IGMP version is 2
IGMP state: up
IGMP group policy: none
IGMP limit: 40
Value of query interval for IGMP (negotiated): Value of query interval for IGMP (configured): 60 s
Value of other querier timeout for IGMP: 0 s
Value of maximum query response time for IGMP: 10 s
Querier for IGMP: 10.2.1.1 (this router)
Total 1 IGMP Group reported
From the display, you can see the maximum number of IGMP group members on GE1/0/0 of
Router A.
# Display information about the attackers on all LPUs.
<HUAWEI> display cp-rate-limit verbose
[Slot 2]
Interface:
GigabitEthernet1/8/0/2.1
PeVid:
0
CeVid:
0
PassBytes(byte):
1391816
PassByteRate(kbps):
200
DropBytes(byte):
5827014740
DropByteRate(kbps):
838529
PassPackets(packet):
13384
Issue 04 (2010-08-31)
2-23
2 IGMP Configuration
PassPacketRate(pps):
DropPackets(packet):
DropPacketRate(pps):
240
56028990
1007848
CAUTION
The IGMP groups that an interface dynamically joins are deleted after you run the reset igmp
group or the reset igmp group ssm-mapping command. Therefore, receivers cannot receive
multicast information normally. So, confirm the action before you run the command.
Procedure
l
----End
Procedure
2-24
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * [ static ] [ verbose ] command in
any view to check information about IGMP groups.
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] group ssmmapping [ group-address | interface interface-type interface-number ] [ verbose ]
command in any view to check information about multicast groups involved in SSM
mapping.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
2 IGMP Configuration
Run the display igmp [ vpn-instance vpn-instance-name | all-instance ] explicittracking [ interface interface-type interface-number [ host-address host-address |
group group-address source source-address ] ] command in any view to check tracking
information about the IGMPv3 hosts that join the specific source and group in Include
mode.
----End
Issue 04 (2010-08-31)
2-25
2 IGMP Configuration
HostA
RouterA
POS2/0/0
192.168.1.1/24
POS2/0/0
192.168.2.1/24
PIM network
RouterB
Receiver
N1
GE1/0/0
10.110.1.1/24
HostB
GE1/0/0
10.110.2.1/24
Leaf network
HostC
Receiver
RouterC GE1/0/0
N2
10.110.2.2/24
POS2/0/0
192.168.3.1/24
HostD
Ethernet
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Add GE 1/0/0 on Router A to multicast group 225.1.1.1 statically. In this manner, hosts
can steadily receive the multicast data of multicast group 225.1.1.1 for a long time.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Enable multicast on each router, and configure IGMP and PIM-SM on the interface connected
to hosts.
# Enable multicast on Router A; enable IGMP and PIM-SM on Gigabit Ethernet 1/0/0; configure
the IGMP version to 2.
The configurations of Router B and Router C are the same as the configuration of Router A, and
are not mentioned here.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim sm
[RouterA-GigabitEthernet1/0/0] igmp enable
2-26
Issue 04 (2010-08-31)
2 IGMP Configuration
[RouterA-GigabitEthernet1/0/0] quit
Step 2 Add GE 1/0/0 on Router A to multicast group 225.1.1.1 statically. In this manner, the hosts
connected to GE 1/0/0 can steadily receive the multicast data sent to multicast group 225.1.1.1.
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] igmp static-group 225.1.1.1
# Run the display pim routing-table command on Router A to check whether GE 1/0/0 is added
to multicast group 225.1.1.1 statically. If (*, 225.1.1.1) entry is generated on Router A, the
downstream interface is GE 1/0/0, and the protocol type is set to static, it indicates that GE 1/0/0
is successfully added to multicast group 225.1.1.1.
<RouterA> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 0 (S, G) entry
(*, 225.1.1.1)
RP: 192.168.4.1
Protocol: pim-sm, Flag: WC
UpTime: 00:12:17
Upstream interface: Pos2/0/0
Upstream neighbor: 192.168.1.1
RPF prime neighbor: 192.168.1.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet1/0/0
Protocol: static, UpTime: 00:12:17, Expires: -
----End
Configuration Files
l
Issue 04 (2010-08-31)
2-27
2 IGMP Configuration
ip address 192.168.1.1 255.255.255.0
pim sm
#
ospf 1
area 0.0.0.0
network 10.110.1.0 0.0.0.255
network 192.168.1.0 0.0.0.255
#
return
l
Issue 04 (2010-08-31)
2 IGMP Configuration
The SSM group address range in the network is 232.1.1.0/24. Source 1, Source 2, and Source 3
send multicast data to the multicast groups in this range. It is required that the receiver receive
the multicast data only from Source 1 and Source 3.
Solution: Configure SSM mapping on Router D.
Figure 2-2 SSM mapping network
Source 3
Source 2
133.133.2.1/24
RouterC
RouterB
GE1/0/0
GE3/0/0
GE3/0/0
Leaf network
Source 1
GE1/0/0
GE2/0/0
GE2/0/0
Leaf network
PIM-SM
133.133.1.1/24
133.133.3.1/24
GE2/0/0
DSLAM
GE2/0/0
GE1/0/0
GE1/0/0
GE3/0/0
GE3/0/0
RouterA
RouterD
Leaf network
Receiver
133.133.4.1/24
router
Interface
IP address
router
Interface
IP address
Router A
GE 1/0/0
133.133.1.2/24
Router C
GE 1/0/0
133.133.3.2/24
GE 2/0/0
192.168.1.1/24
GE 2/0/0
192.168.3.1/24
GE 3/0/0
192.168.4.2/24
GE 3/0/0
192.168.2.2/24
GE 1/0/0
133.133.2.2/24
GE 1/0/0
133.133.4.2/24
GE 2/0/0
192.168.1.2/24
GE 2/0/0
192.168.3.2/24
GE 3/0/0
192.168.2.1/24
GE 3/0/0
192.168.4.1/24
Router B
Router D
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Configure the SSM group address range on all the multicast routers in the PIM-SM domain.
3.
Configure the static SSM mapping rules on the routers that are enabled with SSM Mapping.
Data Preparation
To complete this configuration, you need the following data:
l
Issue 04 (2010-08-31)
2-29
2 IGMP Configuration
Procedure
Step 1 Configure an IP address for each interface and a unicast routing protocol on each router. The
configuration details are not mentioned here.
Step 2 Enable IGMP and SSM mapping on the interface connected to hosts.
[RouterD] multicast routing-enable
[RouterD] interface gigabitethernet
[RouterD-GigabitEthernet1/0/0] igmp
[RouterD-GigabitEthernet1/0/0] igmp
[RouterD-GigabitEthernet1/0/0] igmp
[RouterD-GigabitEthernet1/0/0] quit
1/0/0
enable
version 3
ssm-mapping enable
Step 4 Configure the static SSM mapping rules on the router connected to hosts.
# Map the multicast groups within the 232.1.1.0/24 range to Source 1 and Source 3.
[RouterD] igmp
[RouterD-igmp] ssm-mapping 232.1.1.0 24 133.133.1.1
[RouterD-igmp] ssm-mapping 232.1.1.0 24 133.133.3.1
2-30
Issue 04 (2010-08-31)
2 IGMP Configuration
# Run the display pim routing-table command to view the PIM-SM routing table on a router.
The PIM-SM routing table on Router D is as follows:
<RouterD> display pim routing-table
VPN-Instance: public net
Total 0 (*, G) entry; 2 (S, G) entries
(133.133.1.1, 232.1.1.1)
Protocol: pim-ssm, Flag:SG_RCVR
UpTime: 00:11:25
Upstream interface: GigabitEthernet3/0/0
Upstream neighbor: 192.168.4.2
RPF prime neighbor: 192.168.4.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet1/0/0
Protocol: ssm-map, UpTime: 00:11:25, Expires:(133.133.3.1, 232.1.1.1)
Protocol: pim-ssm, Flag:SG_RCVR
UpTime: 00:11:25
Upstream interface: GigabitEthernet2/0/0
Upstream neighbor: 192.168.3.1
RPF prime neighbor: 192.168.3.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet1/0/0
Protocol: ssm-map, UpTime: 00:11:25, Expires:-
----End
Configuration Files
l
Issue 04 (2010-08-31)
2-31
2 IGMP Configuration
pim
ssm-policy 2000
#
return
l
2-32
Issue 04 (2010-08-31)
2 IGMP Configuration
pim
ssm-policy 2000
#
return
l
Issue 04 (2010-08-31)
2-33
2 IGMP Configuration
HostA
RouterA
POS2/0/0
192.168.1.1/24
POS2/0/0
192.168.2.1/24
PIM network
RouterB
Receiver
N1
GE1/0/0
10.110.1.1/24
HostB
GE1/0/0
10.110.2.1/24
Leaf network
HostC
Receiver
RouterC GE1/0/0
N2
10.110.2.2/24
POS2/0/0
192.168.3.1/24
HostD
Ethernet
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Add GE 1/0/0 on Router A to multicast group 225.1.1.1 statically. In this manner, hosts
can steadily receive the multicast data of multicast group 225.1.1.1 for a long time.
5.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Enable multicast on each router, and configure IGMP and PIM-SM on the interface connected
to hosts.
# Enable multicast on Router A; enable IGMP and PIM-SM on Gigabit Ethernet 1/0/0; configure
the IGMP version to 2. Configurations of Router B and Router C are similar to those of Router
A, and are not mentioned here.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim sm
2-34
Issue 04 (2010-08-31)
2 IGMP Configuration
Step 2 Add GE 1/0/0 on Router A to multicast group 225.1.1.1 statically. In this manner, the hosts
connected to GE 1/0/0 can steadily receive the multicast data sent to multicast group 225.1.1.1.
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] igmp static-group 225.1.1.1
[RouterA-GigabitEthernet1/0/0] quit
Step 3 Limit the number of IGMP group memberships on the last-hop router connected to users.
# Configure the maximum number of IGMP group memberships to 50 on Router A.
[RouterA] igmp global limit 50
# Configure the maximum number of IGMP group memberships to 40 in the public network
instance.
[RouterA] igmp
[RouterA-igmp] limit 40
[RouterA-igmp] quit
# Configurations of Router B and Router C are similar to those of Router A, and are not
mentioned here.
Step 4 Verify the configuration.
# Run the display igmp interface command to view the configuration and running status of
IGMP on the interfaces of each router. Take the display on GE 1/0/0 of Router A as an example.
<RouterA> display igmp interface gigabitethernet 1/0/0
GigabitEthernet1/0/0(10.110.1.1):
IGMP is enabled
Current IGMP version is 2
IGMP state: up
IGMP group policy: none
IGMP limit: 30
Value of query interval for IGMP (negotiated): Value of query interval for IGMP (configured): 60 s
Value of other querier timeout for IGMP: 0 s
Value of maximum query response time for IGMP: 10 s
Querier for IGMP: 10.110.1.1 (this router)
From the display, you can see that the maximum number of IGMP group members that the
GE1/0/0 of Router A can create is 30.
----End
Configuration Files
l
Issue 04 (2010-08-31)
2-35
2 IGMP Configuration
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 10.110.1.1 255.255.255.0
pim sm
igmp enable
igmp limit 30
igmp static-group 225.1.1.1
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ip address 192.168.1.1 255.255.255.0
pim sm
#
ospf 1
area 0.0.0.0
network 10.110.1.0 0.0.0.255
network 192.168.1.0 0.0.0.255
#
igmp
limit 40
#
return
l
2-36
Issue 04 (2010-08-31)
2 IGMP Configuration
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ip address 192.168.3.1 255.255.255.0
pim sm
#
ospf 1
area 0.0.0.0
network 10.110.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
#
igmp
limit 40
#
return
GE1/0/0
10.1.1.2/24
Loopback1
1.1.1.9/32
GE2/0/0.10
10.2.1.2/24
Loopback1
2.2.2.9/32
PE1
GE2/0/0
172.2.1.1/24
GE1/0/0
172.1.1.2/24
GE3/0/0
172.1.1.1/24
GE3/0/0
172.2.1.2/24
MPLSbackbone
PE2
Loopback1
3.3.3.9/32
GE1/0/0
10.3.1.2/24
AS: 100
Access
network
vpna
Receiver
Issue 04 (2010-08-31)
2-37
2 IGMP Configuration
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Configure the basic MPLS functions and MPLS LDP on the PEs and establish the MPLS
LSPs between the PEs.
3.
Configure the VPN instance on the PE and bind VPN instance with the interface to Source
and the interface to Receiver.
4.
Configure MP IBGP to exchange the VPN routing information between the PEs.
5.
Data Preparation
To configuring sub-interface for QinQ termination to statically join multicast groups, you need
the following data:
l
ID of the outer QinQ VLAN tag, value range of the inner QinQ VLAN tag
Procedure
Step 1 Configure basic BGP/MPLS IP VPN.
The specific configuration procedures are omitted here.
Step 2 Configure VPN instance on PE, configure sub-interface for QinQ termination and bind the
interface with the VPN instance.
# Configure PE1.
# Configure VPN instance.
[PE1] ip vpn-instance vpna
[PE1-vpn-instance-vpna] route-distinguisher 100:1
[PE1-vpn-instance-vpna] vpn-target 111:1 both
[PE1-vpn-instance-vpna] quit
2-38
Issue 04 (2010-08-31)
2 IGMP Configuration
# Configure PE2.
# Configure VPN instance.
[PE2] ip vpn-instance vpna
[PE2-vpn-instance-vpna] route-distinguisher 100:2
[PE2-vpn-instance-vpna] vpn-target 111:1 both
[PE2-vpn-instance-vpna] quit
Step 3 Add the route of the Source and the route of the Receiver to VPN routing-table.
# Configure PE1.
[PE1] bgp 100
[PE1-bgp] ipv4-family vpn-instance vpna
[PE1-bgp-vpna] import-route direct
[PE1-bgp-vpna] quit
# Configure PE2.
[PE2] bgp 100
[PE2-bgp] ipv4-family vpn-instance vpna
[PE2-bgp-vpna] import-route direct
[PE2-bgp-vpna] quit
After the configuration above, run the display ip routing-table vpn-instance command on PE1.
The route of the Source and the route of the Receiver are added to VPN routing-table.
[PE1] display ip routing-table vpn-instance vpna
Route Flags: R - relied, D - download to fib
-----------------------------------------------------------------------------Routing Tables: vpna
Destinations : 5
Routes : 5
Destination/Mask
Proto Pre Cost
Flags NextHop
Interface
10.1.1.0/24
Direct 0
0
D
10.1.1.2
GigabitEthernet1/0/0
10.1.1.2/32
Direct 0
0
D
127.0.0.1
InLoopBack0
10.2.1.0/24
Direct 0
0
D
10.2.1.2
GigabitEthernet2/0/0
10.2.1.2/32
Direct 0
0
D
127.0.0.1
InLoopBack0
10.3.1.0/24
BGP
255 0
RD
3.3.3.9
GigabitEthernet3/0/0
Step 4 Configure multicast routing-enable in the public instance on PE1, P and PE2.
# Configure PE1.
[PE1] multicast routing-enable
# Configure P.
[P] multicast routing-enable
# Configure PE2.
[PE2] multicast routing-enable
Issue 04 (2010-08-31)
2-39
2 IGMP Configuration
# Configure P.
[P] interface gigabitethernet 1/0/0
[P-GigabitEthernet1/0/0] pim sm
[P-GigabitEthernet1/0/0] quit
[P] interface gigabitethernet 2/0/0
[P-GigabitEthernet2/0/0] pim sm
[P-GigabitEthernet2/0/0] quit
[P] interface loopback 1
[P-LoopBack1] pim sm
[P-LoopBack1] quit
# Configure PE2.
[PE2] interface gigabitethernet 3/0/0
[PE2-GigabitEthernet3/0/0] pim sm
[PE2-GigabitEthernet3/0/0] quit
[PE2] interface loopback 1
[PE2-LoopBack1] pim sm
[PE2-LoopBack1] quit
Step 6 Configuring sub-interface for QinQ termination to statically join multicast groups.
[PE1] interface gigabitethernet 2/0/0.10
[PE2-GigabitEthernet2/0/0.10] igmp static-group 225.0.0.1 inc-step-mask 0.0.0.1
number 17 qinq pe-vid 1 ce-vid 1 to 2
2-40
Issue 04 (2010-08-31)
2 IGMP Configuration
*,225.0.0.4
*,225.0.0.5
*,225.0.0.6
*,225.0.0.7
*,225.0.0.8
*,225.0.0.9
*,225.0.0.10
*,225.0.0.11
*,225.0.0.12
*,225.0.0.13
*,225.0.0.14
*,225.0.0.15
*,225.0.0.16
*,225.0.0.17
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
) 1/1
1/2
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
SSSSSSSSSSSSSSSSSSSSSSSSSSSS-
----End
Configuration Files
l
Issue 04 (2010-08-31)
2-41
2 IGMP Configuration
Configuration file of P
#
sysname P
#
router id 2.2.2.9
#
multicast routing-enable
#
mpls lsr-id 2.2.2.9
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 172.1.1.2 255.255.255.0
pim sm
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 172.2.1.1 255.255.255.0
pim sm
mpls
mpls ldp
#
interface LoopBack1
ip address 2.2.2.9 255.255.255.255
pim sm
#
pim
c-bsr LoopBack1
2-42
Issue 04 (2010-08-31)
2 IGMP Configuration
c-rp LoopBack1
#
ospf 1
area 0.0.0.0
network 172.1.1.0 0.0.0.255
network 172.2.1.0 0.0.0.255
network 2.2.2.9 0.0.0.0
#
return
l
Issue 04 (2010-08-31)
2-43
3-1
3-2
Issue 04 (2010-08-31)
For details about VPLS, refer to the HUAWEI NetEngine80E/40E Router Feature Description - VPN.
Router Port
A router port refers to a port connected to the upstream multicast router. The router port is
classified into the following types:
l
A dynamic router port is the port that can receive the IGMP Query message with the
source address that is not 0.0.0.0 or the Protocol Independent Multicast (PIM) Hello
message. The dynamic router port is dynamically maintained through protocol packets
exchanged between routers and hosts.
Each dynamic router port starts a timer. The timeout period of the timer is the aging
time of the router port. The port is no longer a router port, if the port does not receive
any IGMP Query message with the source address being not 0.0.0.0 or the PIM Hello
message before the timer times out.
Issue 04 (2010-08-31)
The static router port is specified by using commands and does not age.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
3-3
Prompt Leave
When receiving an IGMP Leave message through a member port, the router immediately deletes
the member port regardless of whether the aging timer times out. The member port thus becomes
invalid and stops receiving multicast packets. This is called prompt leave of member ports.
On the router, if all ports in a VLAN are connected to only one multicast receiver, you can
configure ports in the VLAN to promptly leave some or all multicast groups. This saves the
network bandwidth.
Issue 04 (2010-08-31)
Reduces the network delay by directly searching the multicast forwarding table to transmit
multicast packets.
Improves the information security and implements the payment provision mechanism for
services by preventing unregistered hosts from receiving the multicast traffic.
Issue 04 (2010-08-31)
3-5
NPE
BTV
IP/MPLS
UPE
CE
DSLAM
IGMP snooping-based Layer 2 multicast CAC can be configured differently, depending on the
networks that deliver multicast services:
l
Multicast CAC for a Layer 2 interface or Layer 2 multicast CAC for an interface in the
specified VALN
Number of channels
Bandwidth of channels
Issue 04 (2010-08-31)
When configuring an SSM channel, you must run the command to create the source IP address to be
mapped; when configuring an ASM channel, you need not configure the source IP address to be mapped.
You can run the igmp-snooping ssm-policy command to change the multicast address range of
the ASM and SSM channels rather than the counting rules of CAC. You are recommended to
run the igmp-snooping ssm-policy command prior to setting the channel type to SSM. In this
case, the multicast group address range of the SSM and ASM channels is consistent with that
configured through the igmp-snooping ssm-policy command.
The number of fast-channel entries is not limited but counted. For example, if the CAC
limit set for VLAN10 is 100 and there have been 80 fast-channel entries, the system can
add a maximum of 20 entries. If there have been 100 or more than 100 fast-channel entries,
the system can no longer add entries. Fast-channel entries can be configured only in the
VLAN and VSI views, and therefore only fast-channel entries in the VLAN and VSI are
counted.
Issue 04 (2010-08-31)
3-7
The system use the multicast CAC bandwidth limit to process the entries triggered by multicast streams
the same as fast-channel entries.
3-8
Static router port: When the network topology is stable, you can configure router ports on
the router as static router ports.
IGMP snooping querier: To save the bandwidth between the upstream router and the local
router, you can configure the querier on the local router. The querier replaces the upstream
router to send IGMP Query messages. You can also configure parameters for the IGMP
snooping querier as required.
Multicast policy: You can configure the multicast policy for a VSI, when you need to
specify the range of multicast groups that hosts in a certain VSI can access.
Prompt response to changes in the Layer 2 link: When the Layer 2 link changes, the
router must rapidly update information about the ports so that the multicast traffic can be
forwarded without interruptions.
After the igmp-snooping send-query enable command is used, the router sends the IGMP
General Query message with the source IP address being not 0.0.0.0 when Layer 2 links
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
change. In this manner, other routers can rapidly update their router port. The port link
change event is received by the ports in the VSI.
l
For the MSTP port link change event, the Query message is sent to all non-router ports in
the VSI.
For the RRPP and RPR port link change events, the Query message is sent to only the ports
that receive the event.
Prompt leave: When only one host exists for all ports in a VSI, you can configure prompt
leave for the ports to save the network bandwidth.
Suppression for IGMP messages: After the igmp-snooping proxy command is used, IGMP
proxy provides two functions: querier and message suppression. Through the querier
function, a switch can replace the upstream router to send IGMP Query messages; through
the message suppression function, the switch can replace the upstream router to receive
IGMP Report and Leave messages. Therefore, after IGMP proxy is enabled on the local
router, bandwidth of the link between the upstream router and local router can be saved.
Pre-configuration Tasks
Before configuring IGMP snooping for a VSI, complete the following tasks:
l
Connecting interfaces and setting physical parameters for the interfaces so that the physical
layer of the interfaces is Up
For details about creating the VSI, refer to the HUAWEI NetEngine80E/40E Router Configuration Guide
- VPN.
Data Preparation
To configure IGMP snooping for a VSI, you need the following data.
No.
Data
Parameters of the querier, including the interval for sending the IGMP General Query
message, the robustness variable, the maximum response time, and the interval for
sending the Last Member Query message
3-9
Procedure
Step 1 Run:
system-view
IGMP snooping is enabled on the router. By default, IGMP snooping is disabled on the router.
Step 3 Run:
vsi vsi-name
The forwarding mode is configured. By default, the forwarding mode is based on the IP address.
You are recommended to use the default values. The LPUB supports only the forwarding based
on MAC addresses.
Step 5 Run:
igmp-snooping enable
IGMP snooping is enabled in the VPLS network. By default, IGMP snooping is disabled in the
VPLS network.
Step 6 Run:
igmp-snooping version { 1 | 2 | 3 }
The version of IGMP packets that can be processed is configured for the router enabled with
IGMP snooping. By default, the versions of IGMP packets that can be processed through IGMP
snooping of the router is IGMPv2.
The versions of IGMP packets that can be processed through IGMP snooping of the router are
IGMPv1, IGMPv2 or IGMPv3
To enable IGMP snooping for multiple VSIs, you can perform Step 3 to Step 6 repeatedly as
required.
----End
Procedure
l
Run:
system-view
3-10
Issue 04 (2010-08-31)
Run:
vsi vsi-name
Run:
igmp-snooping static-router-port remote-peer ip-address [ negotiation-vcid vc-id ]
The PW is configured as a static router port. The statically configured router port does
not age and can only be deleted by using commands.
When the LDP is used as the signaling negotiation protocol for a PW, you can use the
igmp-snooping static-router-port remote-peer ip-address [ negotiation-vc-id vcid ] command to configure the PW as a static router port in the VSI. If no IP address
is assigned to the remote peer, you can also configure the PW as a static router port
in the VSI. The configuration, however, takes effect only after an IP address is assigned
to the remote peer.
l
Run:
system-view
Run:
interface interface-type interface-number.subnumber
Common sub-interface
Run:
l2 binding vsi vsi-name
Run:
igmp-snooping static-router-port vsi vsi-name
3-11
Procedure
Step 1 Run:
system-view
The dynamic learning of router ports is enabled. By default, the dynamic learning of router ports
is enabled.
Step 4 (Optional) Run:
igmp-snooping router-aging-time router-aging-time
The default aging time of the routing interface learnt from IGMP packets is 180 seconds. The
default aging time of the routing interface learnt from PIM Hello packets is the Holdtime carried
in PIM Hello packets.
An aging time is set for the router port. If the router port does not receive the IGMP Query
message with the source address not being 0.0.0.0 or the PIM Hello message within the aging
time, the router considers the router port as an invalid port.
----End
Procedure
Step 1 Run:
system-view
The router is enabled to send the IGMP General Query message with the source address not
being 0.0.0.0.
routers can swiftly update the outbound port information and the multicast data received by user
hosts is not interrupted when the topology changes because of a link fault.
Step 3 (Optional) Run:
3-12
Issue 04 (2010-08-31)
For details of parameters of the querier, refer to the chapter "IGMP Configuration."
Procedure
Step 1 Run:
system-view
The interval for the querier to send IGMP General Query messages is set.
Step 4 Run:
igmp-snooping robust-count robust-count
Issue 04 (2010-08-31)
3-13
The interval for the querier to send the Last Member Query message is set.
Step 7 Run:
igmp-snooping require-router-alert
The router is configured to receive IGMP packets that must contain the Router Alert option in
the IP header. The router does not process the packet but discard the packet directly.
Step 8 Run:
igmp-snooping send-router-alert
The router is configured to contain the RouterAlert option in the IP header of the sent IGMP
packets.
----End
To specify the range of multicast groups that hosts in a certain VSI can access, you can configure the
multicast policy for the VSI.
After the multicast policy is configured, hosts in the VSI cannot join multicast groups that are not that
are not in the range specified by the policy.
Procedure
l
Run:
system-view
Run:
vsi vsi-name
Run:
igmp-snooping group-policy
The multicast group policy is configured for the VSI. In this manner, ports in the VSI
can only dynamically join the multicast group matching ACL rules. By default, no
multicast group policy is configured for the VSI.
4.
Run:
quit
Run:
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
Run:
igmp-snooping group-policy acl-number [ version number ] { vlan vlan-id1
[ to vlan-id2 ] | qinq pe-vid pe-vid ce-vid ce-id1 [ to ce-id2 ] |
dot1q vid vid1 [ to vid2 ] }
The multicast group policy is configured for the sub-interface. By default, no multicast
group policy is configured for the sub-interface.
l
Run:
system-view
Run:
vsi vsi-name
Run:
igmp-snooping ssm-policy basic-acl-number
The SSM group policy is configured. By default, the SSM group policy ranges from
232.0.0.0 to 232.255.255.255.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
3-15
Prompt leave is configured for ports in the VSI. By default, ports are not allowed to promptly
leave a multicast group.
group-policy acl-number specifies the range of multicast groups that ports can promptly leave.
If no group-policy acl-number is specified, ports promptly leave a multicast group after the
router receives the Leave message from the VSI.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
the multicast group, thus improving the speed at which the member joins a multicast group and
reducing the response delay of the router.
Do as follows on the router:
Procedure
Step 1 Run:
system-view
Procedure
l
Run the display igmp-snooping router-port { vlan vlan-id | vsi vsi-name } command to
check the information in the router interface.
Run the display l2-multicast forwarding-mode vsi vsi-name command to check the
forwarding mode for a VSI.
Run the display l2-multicast forwarding-table vsi vsi-name [ group-address groupaddress [ source-address source-address ] | [ | count ] [ | { begin | include | exclude }
regular-expression ] ] command to check the Layer 2 multicast forwarding table.
----End
Example
Run the display igmp-snooping vsi vsi-name configuration command. If the IGMP snooping
parameters configured for the VSI are displayed, it means that the configuration succeeds.
<HUAWEI> display igmp-snooping vsi v123 configuration
IGMP Snooping Configuration for Vsi v123
igmp-snooping enable
igmp-snooping version 1
igmp-snooping query-interval 200
igmp-snooping router-aging-time 300
igmp-snooping proxy querier-disable
Issue 04 (2010-08-31)
3-17
Run the display l2-multicast forwarding-mode vsi command. If the Layer 2 multicast
forwarding mode of all VSIs is displayed, it means that the configuration succeeds.
<HUAWEI> display l2-multicast forwarding-mode vsi
VSI
Fowarding-mode
----------------------------------------------Vsi1
IP
Run the display l2-multicast forwarding-table vsi vsi-name command. If the Layer 2 multicast
forwarding mode of the VSI is displayed, it means that the configuration succeeds.
<HUAWEI> display l2-multicast forwarding-table vsi vsi123
VSI Name : vsi123, Forwarding Mode : IP,
-------------------------------------------------------------------,
(Source, Group)
Status Age Index Port-cnt,
--------------------------------------------------------------------,
Router-port
Ok
No
0
1
,
(192.168.0.7, 232.0.0.1)
Ok
No
1
2
,
--------------------------------------------------------------------,
Total Entry(s) : 2
For the VLAN bound to a VSI, you need to enable IGMP snooping in the VSI view.
IGMP snooping for a VLAN runs on Layer 2 of routers. In the implementation of Layer 2
multicast, IGMP snooping manages and controls the forwarding of multicast packets by
maintaining information about the outbound port of multicast packets. It maintains the outbound
port information by detecting the multicast protocol packets exchanged between the upstream
router and hosts.
In the network, functions related to IGMP snooping are as follows:
3-18
Issue 04 (2010-08-31)
Static router port: When the network topology is stable, you can configure router ports on
the router as static router ports.
Static member port: If hosts connected to a certain port need to receive the multicast traffic
of a certain multicast group for a long time, you can add the port to the multicast group. In
this manner, the port becomes a static member port.
IGMP snooping querier: To save the bandwidth between the upstream router and the local
router, you can configure the querier on the local router. The querier replaces the upstream
router to send IGMP Query messages. You can also configure parameters for the IGMP
snooping querier based on different networking requirements
Multicast policy: You can configure the multicast policy for a VLAN, when you need to
specify the range of multicast groups that hosts in a certain VLAN can access.
Rapid response to changes in the Layer 2 link: When the Layer 2 link changes, the router
must rapidly update information about the ports so that the multicast traffic can be
forwarded without interruptions.
After the igmp-snooping send-query enable command is used, the router sends the IGMP
General Query message with source IP address being not 0.0.0.0 when Layer 2 links change.
The port link change event is received by the ports in the VLAN.
For the MSTP port link change event, the Query message is sent to all non-router ports in
the VLAN.
For the RRPP and RPR port link change events, the Query message is sent to only the ports
that receive the event.
Prompt leave: When only one host exists for all ports in a VLAN, you can configure prompt
leave for the ports to save the network bandwidth.
Suppression for IGMP messages: After the igmp-snooping proxy command is used, IGMP
proxy provides two functions: querier and message suppression. Through the querier
function, a switch can replace the upstream router to send IGMP Query messages; through
the message suppression function, the switch can replace the upstream router to receive
IGMP Report and Leave messages. Therefore, after IGMP proxy is enabled on the local
router, bandwidth of the link between the upstream router and local router can be saved.
Pre-configuration Tasks
Before configuring IGMP snooping for a VLAN, complete the following tasks:
l
Connecting interfaces and setting physical parameters for the interfaces so that the physical
layer of the interfaces is Up
Creating a VLAN
Data Preparation
To configure IGMP snooping for a VLAN, you need the following data.
Issue 04 (2010-08-31)
No.
Data
3-19
No.
Data
Parameters of the querier, including the interval for sending the IGMP General Query
message, the robustness variable, the maximum response time, and the interval for
sending the Last Member Query message
Procedure
Step 1 Run:
system-view
IGMP snooping is enabled on the router. By default, IGMP snooping is disabled on the router.
Step 3 Run:
vlan vlan-id
The forwarding mode is configured for static Layer 2 multicast. By default, the forwarding mode
is based on the IP address.
You are recommended to use the default values. The LPUB supports only the forwarding based
on MAC addresses.
Step 5 Run:
igmp-snooping enable
IGMP snooping is enabled for the VLAN. By default, IGMP snooping is disabled for the VLAN.
Step 6 Run:
igmp-snooping version { 1 | 2 | 3 }
The version of IGMP packets that can be processed is configured for the router enabled with
IGMP snooping. By default, the version of IGMP packets that can be processed through IGMP
snooping of the router is IGMPv2.
The versions of IGMP packets that can be processed through IGMP snooping of the router are
IGMPv1, IGMPv2 or IGMPv3
3-20
Issue 04 (2010-08-31)
To enable IGMP snooping for multiple VLANs, you can perform Step 3 to Step 6 repeatedly as
required.
----End
Procedure
Step 1 Run:
system-view
Run:
interface interface-type interface-number
The view of the Ethernet interface connected to the router or the virtual Ethernet interface is
displayed.
l
Run:
interface eth-trunk trunk-id
The view of the Ethernet trunk interface connected to the router is displayed.
Step 3 Run:
portswitch
The interface in the VLAN is configured as a static router port. The statically configured router
port does not age and can only be deleted by using commands.
Before using the igmp-snooping static-router-port command, ensure that the interface is added
to the VLAN specified by vlan-id; otherwise, the configuration fails. If the VLAN that the current
interface belongs to is bound to a VSI, you can configure the current interface as a router port
in the VSI.
----End
3-21
Procedure
Step 1 Run:
system-view
The default aging time of the routing interface learnt from IGMP packets is 180 seconds. The
default aging time of the routing interface learnt from PIM Hello packets is the Holdtime carried
in PIM Hello packets.
An aging time is set for the router port. If the router port does not receive the IGMP Query
message with the source address not being 0.0.0.0 or the PIM Hello message before the aging
time, the router considers the router port as invalid.
----End
Procedure
Step 1 Run:
system-view
The router is enabled to send the IGMP General Query message with the source address not
being 0.0.0.0.
Step 3 (Optional) Run:
igmp-snooping send-query source-address ip-address
Issue 04 (2010-08-31)
By default, the source address is 192.168.0.1. When 192.168.0.1 is used by other devices in the
network, you can run the igmp-snooping send-query source-address command to change the
source IP address of the IGMP General Query message.
Step 4 Run:
vlan vlan-id
For details of parameters of the querier, refer to the chapter "IGMP Configuration."
Procedure
Step 1 Run:
system-view
The interval for the querier to send IGMP General Query messages is set.
Step 4 Run:
igmp-snooping robust-count robust-count
Issue 04 (2010-08-31)
3-23
The interval for the querier to send the Last Member Query message is set.
Step 7 Run:
igmp-snooping require-router-alert
The router is configured to receive IGMP packets that must contain the Router Alert option in
the IP header. The router does not process the packet but discard the packet directly.
Step 8 Run:
igmp-snooping send-router-alert
The router is configured to contain the Router Alert option in the IP header of the sent IGMP
packets. You can run the undo igmp-snooping send-router-alert command to set the IP header
of the sent IGMP packet not to contain the Router-Alert option.
----End
To specify the range of multicast groups that hosts in a certain VLAN can access, you can configure
the multicast policy for the VLAN.
After the multicast policy is configured, hosts in the VLAN cannot join multicast groups that are not
specified in the policy.
Procedure
l
Run:
system-view
Run:
vlan vlan-id
Run:
igmp-snooping group-policy acl-number [ version number ]
The multicast group policy is configured for the VLAN. After that, ports in the VLAN
can only dynamically join the multicast group matching ACL rules.
4.
Run:
quit
Run:
interface { ethernet | gigabitethernet |eth-trunk } interface-number
Run:
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
The multicast group policy is configured for the interface. By default, no multicast
group policy is configured for the interface.
l
Run:
system-view
Run:
vlan vlan-id
Run:
igmp-snooping ssm-policy basic-acl-number
Procedure
Step 1 Run:
system-view
Prompt leave is configured for the port. By default, ports are not allowed to promptly leave a
multicast group.
group-policy acl-number specifies the range of multicast groups that ports can promptly leave.
If no group-policy acl-number is specified, the port promptly leaves a multicast group after
receiving the Leave message from a member port in a VLAN.
----End
Issue 04 (2010-08-31)
3-25
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
3-26
Issue 04 (2010-08-31)
system-view
Procedure
l
Run the display igmp-snooping router-port vlan vlan-id command to check information
about the router port.
Run the display l2-multicast forwarding-mode vlan [ vlan-id ] command to check the
forwarding mode for a VLAN.
Run the display l2-multicast forwarding-table { vlan vlan-id | vsi vsi-name} [ groupaddress group-address [ source-address source-address ] | [ | count ] [ | { begin |
include | exclude } regular-expression ] ] command to check the layer 2 multicast
forwarding table.
Run the display igmp-snooping port-info [ vlan vlan-id [ group-address groupaddress ] ] [ verbose ] command to check information about ports in a VLAN.
----End
Example
# Check all configurations of IGMP snooping for VLAN 10.
<HUAWEI> display igmp-snooping vlan 10 configuration
IGMP Snooping Configuration for Vlan 10
igmp-snooping enable
igmp-snooping lastmember-queryinterval 5
igmp-snooping max-response-time 6
igmp-snooping group-policy 2001 2
igmp-snooping proxy querier-disable
# In VLAN 10,run the display igmp-snooping port-info [ vlan vlan-id [ group-address groupaddress ] ] [ verbose ] to check information about the outbound port that joins multicast group
225.1.1.1.
<HUAWEI> display igmp-snooping port-info
----------------------------------------------------------------------(Source, Group) Port
Flag
Issue 04 (2010-08-31)
3-27
Pre-configuration Tasks
Before configuring trunk load balancing for Layer 2 multicast, complete the following tasks:
l
Connecting interfaces and configuring physical parameters of the interfaces to ensure that
the physical status of the interfaces is Up
Creating a VLAN
Creating a VSI
Data Preparation
To configure trunk load balancing for Layer 2 multicast, you need the following data.
3-28
Issue 04 (2010-08-31)
No.
Data
ID of the VLAN to be configured with trunk load balancing for Layer 2 multicast
Name of the VSI to be configured with trunk load balancing for Layer 2 multicast
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
3-29
Step 3 Run:
trunk multicast load-balance enable
Procedure
Step 1 Run the display interface [ interface-type [ interface-number ] ] [ | { begin | exclude |
include } regular-expression ] command to check the number of multicast packets received or
sent on each trunk member interface.
----End
Example
Run the display eth-trunk [ trunk-id [ interface interface-type interface-number | verbose ] ]
command, and you can view configurations about Eth-Trunk 1 in the VLAN. For example:
<HUAWEI> display eth-trunk 1
Eth-Trunk1's state information is:
WorkingMode: NORMAL
Hash arithmetic: According to flow
Least Active-linknumber: 1 Max Bandwidth-affected-linknumber: 16
Operate status: up
Number Of Up Port In Trunk: 2
-------------------------------------------------------------------------------PortName
Status
Weight
GigabitEthernet4/0/0
Up
1
GigabitEthernet4/0/5
Up
1
3-30
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
3-31
A multicast VLAN is the VLAN that the interface connecting the router to the multicast
source belongs to. The multicast VLAN is used to converge the multicast traffic. The
router supports a maximum of 16 multicast VLANs.
A user VLAN is the VLAN that member hosts of a multicast group belong to. The user
VLAN is used to receive the data from the multicast VLAN.
You can bind multiple user VLANs to one multicast VLAN. A maximum of 512 user
VLANs can be bound to each multicast VLAN.
As shown in Figure 3-2, Router A is connected to Router B at the side of the multicast source.
It is required that Router A replicate the data flow from the multicast VLAN 10 to the user VLAN
100 and the user VLAN 200.
NOTE
Router B
Internet/
Intranet
VLAN 10
Router A
VLAN100
VLAN200
Pre-configuration Tasks
Before configuring replication of the multicast VLAN, complete the following tasks:
3-32
Issue 04 (2010-08-31)
Connecting interfaces and setting physical parameters for the interfaces so that the physical
status of the interfaces is Up
Creating a user VLAN and adding the interfaces that are connected to a switch to the user
VLAN as shown in Figure 3-2
Data Preparation
To configure replication of the multicast VLAN, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
3-33
Procedure
Step 1 Run:
system-view
Run:
port default vlan vlan-id
Run:
port trunk allow-pass vlan vlan-id
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Step 3 Run:
multicast-vlan user-vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> }
The matching relationship between the multicast VLAN and the user VLAN is configured.
vlan-id1 and vlan-id2 are IDs of user VLANs.
One multicast VLAN can be mapped to multiple user VLANs, but one user VLAN can be
mapped to only one multicast VLAN.
----End
Procedure
Step 1 Run:
system-view
Procedure
l
Run the display user-vlan vlan [ vlan-id ] command to check the configuration on the user
VLAN.
Run the display multicast-vlan vlan [ vlan-id ] command to check the configuration on
the multicast VLAN.
----End
Issue 04 (2010-08-31)
3-35
Example
Run the display multicast-vlan vlan command. If you can view the IDs of all configured
multicast VLANs, the number of user VLANs mapped to the multicast VLAN, and the IGMP
snooping status of the multicast VLAN, it means that the configuration succeeds.
<HUAWEI> display multicast-vlan vlan
Total multicast vlan
2
multicast-vlan
user-vlan
snooping-state
-------------------------------------------------2
1
Enable
80
0
Enable
Run the display user-vlan vlan command. If the configurations on all configured user VLANs
are displayed, it means that the configuration succeeds.
<HUAWEI> display user-vlan vlan
Total user vlan
6
user-vlan snooping-state multicast-vlan snooping-state
--------------------------------------------------------3
Enable
2
Enable
223
Enable
222
Enable
232
Enable
231
Enable
601
Enable
600
Enable
2001
Enable
2000
Enable
2002
Enable
2000
Enable
Router A and Router B can be a switch or router that supports the 1+1 protection of multicast VLANs.
3-36
Issue 04 (2010-08-31)
On Router A, VLAN 3 is the multicast VLAN; VLAN 4 and VLAN 5 are user VLANs. On
Router B, VLAN 4 functions as a multicast VLAN; VLAN 100 and VLAN 200 function as its
user VLANs. VLAN 5 functions as the protection VLAN of VLAN 4. It is not required to
configure VLAN 5 as a multicast VLAN or enable IGMP snooping.
It is required that Router A should forward the traffic of the multicast VLAN 3 to user VLAN
4 and user VLAN 5. According to the detection results of the CCM, Router B selects the multicast
traffic from one of the two VLANs, and then forwards the valid multicast traffic to user VLAN
100 and user VLAN 200.
Figure 3-3 Application of 1+1 protection of multicast VLANs
Source
DHCP
server
IP/MPLS
core
VLAN3
RouterA
VLAN4
CCM
VLAN5
VLAN5
VLAN4
RouterB
VLAN100
VLAN200
Multicast flow
CCM Data Flow
Multicast flow of the working VLAN
Multicast flow of the protection VLAN
Issue 04 (2010-08-31)
3-37
Pre-configuration Tasks
Before configuring 1+1 protection of multicast VLANs, complete the following tasks:
l
Connecting interfaces and setting physical parameters for the interfaces so that the physical
layer of the interfaces is Up
Configuring the Ethernet OAM fault detection mechanism on Router A and Router B
Data Preparation
To configure 1+1 protection multicast VLANs, you need the following data.
No.
Data
Name of the Maintenance Domain (MD) and the Maintenance Alliance (MA), and
number of the Remote Maintenance End Point (RMEP)
Procedure
Step 1 Run:
system-view
The first multicast VLAN is created. The value of vlan-id can be any integer that ranges from 1
to 4094.
Step 4 Run:
igmp-snooping enable
3-38
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
The delay for the switchover of the protection group that the working VLAN belongs to is
configured.
Issue 04 (2010-08-31)
3-39
Procedure
Step 1 Run:
system-view
The recovery mode and the Wait to Restore Time (WRT) of the protection group that the working
VLAN belongs to are configured.
By default, the protection group works in revertive mode and the WRT is 5 minutes.
----End
In the following commands, the name of the Maintenance Domain (MD) and the Maintenance Association
(MA), and the number of the Remote Maintenance End Point (RMEP) should be defined before the Ethernet
OAM detection mechanism is configured.
Procedure
Step 1 Run:
system-view
3-40
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The switchover status of the protection group that the working VLAN belongs to is configured.
----End
3-41
Procedure
Step 1 Run the display l2-multicast protection vlan [ vlan-id ] command to check the configuration
on multicast VLAN 1+1 protection.
----End
Example
Run the display l2-multicast protection vlan command. If the configuration on multicast
VLAN 1+1 protection is displayed, it means that the configuration succeeds. For example:
<HUAWEI> display l2-multicast protection vlan
Total protection groups 1:
PG
Main Prot Rest Wtr Hold
Main Prot Proto
FM
Swith
Group
indx vlan vlan mode time time stat stat enable Board
cmd
state
-----------------------------------------------------------------------0
2
3
Rev
5
0
OK
OK
Yes
3
none
normal
Pre-configuration Tasks
Before configuring static Layer 2 multicast, complete the following tasks:
l
Connecting interfaces and setting physical parameters for the interfaces so that the physical
layer of the interfaces is Up
Data Preparation
To configure static Layer 2 multicast, you need the following data.
3-42
Issue 04 (2010-08-31)
No.
Data
Pseudo Wire (PW), sub-interface, and interface of the multicast group that hosts join
statically
A sub-interface not bound to a VSI cannot be added to a static multicast group. In addition, when the
binding relationship between the sub-interface and the VSI is configured, the configurations of all static
multicast groups and router ports on the sub-interface are deleted.
One sub-interface can be added to only one VSI. In addition, one sub-interface can be configured with
multiple static groups in only one VSI.
Procedure
l
Run:
system-view
Run:
vsi vsi-name
Run:
l2-multicast static-group [ source source-ip-address ] group-address
group-address remote-peer ip-address [ negotiation-vc-id vc-id ]
Issue 04 (2010-08-31)
3-43
1.
A sub-interface not bound to a VSI cannot be added to a static multicast group. In addition, when
the binding relationship between the sub-interface and the VSI is removed, the configurations of
all static multicast groups and router ports on the sub-interface are deleted.
One sub-interface can be added to only one VSI. In addition, one sub-interface can be configured
with multiple static groups in only one VSI.
Run:
system-view
Run:
interface interface-type interface-number.subnumber
Common sub-interface
Run:
l2 binding vsi vsi-name
Run:
l2-multicast static-group { [ source
group-address } vsi vsi-name
source-ip-address ] | group-address
Procedure
Step 1 Run:
system-view
3-44
Issue 04 (2010-08-31)
Run:
interface interface-type interface-number
Run:
interface eth-trunk trunk-id
Run:
port default vlan vlan-id
Run:
port trunk allow-pass vlan vlan-id
Procedure
Step 1 Run the display igmp-snooping port-info [ vlan vlan-id ] [ group-address group-address ] ]
[ verbose ] command to check information about ports on the router.
----End
Issue 04 (2010-08-31)
3-45
Example
Run the display igmp-snooping port-info command. You can view whether the configuration
of the static multicast takes effect. If the bolded S is displayed, it indicates that the port is a static
router port. That means the configuration succeeds.
<HUAWEI> display igmp-snooping port-info
----------------------------------------------------------------------(Source, Group) Port
Flag
----------------------------------------------------------------------VLAN 10, 3 Entry(s)
(10.1.1.2, 224.1.1.1) GE1/0/1
S-1 port(s)
(10.1.1.3, 224.1.1.1) GE1/0/1
S-1 port(s)
(10.1.1.4, 224.1.1.1) GE1/0/1
S-1 port(s)
-----------------------------------------------------------------------
3-46
Issue 04 (2010-08-31)
Procedure
Step 1 Run the display current-configuration configuration | include l2-multicast command to
check the Layer 2 alarm function.
----End
Example
Run the display current-configuration configuration | include l2-multicast command. If the
bolded information as shown in the following output is displayed, it means that the configuration
succeeds.
<HUAWEI> display current-configuration configuration | include l2-multicast
snmp-agent trap enable l2-multicast
Pre-configuration Tasks
Before configuring Layer 2 multicast SSM mapping, complete the following tasks:
l
Data Preparation
To configure Layer 2 multicast SSM mapping, you need the following data.
Issue 04 (2010-08-31)
No.
Data
3-47
No.
Data
Procedure
Step 1 Run:
system-view
The multicast packet whose group address is beyond the range defined in the ACL rule is
discarded.
Step 6 Run:
vlan vlan-id
The specified multicast address is specified to be in the SSM group address range.
----End
3-48
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The multicast address in the specified range is mapped to the source address.
The specified multicast address must be within the SSM group address range.
----End
3-49
Procedure
l
Run the display igmp-snooping port-info command to check entries on the interface.
----End
Example
Run the display igmp-snooping port-info command, and you can view entries on the
corresponding interface. For example:
<HUAWEI> display igmp-snooping port-info
----------------------------------------------------------------------(Source, Group) Port
Flag
----------------------------------------------------------------------VLAN 10, 3 Entry(s)
(10.1.1.2, 224.1.1.1) GE1/0/1
--M
1 port(s)
(10.1.1.3, 224.1.1.1) GE1/0/1
--M
1 port(s)
(10.1.1.4, 224.1.1.1) GE1/0/1
--M
1 port(s)
-----------------------------------------------------------------------
You can choose to configure multicast CAC for a VLAN, a Layer 2 interface, or the interface in a specified
VLAN, or you can configure multicast CAC for all of them simultaneously.
Issue 04 (2010-08-31)
NPEs send general Query messages periodically. If receiving no Report messages sent from
the user side, NPEs age the multicast forwarding entries at a certain interval. If receiving
Leave messages, NPEs send group-specific Query messages. You can also configure static
multicast groups on UPEs.
IGMP snooping is enabled on UPEs. When receiving Query messages from NPEs, UPEs
forward the Query messages to all members of a VLAN. After receiving Report messages
from the user side, UPEs create corresponding multicast forwarding entries. If the later
received Query messages are from the same group and the corresponding multicast
forwarding entries do not reach the timeout period, UPEs directly send Report messages
to NPEs.
NOTE
In this section, the scenario where IGMP snooping is deployed on UPEs is described.
Pre-configuration Tasks
Before configuring Layer 2 multicast CAC for a VLAN, a Layer 2 interface, or the interface in
a specified VLAN, complete the following tasks:
l
Configuring interfaces on the routers to ensure that the status of the link layer protocol
between the routers is Up
Data Preparation
To configure Layer 2 multicast CAC for a VLAN, a Layer 2 interface, or the interface in a
specified VLAN, you need the following data.
Issue 04 (2010-08-31)
No.
Data
Name of channels
Number of channels
Bandwidth of channels
ID of the VLAN or the type and number of the interface where Layer 2 multicast
CAC should be configured
3-51
Procedure
Step 1 Run:
system-view
The Ethernet interface view, Gigabit Ethernet interface view, or Eth-Trunk interface view is
displayed.
Step 5 Run:
portswitch
Restriction on the number of multicast group members is configured for the Layer 2 interface.
Step 7 Run:
l2-multicast limit max-entry count [ vlan { { vlan-id [ to vlan-id ] } &<1-10> } ]
[ except acl-number ]
Restriction on the number of multicast group members is configured for the interface in a
specified VLAN.
NOTE
The parameter except is used to exclude the multicast groups that need not be restricted.
----End
3-52
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The Ethernet interface view, Gigabit Ethernet interface view, or Eth-Trunk interface view is
displayed.
Step 5 Run:
portswitch
Restriction on the bandwidth of the multicast groups on the Layer 2 interface is configured.
Step 7 Run:
l2-multicast limit bandwidth bandwidth [ vlan { { vlan-id [ to vlan-id ] }
&<1-10> } ]
Restriction on the bandwidth of the multicast groups is configured for the interface in a specified
VLAN.
----End
3-53
Context
Do as follows on a UPE:
Procedure
Step 1 Run:
system-view
Restriction on the number of global channels or the number of channels in a VLAN is configured.
Step 3 Run:
interface interface-type interface-number
The Ethernet interface view, Gigabit Ethernet interface view, or Eth-Trunk interface view is
displayed.
Step 4 Run:
portswitch
Restriction on the number of channels is configured for the interface in a specified VLAN.
----End
Procedure
Step 1 Run:
system-view
3-54
Issue 04 (2010-08-31)
Restriction on the bandwidth of global channels or the bandwidth of the channels in a VLAN is
configured.
Step 3 Run:
interface interface-type interface-number
The Ethernet interface view, Gigabit Ethernet interface view, or Eth-Trunk interface view is
displayed.
Step 4 Run:
portswitch
Restriction on the bandwidth of the channels is configured for the Layer 2 interface.
Step 6 Run:
l2-multicast limit channel channel-name { bandwidth bandwidth } [ vlan { { vlan-id
[ to vlan-id ] } &<1-10> } ]
Restriction on the bandwidth of the channels is configured for the interface in a specified VLAN.
----End
Procedure
Step 1 Run:
system-view
To create a global channel and enter the channel view, run the channel channel-name
command.
To configure member multicast groups in the global channel and set bandwidth for each
member multicast group, run the group group-address { group-mask-length | group-mask }
[ per-bandwidth bandwidth ] command. If the bandwidth is not configured, the value is 0.
Step 3 Run:
l2-multicast-channel vlan vlan-id
3-55
Step 4 Run:
channel channel-name
[ type [ asm |
ssm
] ]
The member multicast groups of the channel in the VLAN are configured and bandwidth of each
member multicast group is set.
The addresses of member multicast groups in the global channel, the channels in a VLAN, and
the channels in a VSI cannot be the same.
Step 6 Run:
interface interface-type interface-number
The Ethernet interface view, Gigabit Ethernet interface view, or Eth-Trunk interface view is
displayed.
Step 7 (Optional) Run:
unspecified-channel deny
The method for the channel in the VLAN to process the Join messages for an unknown member
multicast group is configured.
After this command is run, the Join messages for an unknown member multicast group are
denied; if the undo unspecified-channel deny command is run, the Join messages for an
unknown member multicast group are permitted.
----End
Procedure
3-56
Run the display l2-multicast limit configuration vlan [ vlanid ] command to check
configurations of Layer 2 multicast CAC for a VLAN.
Run the display l2-multicast limit vlan [ vlanid ] [ channel channel-name ] command to
check configurations and statistics of restriction on the channels in a VLAN.
Issue 04 (2010-08-31)
----End
Example
Run the display l2-multicast limit configuration command to check configurations of Layer
2 multicast CAC.
<HUAWEI> display l2-multicast limit configuration
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------Global limit information:
--------------------------------------------------------------------100
2000
------------VLAN 20 limit information:
--------------------------------------------------------------------50
1000
------------VLAN 20 channel limit information:
--------------------------------------------------------------------bjtv
15
60
------------interface GigabitEthernet1/0/1 VLAN 10 channel limit information:
--------------------------------------------------------------------cctv
20
300
-------------
Run the display l2-multicast-channel vlan 10 command to check configurations of the channel
in VLAN 10.
<HUAWEI> display l2-multicast-channel vlan 10
Channel information on VLAN 10
ChannelName
GroupAddress
Mask
Bandwidth
--------------------------------------------------------------------njtv
226.1.1.0
255.255.255.0
4
226.1.2.0
255.255.255.0
6
226.1.3.0
255.255.255.0
5
--------------------------------------------------------------------njtv1
226.2.1.0
255.255.255.0
4
226.2.2.0
255.255.255.0
2
Run the display l2-multicast limit vlan 20 command to check configurations and statistics of
multicast CAC for the channels in VLAN 20.
<HUAWEI> display l2-multicast limit vlan 20
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------VLAN 20 limit information:
--------------------------------------------------------------------50
1000
0
0
VLAN 20 channel limit information:
--------------------------------------------------------------------bjtv
15
60
0
Run the display l2-multicast limit vlan 10 command to check configurations and statistics of
multicast CAC on the interface in VLAN 10.
Issue 04 (2010-08-31)
3-57
Pre-configuration Tasks
Before configuring Layer 2 multicast CAC for a VSI, complete the following tasks:
l
Configuring interfaces on the routers to ensure that the status of the link layer protocol
between the routers is Up
Data Preparation
To configure Layer 2 multicast CAC for a VSI, you need the following data.
3-58
No.
Data
Name and ID of the VSI, and the interface to which the VSI is bound
Issue 04 (2010-08-31)
No.
Data
Number of channels
Bandwidth of channels
Procedure
Step 1 Run:
system-view
Restriction on the number of multicast group members is configured for a VSI. You can specify
the parameter except to exclude the multicast groups that need not be restricted.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
3-59
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
The method for the channel in the VSI to process the Join messages for an unknown member
multicast group is configured.
After this command is run, the Join messages for an unknown member multicast group are
denied; if the unspecified-channel deny command is run, the Join messages for an unknown
member multicast group are permitted.
For the procedure for configuring a global channel, see "Configuring Channels for a
VLAN."
Step 4 Run:
channel channel-name
type [ asm |
ssm
] ]
A channel is configured for the VSI and the channel view is displayed.
Issue 04 (2010-08-31)
3-61
The name specified in this command must not be the same as the name of the global channel,
otherwise, the channel cannot be created for the VSI.
Step 5 Run:
group group-address { group-mask-length | group-mask } [ per-bandwidth bandwidth ]
The member multicast groups in the channel are configured and the bandwidth of each member
multicast group is set.
If the bandwidth is not configured, the value is 0.
----End
Procedure
l
Run the display l2-multicast limit configuration vsi vsi-name command to check
configurations of Layer 2 multicast CAC for a VSI.
Run the display l2-multicast limit vsi [ vsi-name ] [ channel channel-name ] command
to check configurations and statistics of restriction on the channels in a VSI.
----End
Example
Run the display l2-multicast limit configuration command to check configurations about
Layer 2 multicast CAC.
<HUAWEI> display l2-multicast limit configuration
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------Global limit information:
--------------------------------------------------------------------1000
4000
----------VSI a limit information:
--------------------------------------------------------------------1000
4000
----------interface GigabitEthernet1/0/0.1 channel limit information:
--------------------------------------------------------------------bjtv
100
1000
3-62
Issue 04 (2010-08-31)
Run the display l2-multicast-channel vsi a command to check configurations and statistics of
restriction on the channels in VSI a.
<HUAWEI> display l2-multicast-channel vsi a
Channel information on VSI a
ChannelName
GroupAddress
Mask
Bandwidth
--------------------------------------------------------------------bjtv
226.1.2.0
255.255.255.0
4
--------------------------------------------------------------------cctv
226.1.3.0
255.255.255.0
6
--------------------------------------------------------------------njtv
226.1.1.0
255.255.255.0
3
Run the display l2-multicast limit configuration vsi vsi-name command to check
configurations of Layer 2 multicast CAC on the sub-interface bound with the VSI.
<HUAWEI> display l2-multicast limit configuration vsi a interface Ethernet 1/0/1.1
L2-multicast limit information, The unit of bandwidth is kbits/sec
-----------------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
-----------------------------------------------------------------------------interface Ethernet1/0/1.1 limit information:
-----------------------------------------------------------------------------200
500
-------------
Issue 04 (2010-08-31)
3-63
Pre-configuration Tasks
Before configuring Layer 2 multicast CAC for a sub-interface, complete the following tasks:
l
Configuring interfaces on the routers to ensure that the status of the link layer protocol
between the routers is Up
Data Preparation
To configure Layer 2 multicast CAC for a sub-interface, you need the following data.
No.
Data
Name and ID of the VSI and the number of sub-interface bound to the VSI
Number of channels
Bandwidth of channels
Procedure
Step 1 Run:
system-view
3-64
Issue 04 (2010-08-31)
Restriction on the number of multicast group members is configured for a sub-interface. You
can specify the parameter except to exclude the multicast groups that need not be restricted.
Step 4 Run:
l2-multicast limit max-entry count
[ except acl-number ]
dot1q vid
Restriction on the number of the multicast group members on a sub-interface for dot1q VLAN
tag termination is configured. You can specify the parameter except to exclude the multicast
groups that need not be restricted.
Step 5 Run:
l2-multicast limit max-entry count qinq pe-vid pe-vid
id2 ] } & <1-10> } [ except acl-number ]
ce-vid
{ { ce-id1 [ to ce-
Restriction on the number of the multicast group members on a sub-interface for QinQ VLAN
tag termination is configured. You can specify the parameter except to exclude the multicast
groups that need not be restricted.
NOTE
For details on the procedure for configuring the sub-interface for dot1q or QinQ VLAN tag termination,
refer to the HUAWEI NetEngine80E/40E Configuration Guide - LAN Access and MAN Access.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
3-65
Restriction on the bandwidth of the multicast groups of a sub-interface for dot1q VLAN tag
termination is configured.
Step 5 Run:
l2-multicast limit bandwidth bandwidth qinq pe-vid
ce-id2 ] } & <1-10> }
pe-vid
ce-vid { { ce-id1 [ to
Restriction on the bandwidth of the multicast groups of a sub-interface for QinQ VLAN tag
termination is configured.
NOTE
For details on the procedure for configuring the sub-interface for dot1q or QinQ VLAN tag termination,
refer to the HUAWEI NetEngine80E/40E Configuration Guide - LAN Access and MAN Access.
----End
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
3-66
Issue 04 (2010-08-31)
Procedure
l
Run the display l2-multicast limit configuration vsi [vsi-name] interface { interfacetype interface-number.subnumber } command to check configurations of Layer 2 multicast
CAC for a sub-interface.
----End
Example
Run the display l2-multicast limit configuration command to check configurations about
Layer 2 multicast CAC.
<HUAWEI> display l2-multicast limit configuration
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------Global limit information:
--------------------------------------------------------------------1000
4000
----------VSI a limit information:
--------------------------------------------------------------------1000
4000
----------interface GigabitEthernet1/0/0.1 channel limit information:
--------------------------------------------------------------------bjtv
100
1000
-----------
Issue 04 (2010-08-31)
3-67
Run the display l2-multicast limit configuration vsi [vsi-name [ interface { interface-type
interface-number } ] ] command to check configurations and statistics of Layer 2 multicast CAC
on the sub-interface bound with the VSI.
<HUAWEI> display l2-multicast limit configuration vsi a interface Ethernet 1/0/1.1
L2-multicast limit information, The unit of bandwidth is kbits/sec
-----------------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
-----------------------------------------------------------------------------interface Ethernet1/0/1.1 limit information:
-----------------------------------------------------------------------------200
500
-------------
Run the display l2-multicast limit interface command to check configurations and statistics of
Layer 2 multicast CAC on an interface.
<HUAWEI> display l2-multicast limit interface Ethernet 1/0/0
L2-multicast limit information, The unit of bandwidth is kbits/sec
-----------------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
-----------------------------------------------------------------------------interface Ethernet1/0/0 limit information:
-----------------------------------------------------------------------------500
1000
0
0
Issue 04 (2010-08-31)
BTV SERVER
NPE2
NPE1
BFD FOR PIM OVER
VPLS
UPE1
UPE2
DSLAM1
Issue 04 (2010-08-31)
UPE4
H-VPLS
UPE3
DSLAN2
3-69
In the H-VPLS networking, IGMP Report messages received from downstream UPEs are
forwarding through PWs and the outgoing interface in the multicast forwarding table can also
be a PW.
Therefore, you are recommended to configure Layer 2 multicast CAC for the PW.
NOTE
You must first configure a VSI or PW. When configure the PW, you should specify the signaling protocol,
LDP or BGP, adopted by the PW.
Pre-configuration Tasks
Before configuring Layer 2 multicast CAC for a PW, complete the following tasks:
l
Configuring interfaces on the routers to ensure that the status of the link layer protocol
between the routers is Up
Data Preparation
To configure Layer 2 multicast CAC for a PW, you need the following data.
No.
Data
Number of channels
Bandwidth of channels
Procedure
Step 1 Run:
pwsignal { ldp | bgp }
The signaling protocol (LDP or BGP) used by the PW is configured and the VSI-LDP or VSIBGP view is displayed.
Step 2 Run:
l2-multicast limit max-entry count [ except acl-number ] {remote-peer ip-address
[ negotiation-vc-id vc-id ]| remote-site remote-site-id}
3-70
Issue 04 (2010-08-31)
Restriction on the number of multicast group members is configured for a PW. You can specify
the parameter except to exclude the multicast groups that need not be restricted.
----End
Procedure
Step 1 Run:
pwsignal { ldp | bgp }
The signaling protocol (LDP or BGP) used by the PW is configured and the VSI-LDP or VSIBGP view is displayed.
Step 2 Run:
l2-multicast limit bandwidth bandwidth {remote-peer ip-address [ negotiation-vc-id
vc-id ]| remote-site remote-site-id}
Procedure
Step 1 Run:
pwsignal { ldp | bgp }
The signaling protocol (LDP or BGP) used by the PW is configured and the VSI-LDP or VSIBGP view is displayed.
Step 2 Run:
l2-multicast limit channel channel-name max-entry count { remote-peer ip-address
[ negotiation-vc-id vc-id ]| remote-site remote-site-id}
3-71
Context
Do as follows on the UPE and SPE:
Procedure
Step 1 Run:
pwsignal { ldp | bgp }
The signaling protocol (LDP or BGP) used by the PW is configured and the VSI-LDP or VSIBGP view is displayed.
Step 2 Run:
l2-multicast limit channel channel-name bandwidth traffic-rate {remote-peer ipaddress [ negotiation-vc-id vc-id ]| remote-site remote-site-id}
Procedure
l
Run the display vpls connection [ ldp | bgp | vsi vsi-name ] [ down | up ] [ verbose ]
command to check information about the VPLS connection.
Run the display vsi remote ldp [ router-id ip-address ] [ pw-id pw-id ] command to check
information about the remote VSI.
Run the display l2-multicast limit configuration vsi vsi-name command to check
configurations of Layer 2 multicast CAC for a VSI.
Run the display l2-multicast limit vsi [vsi-name [ interface { interface-type interfacenumber } ] ] |remote-peer ip-address [ negotiation-vc-id vc-id ] | [ channel channelname ] command to check configurations and statistics of restriction on the channels of a
peer.
----End
Example
Run the display l2-multicast limit configuration command to check configurations about
Layer 2 multicast CAC.
3-72
Issue 04 (2010-08-31)
Run the display l2-multicast limit configuration vsi vsi-name command to check
configurations and statistics of Layer 2 multicast CAC on the sub-interface bound with the VSI.
<HUAWEI> display l2-multicast limit configuration vsi a interface Ethernet 1/0/1.1
L2-multicast limit information, The unit of bandwidth is kbits/sec
-----------------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
-----------------------------------------------------------------------------interface Ethernet1/0/1.1 limit information:
-----------------------------------------------------------------------------200
500
-------------
Issue 04 (2010-08-31)
3-73
CAUTION
After you clear the dynamic port in the outbound port information, the hosts in the VLAN or
VSI are disabled from receiving multicast flows provisionally until the router regenerates the
outbound port information. So, confirm before you use the command.
Procedure
Step 1 Run the reset igmp-snooping group { vlan { vlan-id | all } | vsi { vsi-name | all } | all } command
in the user view to clear the Dynamic Port in the Outbound Port Information statistics.
----End
CAUTION
If the statistics of IGMP snooping are cleared, the previous statistics cannot be restored. So,
confirm the action before you use the command.
Procedure
Step 1 Run the reset igmp-snooping statistics { vlan { vlan-id | all } | vsi { vsi-name | all} | all }
command in the user view to clear the Statistics of IGMP Snooping statistics.
----End
3-74
Issue 04 (2010-08-31)
Procedure
l
Run the display igmp-snooping port-info [ vlan vlan-id [ group-address groupaddress ] ] [ verbose ] command in any view to check the operation of information about
ports on the router.
Run the display igmp-snooping router-port { vlan vlan-id | vsi vsi-name } command in
any view to check the operation of information about the router port.
Run the display igmp-snooping statistics { vlan [ vlan-id ] | vsi [ vsi-name ] } command
in any view to check the operation of the statistics of IGMP snooping.
Run the display { multicast-vlan | user-vlan } vlan [ vlan-id ] command in any view to
check the operation of information about the multicast VLAN or the user VLAN.
Run the display igmp-snooping querier { vlan [ vlan-id ] | vsi [ vsi-name ] } command
in any view to check the operation of information about the IGMP snooping querier.
Run the display l2-multicast forwarding-table {vlan vlan-id | vsi vsi-name } [ groupaddress group-address | router-group ] command in any view to check the operation of
the Layer 2 multicast forwarding table.
Run the display l2-multicast protection [ vlan vlan-id ] command in any view to check
the operation of detailed information about the protection group.
----End
CAUTION
Debugging affects the performance of the system. So, after debugging, run the undo debugging
all command to disable it immediately.
When a fault occurs, run the debugging command to debug CAC and locate the fault. For the
procedure for displaying the debugging information, refer to the HUAWEI NetEngine80E/
40E Router Configuration Guide - System Management.
Issue 04 (2010-08-31)
Action
Command
3-75
3-76
Issue 04 (2010-08-31)
VPLS
Loopback1
CE3
GE1/0/0
GE1/0/0
POS2/0/0
Ethernet
Loopback1
CE1
GE2/0/0
GE1/0/0
GE1/0/0
Source
PE3
POS3/0/0
PE1 POS2/0/0
PE2
POS2/0/0
CE2
GE1/0/0
GE1/0/0
Loopback1
router
Interface
IP address
PE1
POS 2/0/0
10.1.1.1/30
POS 3/0/0
20.1.1.1/30
Loopback1
1.1.1.1/32
POS 2/0/0
10.1.1.2/30
Loopback1
2.2.2.2/32
POS 2/0/0
20.1.1.2/30
Loopback1
3.3.3.3/32
CE1
GE 1/0/0
100.1.1.1/30
CE2
GE 1/0/0
100.1.1.2/30
CE3
GE 1/0/0
100.1.1.3/30
PE2
PE3
Ethernet
GE2/0/0
Receiver
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
Issue 04 (2010-08-31)
3-77
Procedure
Step 1 Enable Open Shortest Path First (OSPF) to advertise the network segment of each interface and
ID of the Label Switch Router(LSR).
The configurations are not mentioned here.
Step 2 Configure basic MPLS functions and the Label Distribution Path (LDP).
# Configure PE1.
<PE1> system-view
[PE1] mpls lsr-id 1.1.1.1
[PE1] mpls
[PE1-mpls] quit
[PE1] mpls ldp
[PE1-mpls-ldp] quit
[PE1] interface pos 2/0/0
[PE1-Pos2/0/0] mpls
[PE1-Pos2/0/0] mpls ldp
[PE1-Pos2/0/0]quit
[PE1] interface pos 3/0/0
[PE1-Pos3/0/0] mpls
[PE1-Pos3/0/0] mpls ldp
[PE1-Pos3/0/0] quit
# Configure PE2.
<PE2> system-view
[PE2] mpls lsr-id 2.2.2.2
[PE2] mpls
[PE2-mpls] quit
[PE2] mpls ldp
[PE2-mpls-ldp] quit
[PE2] interface pos 2/0/0
[PE2-Pos2/0/0] mpls
[PE2-Pos2/0/0] mpls ldp
[PE2-Pos2/0/0] quit
# Configure PE3.
<PE3> system-view
[PE3] mpls lsr-id 3.3.3.3
[PE3] mpls
[PE3-mpls] quit
[PE3] mpls ldp
[PE3-mpls-ldp] quit
[PE3] interface pos 2/0/0
[PE3-Pos2/0/0] mpls
[PE3-Pos2/0/0] mpls ldp
[PE3-Pos2/0/0] quit
# Configure PE2.
3-78
Issue 04 (2010-08-31)
<PE2> system-view
[PE2] mpls l2vpn
[PE2-l2vpn] quit
[PE2] vsi v123 static
[PE2-vsi-v123] pwsignal ldp
[PE2-vsi-v123-ldp] vsi-id 123
[PE2-vsi-v123-ldp] peer 1.1.1.1
[PE2-vsi-v123-ldp] quit
[PE2-vsi-v123] quit
# Configure PE3.
<PE3> system-view
[PE3] mpls l2vpn
[PE3-l2vpn] quit
[PE3] vsi v123 static
[PE3-vsi-v123] pwsignal ldp
[PE3-vsi-v123-ldp] vsi-id 123
[PE3-vsi-v123-ldp] peer 1.1.1.1
[PE3-vsi-v123-ldp] quit
[PE3-vsi-v123] quit
Step 5 Enable IGMP snooping globally and for the VSI on the PE devices.
# Configure PE1. The configurations of PE2 and PE3 are similar to those of PE1 and are not
mentioned here.
[PE1] igmp-snooping enable
[PE1] vsi v123
[PE1-vsi-v123] igmp-snooping enable
Step 6 Configure GE 1/0/0 on PE1 as a static router port and the PW on PE2 as a static router port in
VLAN 10, and configure the querier on PE1. The default values are used for the querier and
thus no special configuration is required.
# Configure PE1.
<PE1> system-view
[PE1] igmp-snooping send-query enable
[PE1] vsi v123
[PE1-vsi-v123] igmp-snooping querier enable
[PE1-vsi-v123] quit
[PE1] interface gigabitethernet 1/0/0
[PE1-GigabitEthernet1/0/0] igmp-snooping static-router-port vlan 10
# Configure PE2.
<PE2> system-view
[PE2] vsi v123
[PE2-vsi-v123] igmp-snooping static-router-port remote-peer 1.1.1.1
Issue 04 (2010-08-31)
3-79
# Run the display igmp-snooping router-port vlan command on PE1. You can check whether
the configuration of the static router port succeeds. If STATIC is displayed as shown in the
following output, it indicates that GE 1/0/0 is already configured as a static router port in VLAN
10.
<PE1> display igmp-snooping router-port vlan 10
Port Name
UpTime
Expires
Flags
--------------------------------------------------------------------VLAN 10, 1 router-port(s)
GigabitEthernet1/0/0
00:00:16
-STATIC
# Run the display igmp-snooping router-port vsi command on PE2. You can check whether
the configuration of the static router port succeeds. If STATIC is displayed as shown in the
following output, it indicates that PW (1.1.1.1/123) is already configured as a static router port.
<PE2> display igmp-snooping router-port vsi v123
Port Name
UpTime
Expires
Flags
--------------------------------------------------------------------VSI v123, 1 router-port(s)
PW(1.1.1.1/123)
00:05:16
-STATIC
----End
Configuration Files
l
3-80
Issue 04 (2010-08-31)
undo shutdown
portswitch
port link-type access
port default vlan 10
igmp-snooping static-router-port vlan 10
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ip address 10.1.1.1 255.255.255.252
mpls
mpls ldp
#
interface Pos3/0/0
link-protocol ppp
undo shutdown
ip address 20.1.1.1 255.255.255.252
mpls
mpls ldp
#
interface LoopBack1
ip address 1.1.1.1 255.255.255.255
#
ospf 1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 10.1.1.0 0.0.0.3
network 20.1.1.0 0.0.0.3
#
return
l
Issue 04 (2010-08-31)
3-81
3-82
Issue 04 (2010-08-31)
#
return
Source
RouterB
Internet/
Intranet
GE1/0/0
GE1/0/2
GE1/0/1
RouterA
VLAN 3
SwitchA
VLAN2
SwitchB
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure VLANs.
2.
3.
4.
5.
Issue 04 (2010-08-31)
3-83
Data Preparation
To complete the configuration, you need the following data:
l
Switch-A and the switches connected to Switch-A belong to VLAN 3; Switch-B and the
switches connected to Switch-B belong to VLAN 2.
Procedure
Step 1 Configure VLANs.
<RouterA> system-view
[RouterA] interface gigabitethernet 1/0/1
[RouterA-GigabitEthernet1/0/1] portswitch
[RouterA-GigabitEthernet1/0/1] undo shutdown
[RouterA-GigabitEthernet1/0/1] quit
[RouterA] vlan 3
[RouterA-vlan3] port gigabitethernet 1/0/1
[RouterA-vlan3] quit
[RouterA] interface gigabitethernet 1/0/2
[RouterA-GigabitEthernet1/0/2] portswitch
[RouterA-GigabitEthernet1/0/2] undo shutdown
[RouterA-GigabitEthernet1/0/2] quit
[RouterA] vlan 2
[RouterA-vlan2] port gigabitethernet 1/0/2
[RouterA-vlan2] quit
Step 3 Configure Router A as the querier for VLAN 3 and allow Router A to send IGMP General Query
messages.
[RouterA] vlan 3
[RouterA-vlan3] igmp-snooping querier enable
[RouterA-vlan3] quit
[RouterA] igmp-snooping send-query enable
Issue 04 (2010-08-31)
# Run the display igmp-snooping router-port vlan 3 command on Router A. As shown in the
following output, it indicates that GE 1/0/0 is configured as a static router port.
<RouterA> display igmp-snooping router-port vlan 3
Port Name
UpTime
Expires
Flags
--------------------------------------------------------------------VLAN 3, 1 router-port(s)
GigabitEthernet1/0/1
00:01:02
-STATIC
# Run the display igmp-snooping querier vlan 3 command on Router A. You can check
whether the configuration of the querier succeeds.
<RouterA> display igmp-snooping querier vlan 3
VLAN
Querier-state
----------------------------------------------3
Enable
----End
Configuration Files
l
Issue 04 (2010-08-31)
3-85
Source
RouterB
Internet/
Intranet
VLAN 10 GE1/0/1
GE1/0/3
GE1/0/2
RouterA
VLAN100
VLAN200
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Set the mapping relationship between the multicast VLAN and the user VLANs.
4.
Configure the VLAN that the interface of Router A belongs to and static multicast entries.
Data Preparation
To complete the configuration, you need the following data:
3-86
Interface connected to Router B and the VLAN that the interface belongs to
Interfaces connected to hosts and the VLANs that the interfaces belong to
Issue 04 (2010-08-31)
Procedure
Step 1 Create a multicast VLAN and user VLANs.
# Create a multicast VLAN.
<RouterA> system-view
[RouterA] vlan 10
[RouterA-vlan10] quit
Step 3 Set the mapping relationship between the multicast VLAN and the user VLANs.
[RouterA-vlan10] multicast user-vlan 100
[RouterA-vlan10] multicast user-vlan 200
[RouterA-vlan10] quit
Step 4 Configure the VLAN that the interface of Router A belongs to and static multicast entries.
# Configure GE 1/0/1 to allow data frames from VLAN 10 to pass through.
[RouterA] interface gigabitethernet 1/0/1
[RouterA-GigabitEthernet1/0/1] portswitch
[RouterA-GigabitEthernet1/0/1] port trunk allow-pass vlan 10
[RouterA-GigabitEthernet1/0/1] undo shutdown
[RouterA-GigabitEthernet1/0/1] quit
# Add GE 1/0/2 to VLAN 100, and add the interface to the multicast group statically.
[RouterA] interface gigabitethernet 1/0/2
[RouterA-GigabitEthernet1/0/2] portswitch
[RouterA-GigabitEthernet1/0/2] port trunk allow-pass vlan 100
[RouterA-GigabitEthernet1/0/2] undo shutdown
[RouterA-GigabitEthernet1/0/2] l2-multicast static-group group-address 225.0.0.1
vlan 100
[RouterA-GigabitEthernet1/0/2] l2-multicast static-group group-address 225.0.0.2
vlan 100
[RouterA-GigabitEthernet1/0/2] l2-multicast static-group group-address 225.0.0.3
vlan 100
[RouterA-GigabitEthernet1/0/2] quit
# Add GE 1/0/3 to VLAN 200, and add the interface to the multicast group statically.
[RouterA] interface gigabitethernet 1/0/3
[RouterA-GigabitEthernet1/0/3] portswitch
[RouterA-GigabitEthernet1/0/3] port trunk allow-pass vlan 200
[RouterA-GigabitEthernet1/0/3] undo shutdown
[RouterA-GigabitEthernet1/0/3] l2-multicast static-group group-address 225.0.0.1
vlan 200
[RouterA-GigabitEthernet1/0/3] l2-multicast static-group group-address 225.0.0.2
vlan 200
[RouterA-GigabitEthernet1/0/3] l2-multicast static-group group-address 225.0.0.3
vlan 200
[RouterA-GigabitEthernet1/0/3] quit
3-87
According to the following output, the forwarding table is created for the multicast VLAN and
the forwarding mode of the table is based on MAC addresses.
The static multicast group 225.0.0.1 is mapped to the MAC multicast address 0100-5e00-0001;
the static multicast group 225.0.0.2 is mapped to the MAC multicast address 0100-5e00-0002;
the static multicast group 225.0.0.3 is mapped to the MAC multicast address 0100-5e00-0003.
<RouterA> display l2-multicast forwarding-table vlan 10
VLAN ID : 10, Forwarding Mode : IP,
-------------------------------------------------------------------(Source, Group)
Status Age Index Port-cnt
-------------------------------------------------------------------(*, 225.0.0.1)
Ok
No
0
1
(*, 225.0.0.2)
Ok
No
0
2
(*, 225.0.0.3)
Ok
No
0
2
-------------------------------------------------------------------Total Entry(s) : 3
----End
Configuration Files
l
Issue 04 (2010-08-31)
to VLAN 2 and VLAN 3. GE 1/0/1 on Router A belongs to VLAN 2 and GE 1/0/2 belongs to
VLAN 3. Router B selects the multicast traffic from VLAN 2 and VLAN 3 and performs the
switchover of traffic in the case of VLAN failure. In this manner, Router B steadily and
effectively sends multicast packets to hosts within VLAN 100 and VLAN 200.
Figure 3-8 Networking diagram of configuring 1+1 protection of multicast VLANs
Source
DHCP
Server
IP/MPLS
core
VLAN10 GE1/0/3
VLAN2
GE1/0/1
MAN
VLAN2
RouterA
GE1/0/2
MAN
GE2/0/1
GE2/0/2
GE2/0/3
GE2/0/4
RouterB
VLAN100
VLAN3
VLAN3
VLAN200
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
Issue 04 (2010-08-31)
3-89
Procedure
Step 1 Enable replication of the multicast VLAN.
# Enable replication of the multicast VLAN on Router A, and add GE 1/0/1 and GE 1/0/2 to the
multicast VLAN.
<RouterA> system-view
[RouterA] vlan batch 2 3 10
[RouterA] igmp-snooping enable
[RouterA] vlan 10
[RouterA-vlan10] igmp-snooping enable
[RouterA-vlan10] multicast-vlan enable
[RouterA-vlan10] multicast-vlan user-vlan 2 to 3
[RouterA-vlan10] quit
[RouterA] interface gigabitethernet1/0/3
[RouterA-GigabitEthernet1/0/3] portswitch
[RouterA-GigabitEthernet1/0/3] port trunk allow-pass vlan 10
[RouterA-GigabitEthernet1/0/3] undo shutdown
[RouterA-GigabitEthernet1/0/3] quit
[RouterA] interface gigabitethernet1/0/1
[RouterA-GigabitEthernet1/0/1] undo shutdown
[RouterA-GigabitEthernet1/0/1] portswitch
[RouterA-GigabitEthernet1/0/1] port trunk allow-pass vlan 2
[RouterA-GigabitEthernet1/0/1] l2-multicast static-group group-address 225.0.0.1
vlan 2
[RouterA-GigabitEthernet1/0/1] quit
[RouterA] interface gigabitethernet1/0/2
[RouterA-GigabitEthernet1/0/2] undo shutdown
[RouterA-GigabitEthernet1/0/2] portswitch
[RouterA-GigabitEthernet1/0/2] port trunk allow-pass vlan 3
[RouterA-GigabitEthernet1/0/2] l2-multicast static-group group-address 225.0.0.1
vlan 3
[RouterA-GigabitEthernet1/0/2] quit
# Enable replication of the multicast VLAN on Router B, and add GE 2/0/1, GE 2/0/2, GE 2/0/3,
and GE 2/0/4 to the multicast VLAN.
<RouterB> system-view
[RouterB] vlan batch 2 3 100 200
[RouterB] igmp-snooping enable
[RouterB] vlan 2
[RouterB-vlan2] igmp-snooping enable
[RouterB-vlan2] multicast-vlan enable
[RouterB-vlan2] multicast-vlan user-vlan 100 200
[RouterB-vlan2] quit
[RouterB] interface gigabitethernet2/0/1
[RouterB-GigabitEthernet2/0/1] undo shutdown
[RouterB-GigabitEthernet2/0/1] portswitch
[RouterB-GigabitEthernet2/0/1] port trunk allow-pass vlan 2
[RouterB-GigabitEthernet2/0/1] quit
[RouterB] interface gigabitethernet2/0/2
[RouterB-GigabitEthernet2/0/2] portswitch
[RouterB-GigabitEthernet2/0/2] port trunk allow-pass vlan 3
[RouterB-GigabitEthernet2/0/2] undo shutdown
[RouterB-GigabitEthernet2/0/2] quit
[RouterB] interface gigabitethernet2/0/3
[RouterB-GigabitEthernet2/0/3] undo shutdown
[RouterB-GigabitEthernet2/0/3] portswitch
[RouterB-GigabitEthernet2/0/3] port trunk allow-pass vlan 100
[RouterB-GigabitEthernet2/0/3] l2-multicast static-group group-address 225.0.0.1
vlan 100
3-90
Issue 04 (2010-08-31)
[RouterB-GigabitEthernet2/0/3] quit
[RouterB] interface gigabitethernet2/0/4
[RouterB-GigabitEthernet2/0/4] undo shutdown
[RouterB-GigabitEthernet2/0/4] portswitch
[RouterB-GigabitEthernet2/0/4] port trunk allow-pass vlan 200
[RouterB-GigabitEthernet2/0/4] l2-multicast static-group group-address 225.0.0.1
vlan 200
[RouterB-GigabitEthernet2/0/4] quit
map vlan 2
mep mep-id 2 vlan
mep ccm-send mep-id 2 enable
quit
map vlan 3
mep mep-id 3 vlan
mep ccm-send mep-id 3 enable
quit
Issue 04 (2010-08-31)
3-91
# Run the display l2-multicast protection vlan 2 command on Router B to check information
about the multicast protection group.
<RouterB> display l2-multicast protection vlan 2
PG main-vlan 2, protect-vlan 3, work-vlan 2.
PG main-vlan state OK, protect-vlan state OK.
PG revertive-mode Revertive, wtr-time 5s
PG hold-off time 0(100ms)
PG protocol-enable is Yes, switch command is none
PG state is normal
Vlan 2 bind md is test, ma is test2, remote-mep is 2
# Run the shutdown command on GE 2/0/1 on Router B and then run the display l2-multicast
protection vlan command to check information about the protection group. You can view that
VLAN 3 serves as the working VLAN. This indicates that the switchover is performed and
Router B now receives the multicast data from the protection VLAN.
<RouterB> display l2-multicast protection vlan 2
PG main-vlan 2, protect-vlan 3, work-vlan 3.
PG main-vlan state DE, protect-vlan state OK.
PG revertive-mode Revertive, wtr-time 5s
PG hold-off time 0(100ms)
PG protocol-enable is Yes, switch command is none
PG state is sf_w
Vlan 2 bind md is test, ma is test2, remote-mep is 2
----End
Configuration Files
l
3-92
Issue 04 (2010-08-31)
map vlan 3
mep mep-id 3 vlan
mep ccm-send mep-id 3 enable
#
return
l
Issue 04 (2010-08-31)
3-93
Source
DHCP
server
IP/MPLS
Core
RouterB
GE1/0/1
VLAN 3
RouterA
GE1/0/2
Host3
Host4
Host5
Configuration Roadmap
The configuration roadmap is as follows:
1.
Create a VLAN.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
3-94
Issue 04 (2010-08-31)
Procedure
Step 1 Create a VLAN.
# Create VLAN 3 on Router A.
<RouterA> system-view
[RouterA] igmp-snooping enable
[RouterA] vlan 3
[RouterA-vlan3] quit
# Configure GE 1/0/1 on Router A to allow data frames from VLAN 3 to pass through.
[RouterA] interface gigabitethernet 1/0/1
[RouterA-GigabitEthernet1/0/1] portswitch
[RouterA-GigabitEthernet1/0/1] port trunk allow-pass vlan 3
[RouterA-GigabitEthernet1/0/1] quit
Step 3 Create GE 1/0/2 on Router A and add it to the multicast group 225.0.0.1 statically.
[RouterA] interface gigabitethernet 1/0/2
[RouterA-GigabitEthernet1/0/2] l2-multicast static-group group-address 225.0.0.1
vlan 3
[RouterA-GigabitEthernet1/0/2] quit
----End
Configuration Files
l
Issue 04 (2010-08-31)
3-95
#
interface GigabitEthernet1/0/2
undo shutdown
portswitch
port trunk allow-pass vlan 3
l2-multicast static-group group-address 225.0.0.1 vlan 3
#
return
Networking Requirements
As shown in Figure 3-10, Switch and Router A are connected through VLAN 20. Router A
accesses the upper layer network (IPTV server in the diagram) through Router B. The multicast
CAC bandwidth limit is set on both the switch and Router A. This relieves the burden of
bandwidth on a physical link between the switch and Router A, and ensures that high-quality
IPTV services reach downstream users connected to the switch.
Layer 2 multicast CAC for the VLAN is required on GE 1/0/0 on Router A. The maximum
number of multicast group members allowed in VLAN 20 is restricted to 50 and the bandwidth
of the multicast groups is 1000 kbit/s; the maximum number of member multicast groups of the
BJTV channel in VLAN 20 is restricted to 15 and the bandwidth of the BJTV channel is 60 kbit/
s. Gobal Layer 2 multicast CAC on Router A needs to be configured to restrict the number of
multicast group members on Router A to 100 and the bandwidth of multicast groups to 2000
kbit/s.
The Layer 2 multicast CAC limit for VLAN 20 is set on the switch. The maximum number of
multicast group members allowed in VLAN 20 is restricted to 40 and the bandwidth of the
multicast groups is 100 kbit/s; the maximum number of member multicast groups of the BJTV
channel in VLAN 20 is restricted to 3 and the bandwidth of the BJTV channel is 30 kbit/s; the
maximum number of global multicast groups is 50 and the bandwidth of the multicast groups is
1000 kbit/s.
The channel named bjtv of the ASM type is configured. The multicast address of the member
multicast group is 226.1.1.0/24 and the bandwidth of each membe multicast group is 4 kbit/s;
the multicast address of the member multicast group 2 is 226.1.2.0/24, and the bandwidth of
each member multicast group is 5 kbit/s;the multicast address of the member multicast group 3
is 226.1.3.0/24, and the bandwidth of each member multicast group is 6 kbit/s.
The multicast policy is configured for VLAN 20 by using the unspecified-channel deny
command, disabling the switch and router from creating entries for multicast groups whose
addresses are not in the address range allowed by the configured channel.
Figure 3-10 Networking diagram of Layer 2 multicast CAC for a VLAN
VLAN20
RouterA
GE1/0/0
GE1/0/1
MPLS/
VPLS
Switch
3-96
Internet
RouterB
TV Server
Issue 04 (2010-08-31)
Configuration Roadmap
The configuration roadmap is as follows:
l
Configure global Layer 2 multicast CAC and Layer 2 multicast CAC for VLAN 20.
Data Preparation
To complete the configuration, you need the following data:
l
Parameters related to Layer 2 multicast CAC, including the number of multicast group
members and channels and bandwidth of multicast groups and channels
Procedure
Step 1 Configure VLAN 20 on Router A and the switch.
# Configure the switch.
[Switch] vlan 20
[Switch-vlan20] quit
[Switch] interface gigabitethernet 1/0/1
[Switch-GigabitEthernet1/0/1] portswitch
[Switch-GigabitEthernet1/0/1] port trunk allow-pass vlan 20
# Configure Router A.
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] portswitch
[RouterA-GigabitEthernet1/0/0] port trunk allow-pass vlan 20
Issue 04 (2010-08-31)
3-97
# Configure Router A.
[RouterA] l2-multicast-channel vlan 20
[RouterA-l2-channel-vlan20] channel bjtv type asm
[RouterA-l2-channel-vlan20-bjtv] group 226.1.1.0 255.255.255.0 per-bandwidth 4
[RouterA-l2-channel-vlan20-bjtv] group 226.1.2.0 255.255.255.0 per-bandwidth 6
[RouterA-l2-channel-vlan20-bjtv] group 226.1.3.0 255.255.255.0 per-bandwidth 5
[RouterA-l2-channel-vlan20-bjtv] quit
[RouterA-l2-channel-vlan20] unspecified-channel deny
Step 5 Configure global Layer 2 multicast CAC and Layer 2 multicast CAC for VLAN 20.
# Configure Router A.
[RouterA]
[RouterA]
[RouterA]
[RouterA]
[RouterA]
[RouterA]
l2-multicast
l2-multicast
l2-multicast
l2-multicast
l2-multicast
l2-multicast
limit
limit
limit
limit
limit
limit
max-entry 100
bandwidth 2000
max-entry 50 vlan 20
bandwidth 1000 vlan 20
channel bjtv max-entry 15 vlan 20
channel bjtv bandwidth 60 vlan 20
l2-multicast
l2-multicast
l2-multicast
l2-multicast
l2-multicast
l2-multicast
limit
limit
limit
limit
limit
limit
max-entry 50
bandwidth 1000
max-entry 40 vlan 20
bandwidth 100 vlan 20
channel bjtv max-entry 3 vlan 20
channel bjtv bandwidth 30 vlan 20
Run the display l2-multicast-channel vlan 20 command. You can view configurations of the
channels in VLAN 20.
Take the display on the switch as an example:
[Switch] display l2-multicast-channel vlan 20
Channel information on VLAN 20
ChannelName
Group/Mask
Source/Mask
Bandwidth
------------------------------------------------------------------------------bjtv
226.1.1.0/24
*
4
3-98
Issue 04 (2010-08-31)
*
*
6
5
Run the display l2-multicast limit vlan 20 command. You can view configurations of Layer 2
multicast CAC for VLAN 20.
Take the display on Router A as an example:
[RouterA] display l2-multicast limit vlan 20
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------VLAN 20 limit information:
--------------------------------------------------------------------50
1000
0
0
VLAN 20 channel limit information:
--------------------------------------------------------------------bjtv
15
60
0
----End
Configuration Files
l
vlan 20
vlan 20
4
6
5
Issue 04 (2010-08-31)
3-99
Networking Requirements
As shown in Figure 3-11, Router A and Router B are connected a VSI network. Layer 2 multicast
CAC for the VSI is required on GE 1/0/2 on Router B. The number of the multicast group
members in the VSI should be restricted to 1000 and the bandwidth reserved for multicast groups
should be 4000 kbit/s. In addition, you are required to configure Layer 2 multicast CAC for the
channels on the sub-interface, with the number of member multicast groups in the BJTV, NJTV,
and CCTV channels being restricted to 100, 50, and 120 respectively, and bandwidth reserved
for the three channels being 1000 kbit/s, 450 kbit/s, and 2500 kbit/s respectively.
l
Channel 1: NJTV, with the multicast group address being 226.1.1.0/24, the channel type
being ASM, and bandwidth reserved for each member multicast group being 3 kbit/s
Channel 2: BJTV, with the multicast group address being 226.1.2.0/24, the channel type
being ASM, and bandwidth reserved for each member multicast group being 4 kbit/s
Channel 3: CCTV, with the multicast group address being 226.1.3.0/24, the channel type
being ASM, and bandwidth reserved for each member multicast group being 6 kbit/s
The sub-interface, GE 1/0/0 on Router A and GE 1/0/2 on Router B, are bound with VSIs
respectively.
Figure 3-11 Networking diagram of Layer 2 multicast CAC for a VSI
Loopback 1:1.1.1.1/32
GE1/0/0
Switch
3-100
GE1/0/1
TV Server
GE1/0/2
MPLS/
VPLS
RouterA
GE1/0/1
192.168.10.1/24
Internet
RouterB
Issue 04 (2010-08-31)
Configuration Roadmap
The configuration roadmap is as follows:
l
Data Preparation
To complete the configuration, you need the following data:
l
Name of a VSI
Parameters related to Layer 2 multicast CAC, including the number of multicast group
members and channels and bandwidth of multicast groups and channels
Procedure
Step 1 Enable basic MPLS capabilities and LDP on the MPLS backbone network and enable L2VPN.
# Configure Router A.
[RouterA] interface loopback 1
[RouterA-LoopBack1] ip address 1.1.1.1 32
[RouterA-LoopBack1] quit
[RouterA] mpls lsr-id 1.1.1.1
[RouterA] mpls
[RouterA-mpls] mpls ldp
[RouterA-mpls-ldp] quit
[RouterA-mpls] mpls l2vpn
[RouterA-l2vpn] quit
# Configure Router B.
[RouterB] interface loopback 2
[RouterB-LoopBack2] ip address 2.2.2.2 32
[RouterB-LoopBack2] quit
[RouterB] mpls lsr-id 2.2.2.2
[RouterB] mpls
[RouterB-mpls] mpls ldp
[RouterB-mpls-ldp] quit
[RouterB-mpls] mpls l2vpn
[RouterB-l2vpn] quit
Step 2 Create VSIs and specify LDP as the signaling protocol of VSIs.
# Configure Router A.
[RouterA] vsi a static
[RouterA-vsi-a] pwsignal ldp
[RouterA-vsi-a-ldp] vsi-id 1
[RouterA-vsi-a-ldp] peer 2.2.2.2
[RouterA-vsi-a-ldp] quit
[RouterA-vsi-a] quit
# Configure Router B.
[RouterB] vsi a static
[RouterB-vsi-a] pwsignal ldp
[RouterB-vsi-a-ldp] vsi-id 1
Issue 04 (2010-08-31)
3-101
Step 3 Configure IP addresses for GE 1/0/1 on Router A and Router B and enable MPLS on GE 1/0/1.
# Configure Router A.
[RouterA] interface gigabitethernet1/0/1
[RouterA-GigabitEthernet1/0/1] ip address 192.168.10.1 24
[RouterA-GigabitEthernet1/0/1] mpls
[RouterA-GigabitEthernet1/0/1] mpls ldp
[RouterA-GigabitEthernet1/0/1] quit
# Configure Router B.
[RouterB] interface gigabitethernet1/0/1
[RouterB-GigabitEthernet1/0/1] ip address 192.168.10.2 24
[RouterB-GigabitEthernet1/0/1] mpls
[RouterB-GigabitEthernet1/0/1] mpls ldp
[RouterB-GigabitEthernet1/0/1] quit
# Configure Router B.
[RouterB-ospf-1] a 0
[RouterB-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[RouterB-ospf-1-area-0.0.0.0] network 192.168.10.0 0.0.0.255
[RouterB-ospf-1-area-0.0.0.0] quit
Step 5 Configure sub-interfaces on Routers and bind the sub-interfaces to the VSIs.
# Configure Router A.
[RouterA] interface gigabitethernet 1/0/0.1
[RouterA-GigabitEthernet1/0/0.1] vlan-type dot1q 1
[RouterA-GigabitEthernet1/0/0.1] l2 binding vsi a
[RouterA-GigabitEthernet1/0/0.1] undo shutdown
[RouterA-GigabitEthernet1/0/0.1] quit
[RouterA] interface gigabitethernet 1/0/0.2
[RouterA-GigabitEthernet1/0/0.2] vlan-type dot1q 2
[RouterA-GigabitEthernet1/0/0.2] l2 binding vsi a
[RouterA-GigabitEthernet1/0/0.2] undo shutdown
[RouterA-GigabitEthernet1/0/0.2] quit
# Configure Router B.
[RouterB] interface gigabitethernet 1/0/2.1
[RouterB-GigabitEthernet1/0/2.1] vlan-type dot1q 1
[RouterB-GigabitEthernet1/0/2.1] l2 binding vsi a
[RouterB-GigabitEthernet1/0/2.1] undo shutdown
[RouterB-GigabitEthernet1/0/2.1] quit
[RouterB] interface gigabitethernet 1/0/2.2
[RouterB-GigabitEthernet1/0/2.2] vlan-type dot1q 2
[RouterB-GigabitEthernet1/0/2.2] l2 binding vsi a
[RouterB-GigabitEthernet1/0/2.2] undo shutdown
[RouterB-GigabitEthernet1/0/2.2] quit
Issue 04 (2010-08-31)
Step 8 Configure restriction on the number and bandwidth of the channels in the VSI.
# Configure Router B.
[RouterA] l2-multicast-channel vsi a
[RouterA-l2-channel-vsi-a] channel njtv type asm
[RouterA-l2-channel-vsi-a-njtv] group 226.1.1.0 255.255.255.0 per-bandwidth 3
[RouterA-l2-channel-vsi-a-njtv] quit
[RouterA-l2-channel-vsi-a] channel bjtv type asm
[RouterA-l2-channel-vsi-a-bjtv] group 226.1.2.0 255.255.255.0 per-bandwidth 4
[RouterA-l2-channel-vsi-a-bjtv] quit
[RouterA-l2-channel-vsi-a] channel cctv type asm
[RouterA-l2-channel-vsi-a-cctv] group 226.1.3.0 255.255.255.0 per-bandwidth 6
[RouterA-l2-channel-vsi-a-cctv] quit
limit
limit
limit
limit
limit
limit
channel
channel
channel
channel
channel
channel
bjtv
bjtv
njtv
njtv
cctv
cctv
max-entry 100
bandwidth 1000
max-entry 50
bandwidth 450
max-entr 120
bandwidth 2500
Run the display vsi name a verbose command and find that the VSI status is Up.
Take the display on Router A as an example.
[RouterA] display vsi name a verbose
***VSI Name
: a
Administrator VSI
: no
Isolate Spoken
: disable
VSI Index
: 0
PW Signaling
: ldp
Issue 04 (2010-08-31)
3-103
:
:
:
:
:
:
:
:
:
:
static
unqualify
vlan
1500
uniform
--255
VSI ID
*Peer Router ID
VC Label
Peer Type
Session
Tunnel ID
:
:
:
:
:
:
1
2.2.2.2
23552
dynamic
up
0x802000
Interface Name
State
Interface Name
State
:
:
:
:
GigabitEthernet1/0/0.2
up
GigabitEthernet1/0/0.1
up
:
:
:
:
:
:
:
2.2.2.2
up
23552
23552
label
0x802000
1
up
**PW Information:
*Peer Ip Address
PW State
Local VC Label
Remote VC Label
PW Type
Tunnel ID
FIB Link-ID
Run the display l2-multicast limit configuration command to check configurations of Layer
2 multicast CAC.
Take the display on Router B as an example:
[RouterB] display l2-multicast limit configuration
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------Global limit information:
--------------------------------------------------------------------1000
4000
----------VSI a limit information:
--------------------------------------------------------------------1000
4000
----------interface GigabitEthernet1/0/2.1 channel limit information:
--------------------------------------------------------------------bjtv
100
1000
----------interface GigabitEthernet1/0/2.1 channel limit information:
--------------------------------------------------------------------cctv
120
2500
----------interface GigabitEthernet1/0/2.1 channel limit information:
--------------------------------------------------------------------njtv
50
450
-----------
Issue 04 (2010-08-31)
----End
Configuration Files
l
Issue 04 (2010-08-31)
3-105
3-106
Issue 04 (2010-08-31)
#
return
Networking Requirements
As shown in Figure 3-12, Router A and Router B are connected through a PW and LDP is set
to be the signaling protocol used by the PW. To save network bandwidth between Routers and
ensure the quality of the IPTV service, you are recommended to configure global Layer 2
multicast CAC on Router B, with the number of multicast group members being restricted to
650 and bandwidth reserved for multicast groups being 3000 kbit/s.
A channel SHTV is configured in the VSI, with the multicast address being 225.0.0.1, the channel
type being ASM, and the bandwidth configured for each multicast group member of the channel
being 3 kbit/s. The maximum number of multicast groups on a PW is 650, the bandwidth for the
multicast group is 3000 kbit/s, the number of multicast groups in the channel SHTV is 50, and
the bandwidth for the multicast group in the channel SHTV is 300 kbit/s.
The interval for sending the same multicast CAC-related trap message is set to 40 seconds.
Figure 3-12 Networking diagram of Layer 2 multicast CAC for a PW
Loopback 2:2.2.2.2/32
Loopback 1:1.1.1.1/32
GE1/0/1
192.168.10.1/24
RouterB
PW Tunnel
RouterA
GE1/0/0
TV Server
GE1/0/2
Internet
GE1/0/1
192.168.10.2/24
Switch
Configuration Roadmap
The configuration roadmap is as follows:
l
Issue 04 (2010-08-31)
3-107
Data Preparation
To complete the configuration, you need the following data:
l
Numbers and IP addresses of the two ends of the PW connecting Router A and Router B
Name of a VSI
Parameters related to Layer 2 multicast CAC, including the number of multicast group
members and channels and bandwidth of multicast groups and channels
Procedure
Step 1 Configure an IP address for each interface.
On Router A and Router B, create loopback interfaces respectively on Router A and Router B
and configure an IP address for each interface. The detailed configuration is not mentioned here.
Step 2 Configure IP addresses for GE 1/0/1 on Router A and Router B and enable MPLS on GE 1/0/1.
# Configure Router A.
[RouterA] interface gigabitethernet1/0/1
[RouterA-GigabitEthernet1/0/1] ip address 192.168.10.1 24
[RouterA-GigabitEthernet1/0/1] mpls
[RouterA-GigabitEthernet1/0/1] mpls ldp
[RouterA-GigabitEthernet1/0/1] quit
# Configure Router B.
[RouterB] interface gigabitethernet1/0/1
[RouterB-GigabitEthernet1/0/1] ip address 192.168.10.2 24
[RouterB-GigabitEthernet1/0/1] mpls
[RouterB-GigabitEthernet1/0/1] mpls ldp
[RouterB-GigabitEthernet1/0/1] quit
Proto
1.1.1.1/32 Direct
2.2.2.2/32 OSPF
GigabitEthernet1/0/1
127.0.0.0/8
Direct
127.0.0.1/32 Direct
192.168.10.0/24 Direct
GigabitEthernet1/0/1
192.168.10.1/32 Direct
Pre
Cost
Flags NextHop
Interface
0
10
0
1
D
D
127.0.0.1
192.168.10.2
InLoopBack0
0
0
0
0
0
0
D
D
D
127.0.0.1
127.0.0.1
192.168.10.1
InLoopBack0
InLoopBack0
127.0.0.1
InLoopBack0
Step 4 Configure MPLS networks on Router A and Router B, set up a PW between Router A and
Router B, with LDP being the signaling protocol, and enable MPLS L2VPN.
# Configure Router A.
3-108
Issue 04 (2010-08-31)
# Configure Router B.
[RouterB] mpls lsr-id 2.2.2.2
[RouterB] mpls
[RouterB-mpls] mpls ldp
[RouterB-mpls-ldp] quit
[RouterB-mpls] mpls l2vpn
[RouterB-l2vpn] quit
# Configure Router B.
<RouterB> system-view
[RouterB] vsi a static
[RouterB-vsi-a] pwsignal ldp
[RouterB-vsi-a-ldp] vsi-id 1
[RouterB-vsi-a-ldp] peer 1.1.1.1
[RouterB-vsi-a-ldp] quit
[RouterB-vsi-a] quit
# Configure Router B.
[RouterB] interface gigabitethernet1/0/2.1
[RouterB-GigabitEthernet1/0/2.1] vlan-type dot1q 1
[RouterB-GigabitEthernet1/0/2.1] l2 binding vsi a
[RouterB-GigabitEthernet1/0/2.1] undo shutdown
[RouterB-GigabitEthernet1/0/2.1] quit
Issue 04 (2010-08-31)
3-109
Step 9 Configure restriction on the number and bandwidth of the channel SHTV in the VSI.
# Configure Router B.
[RouterB] l2-multicast-channel vsi a
[RouterB-l2-channel-vsi-a] channel shtv type asm
[RouterB-l2-channel-vsi-a-njtv] group 225.0.0.1 255.255.255.0 per-bandwidth 3
[RouterB-l2-channel-vsi-a-njtv] quit
Step 11 On Router A, set the interval for sending the same multicast CAC-related trap message to 40
seconds.
# Configure Router A.
[RouterA] l2-multicast limit trap-interval 40
3-110
Issue 04 (2010-08-31)
Run the display mpls ldp session command, and you can find that peer relationship is set up.
Take the display on Router A as an example:
[RouterA] display mpls ldp session
LDP Session(s) in Public Network
-----------------------------------------------------------------------------Peer-ID
Status
LAM SsnRole SsnAge
KA-Sent/Rcv
-----------------------------------------------------------------------------2.2.2.2:0
Operational DU
Passive 000:00:00
1/1
-----------------------------------------------------------------------------TOTAL: 1 session(s) Found.
LAM : Label Advertisement Mode
SsnAge Unit : DDD:HH:MM
Run the display l2-multicast limit configuration command to check configurations of Layer
2 multicast CAC.
Take the display on Router B as an example:
[RouterB] display l2-multicast limit configuration
L2-multicast limit information, The unit of bandwidth is kbits/sec
--------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
--------------------------------------------------------------------Global limit information:
--------------------------------------------------------------------650
3000
------------PW(Peer:1.1.1.1, VCID:1) limit information:
---------------------------------------------------------------------------650
3000
------------PW(Peer:1.1.1.1, VCID:1) channel limit information:
-----------------------------------------------------------------------------shtv
50
300
-------------
----End
Configuration Files
l
Issue 04 (2010-08-31)
3-111
3-112
Issue 04 (2010-08-31)
#
return
VLAN10
PE1
GE1/0/0
PE2
GE1/0/0
SSM Mapping
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Configure GE 1/0/0 on PE2 as a static router port and statically add GE 1/0/0 to the multicast
group 224.1.1.1.
5.
Data Preparation
To complete the configuration, you need the following data:
l
Issue 04 (2010-08-31)
VLAN ID
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
3-113
Procedure
Step 1 Create VLANs.
# Configure PE1.
<HUAWEI> system-view
[HUAWEI] sysname PE1
[PE1] interface gigabitethernet1/0/0
[PE1-GigabitEthernet1/0/0] portswitch
[PE1-GigabitEthernet1/0/0] undo shutdown
[PE1-GigabitEthernet1/0/0] quit
[PE1] vlan 10
[PE1-vlan10] port gigabitethernet 1/0/0
[PE1-vlan10] quit
# Configure PE2.
<HUAWEI> system-view
[HUAWEI] sysname PE2
[PE2] interface gigabitethernet 1/0/0
[PE2-GigabitEthernet1/0/0] portswitch
[PE2-GigabitEthernet1/0/0] undo shutdown
[PE2-GigabitEthernet1/0/0] quit
[PE2] vlan 10
[PE2-vlan10] port gigabitethernet 1/0/0
[PE2-vlan10] quit
# Configure PE2.
[PE2] igmp-snooping enable
[PE2] vlan 10
[PE2-vlan10]igmp-snooping enable
[PE2-vlan10]igmp-snooping proxy enable
Step 3 Configure the versions of IGMP snooping running on PE1 and PE2.
# Configure PE1.
[PE1-vlan10] igmp-snooping version 3
# Configure PE2.
[PE2-vlan10] igmp-snooping version 2
Step 4 Enable the querier function for VLAN 10 on PE1 so that PE1 can send general Query messages
to PE2.
[PE1] igmp-snooping send-query enable
[PE1] vlan 10
[PE1-vlan10] igmp-snooping querier enable
[PE1-vlan10] quit
Step 5 Statically add GE 1/0/0 on PE2 to the multicast group with the source address being 10.1.1.1
and group address being 224.1.1.1.
3-114
Issue 04 (2010-08-31)
10.1.1.2
10.1.1.3
10.1.1.4
# After PE1 receives a Report message, run the display igmp-snooping port-info command to
check configurations about the interface.
[PE1] display igmp-snooping port-info
----------------------------------------------------------------------(Source, Group) Port
Flag
----------------------------------------------------------------------VLAN 10, 3 Entry(s)
(10.1.1.2, 224.1.1.1) GE1/0/0
--M
1 port(s)
(10.1.1.3, 224.1.1.1) GE1/0/0
--M
1 port(s)
(10.1.1.4, 224.1.1.1) GE1/0/0
--M
1 port(s)
-----------------------------------------------------------------------
----End
Configuration Files
l
Issue 04 (2010-08-31)
3-115
#
vlan batch 10
#
igmp-snooping enable
igmp-snooping send-query enable
#
vlan 10
igmp-snooping enable
igmp-snooping querier enable
igmp-snooping ssm-mapping enable
igmp-snooping version 3
igmp-snooping ssm-policy 2008
igmp-snooping ssm-mapping 224.1.1.0 255.255.255.0 10.1.1.2
igmp-snooping ssm-mapping 224.1.1.0 255.255.255.0 10.1.1.3
igmp-snooping ssm-mapping 224.1.1.0 255.255.255.0 10.1.1.4
#
acl number 2008
rule 5 permit source 224.1.1.1 0
#
interface GigabitEthernet1/0/0
undo shutdown
portswitch
port default vlan 10
#
return
l
Issue 04 (2010-08-31)
Figure 3-14 Networking diagram of multicast CAC on a sub-interface for VLAN tag termination
PE
GE1/0/0.2
Dot1q termination
Internet/
Intranet
GE1/0/0.1
QinQ termination
CE
Group Number
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Configure basic MPLS functions on PE and bind the sub-interfaces on PE to the VSI.
3.
Enable IGMP snooping in the VSI and configure the IGMP snooping version number.
4.
5.
6.
7.
Data Preparation
To complete the configuration, you need the following data:
l
VSI name and the numbers of the sub-interfaces to which the VSI is bound
Parameters related to multicast CAC, including the number of multicast groups, bandwidth
of multicast groups, number of member multicast groups in the channel, and bandwidth of
the channel
Procedure
Step 1 Enable global IGMP snooping.
Issue 04 (2010-08-31)
3-117
Step 3 Enable basic IGMP snooping functions in the VSI and configure the IGMP snooping version
number.
[PE] vsi a static
[PE-vsi-a] igmp-snooping enable
[PE-vsi-a] igmp-snooping version 3
Step 4 Configure the QinQ VLAN tag termination mode on GE 1/0/0.1 and bind GE 1/0/0.1 to the VSI.
[PE] interface gigabitethernet 1/0/0
[PE-GigabitEthernet1/0/0] mode user-termination
[PE-GigabitEthernet1/0/0] quit
[PE] interface gigabitethernet 1/0/0.1
[PE-GigabitEthernet1/0/0.1] control-vid 1 qinq-termination
[PE-GigabitEthernet1/0/0.1] qinq termination pe-vid 10 ce-vid 100 to 200
[PE-GigabitEthernet1/0/0.1] l2 binding vsi a
[PE-GigabitEthernet1/0/0.1] undo shutdown
[PE-GigabitEthernet1/0/0.1] quit
Step 5 Configure the dot1q VLAN tag termination mode on GE 1/0/0.2 and bind GE 1/0/0.2 to the VSI.
[PE] interface gigabitethernet 1/0/0.2
[PE-GigabitEthernet1/0/0.2] control-vid 2 dot1q-termination
[PE-GigabitEthernet1/0/0.2] dot1q termination vid 50 to 90
[PE-GigabitEthernet1/0/0.2] l2 binding vsi a
[PE-GigabitEthernet1/0/0.2] undo shutdown
[PE-GigabitEthernet1/0/0.2] quit
Step 6 Configure multicast CAC on the two sub-interfaces for VLAN tag termination.
# Configure the sub-interface for QinQ VLAN tag termination.
[PE-GigabitEthernet1/0/0.1] l2-multicast limit max-entry 650 qinq pe-vid 10 ce-vid
100 to 102
[PE-GigabitEthernet1/0/0.1] l2-multicast limit bandwidth 3000 qinq pe-vid 10 ce-vid
100 to 102
3-118
Issue 04 (2010-08-31)
:
:
:
:
:
:
2
2.2.2.2
162816
dynamic
down
Interface Name
State
Last Up Time
Total Up Time
Interface Name
State
Last Up Time
Total Up Time
:
:
:
:
:
:
:
:
GigabitEthernet1/0/0.1
up
2009/03/18 11:06:06
0 days, 5 hours, 2 minutes, 47 seconds
GigabitEthernet1/0/0.2
up
2009/03/18 11:07:44
0 days, 5 hours, 1 minutes, 9 seconds
# After PE receives a Report message, run the display igmp-snooping port-info command to
check configurations about the interface.
[PE] display igmp-snooping port-info
----------------------------------------------------------------------(Source, Group) Port
Flag
----------------------------------------------------------------------VSI a, 3 Entry(s)
(10.1.1.2, 232.0.0.1) GE1/0/0.2(PE:50)
-D1 port(s)
(10.1.1.3, 232.0.0.1) GE1/0/0.2(PE:51)
-D1 port(s)
(10.1.1.1, 232.1.1.1) GE1/0/0.1(PE:10/CE:100)
-D1 port(s)
-----------------------------------------------------------------------
# Run the display l2-multicast limit configuration command to check configurations and
statistics about multicast CAC.
[PE] display l2-multicast limit
L2-multicast limit information, The unit of bandwidth is Kbits/sec
-----------------------------------------------------------------------------ConfigEntries ConfigBandwidth
CurrentEntries CurrentBandwidth
-----------------------------------------------------------------------------interface GigabitEthernet1/0/0.1 qinq pe-vid 10 ce-vid 100 limit information:
-----------------------------------------------------------------------------650
3000
Issue 04 (2010-08-31)
3-119
1
0
interface GigabitEthernet1/0/0.1 qinq pe-vid 10 ce-vid 101 limit information:
-----------------------------------------------------------------------------650
3000
0
0
interface GigabitEthernet1/0/0.1 qinq pe-vid 10 ce-vid 102 limit information:
-----------------------------------------------------------------------------650
3000
0
0
interface GigabitEthernet1/0/0.2 dot1q vid 50 channel limit information:
-----------------------------------------------------------------------------cctv
50
300
1
20
interface GigabitEthernet1/0/0.2 dot1q vid 51 channel limit information:
-----------------------------------------------------------------------------cctv
50
300
1
20
interface GigabitEthernet1/0/0.2 dot1q vid 52 channel limit information:
-----------------------------------------------------------------------------cctv
50
300
0
0
----End
Configuration Files
l
Configuration file of PE
#
sysname
PE
#
igmp-snooping
enable
#
mpls lsr-id
1.1.1.1
mpls
#
mpls
l2vpn
#
vsi a
static
pwsignal
ldp
vsi-id
2
peer
2.2.2.2
igmp-snooping
enable
igmp-snooping version
3
#
mpls
ldp
#
interface
GigabitEthernet1/0/0
undo
shutdown
mode usertermination
#
interface
GigabitEthernet1/0/0.1
control-vid 1 qinq-
3-120
Issue 04 (2010-08-31)
termination
qinq termination pe-vid 10 ce-vid 100 to
200
l2 binding vsi
a
l2-multicast limit max-entry 650 qinq pe-vid 10 ce-vid 100 to
102
l2-multicast limit bandwidth 3000 qinq pe-vid 10 ce-vid 100 to
102
#
interface
GigabitEthernet1/0/0.2
control-vid 2 dot1qtermination
dot1q termination vid 50 to
90
l2 binding vsi
a
l2-multicast limit channel cctv max-entry 50 dot1q vid 50 to
52
l2-multicast limit channel cctv bandwidth 300 dot1q vid 50 to
52
#
interface
GigabitEthernet1/0/1
undo
shutdown
ip address 200.1.1.1
255.255.255.252
mpls
mpls
ldp
#
interface
LoopBack1
ip address 1.1.1.1
255.255.255.255
#
ospf
1
area
0.0.0.0
network 1.1.1.1
0.0.0.0
network 200.1.1.0
0.0.0.3
#
l2-multicastchannel
channel cctv type
ssm
group 232.0.0.0 255.255.255.0 source 10.1.1.0 255.255.255.0 per-bandwidth
20
#
return
Issue 04 (2010-08-31)
3-121
Issue 04 (2010-08-31)
4-1
CAUTION
This chapter is concerned only about the PIM-DM configuration in an IPv4 network.
The Protocol Independent Multicast (PIM) is a multicast protocol that is independent of unicast
routing protocol such as static route, RIP, OSPF, IS-IS, and BGP. Multicast routing is
independent of unicast routing protocols, except that unicast routing protocols are used to
generate related multicast routing entries.
Based on the Reverse Path Forwarding (RPF), PIM transmits multicast data across a network.
RPF constructs a multicast forwarding tree by using the existing unicast routing information.
When a multicast packet reaches a router, the router performs the RPF check first. If the packet
does not pass the RPF check, the router directly discards the packet.
NOTE
For more details of RPF, refer to the chapter IPv4 Multicast Routing Management in the HUAWEI
NetEngine80E/40E Router Configuration Guide - IP Multicast.
IGMP
Receiver
UserA
PIM-DM
Source
Multicast
Server
Receiver
UserB
PIM-DM
PIM-DM
IGMP
Receiver
UserC
UserD
4-2
Issue 04 (2010-08-31)
Whether the Hello messages without the Generation ID option are received
Neighbor filtering function: An interface sets up neighbor relationships with only the
addresses matching the filtering rules and deletes the neighbors unmatched with the filtering
rules.
The interval for keeping the Prune state of the downstream interface
The delay from the time when the current router receives a Prune message from a
downstream router to the time when the current router performs the prune action in the
LAN
4-3
PIM Multi-instance
In multi-instance applications, multicast routers need to maintain the PIM neighbor list and
multicast routing table for different VPN instances and keep the information independent among
multiple instances.
When a router receives a multicast data packet, the router needs to distinguish the VPN instance
to which the packet belongs and forward the packet based on the multicast routing table of the
specific VPN instance, or create a PIM multicast routing entry of the VPN instance.
Pre-configuration Tasks
Before configuring basic PIM-DM functions, complete the following configuration tasks:
l
Data Preparation
To configure basic PIM-DM functions, you need the following data.
4-4
Issue 04 (2010-08-31)
No.
Data
Procedure
Step 1 Run:
system-view
CAUTION
The configuration related to the VPN instance is applicable only to the PE router. If the interface
of the VPN instance connects to hosts, run the commands in Step 3 and Step 4.
Step 3 (Optional) Run:
ip vpn-instance vpn-instance-name
PIM-SM and PIM-DM cannot be enabled on an interface at the same time. The PIM mode must be the
same on all the interfaces of the same instance. When routers are distributed in different PIM-DM domains,
enable PIM-SM on all non-boundary interfaces.
4-5
Procedure
Step 1 Run:
system-view
PIM-DM is enabled.
After PIM-DM is enabled on the interface and the PIM neighbor relationship is set up between
routers, the protocol packets sent by the PIM neighbors can be processed. You can run the undo
pim dm command to disable PIM-DM on the interface.
----End
Run the following commands to check the PIM routing table of the public network, VPN
instance, or all instances.
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interface-type
interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
* [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
4-6
Issue 04 (2010-08-31)
Example
Run the display pim interface verbose command, and you can view the detailed information
about PIM on the interface in the public network instance.
<HUAWEI> display pim interface verbose
VPN-Instance: public net
Interface: Ethernet2/0/12, 12.40.41.2
PIM version: 2
PIM mode: Dense
PIM state: up
PIM DR: 12.40.41.2 (local)
PIM DR Priority (configured): 1
PIM neighbor count: 1
PIM hello interval: 120 s
PIM LAN delay (negotiated): 500 ms
PIM LAN delay (configured): 100 ms
PIM hello override interval (negotiated): 2500 ms
PIM hello override interval (configured): 2500 ms
PIM Silent: enabled
PIM neighbor tracking (negotiated): disabled
PIM neighbor tracking (configured): disabled
PIM generation ID: 0XC34B2FCD
PIM require-GenID: disabled
PIM hello hold interval: 60 s
PIM hello assert interval: 180 s
PIM triggered hello delay: 5 s
PIM J/P interval: 60 s
PIM J/P hold interval: 200 s
PIM state-refresh processing: enabled
PIM state-refresh interval: 60 s
PIM graft retry interval: 3 s
PIM state-refresh capability on link: capable
PIM dr-switch-delay timer : not configured
Number of routers on network not using DR priority: 0
Number of routers on network not using LAN delay: 0
Number of routers on link not using neighbor tracking: 1
Run the display pim neighbor verbose command, and you can view the detailed information
about PIM neighbors in the public network instance.
<HUAWEI> display pim neighbor verbose
VPN-Instance: public net
Total Number of Neighbors = 1
Neighbor: 12.40.41.1
Interface: Ethernet2/0/12
Uptime: 00:20:19
Expiry time: 00:01:27
DR Priority: 1
Generation ID: 0XB3DDAD78
Holdtime: 105 s
LAN delay: 500 ms
Override interval: 2500 ms
State refresh interval: 60 s
Neighbor tracking: Disabled
4-7
Pre-configuration Tasks
Before configuring control parameters of a multicast source, complete the following tasks:
l
Data Preparation
To configure control parameters of a multicast source, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
4-8
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
If acl-number | acl-name acl-name is specified in the source-policy command and ACL rules are
created, only the multicast packets whose source addresses match the ACL rules are permitted.
If acl-number | acl-name acl-name is specified in the source-policy command and no ACL rule is
created, the multicast packets with any source addresses are not forwarded.
The source-policy command does not filter the static (S, G) entries and the PIM entries of the Join
messages received from private networks.
----End
4-9
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interface-type
interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ]
* [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
Pre-configuration Tasks
Before adjusting control parameters for maintaining neighbor relationships, complete the
following tasks:
4-10
Issue 04 (2010-08-31)
Data Preparation
To adjust control parameters for maintaining neighbor relationships, you need the following
data.
No.
Data
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
timer hello interval
Configuration on an Interface
1.
Run:
system-view
4-11
2.
Run:
interface interface-type interface-number
Run:
pim timer hello interval
Run:
pim triggered-hello-delay interval
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option holdtime interval
Configuration on an Interface
1.
Run:
system-view
Issue 04 (2010-08-31)
2.
Run:
interface interface-type interface-number
Run:
pim hello-option holdtime interval
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
4-13
When configuring the neighbor filtering function on the interface, you must also configure the neighbor
filtering function correspondingly on the router that sets up the neighbor relationship with the interface.
----End
----End
Issue 04 (2010-08-31)
Routers can work normally under the control of the default parameter values. Users can adjust
related parameters according to the specific network environment.
NOTE
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Pre-configuration Tasks
Before adjusting control parameters for prune, complete the following tasks:
l
Data Preparation
To adjust control parameters for prune, you need the following data.
No.
Data
4.5.2 Configuring the Period for an Interface to Keep the Prune State
Context
Do as follows on the PIM-DM router:
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
holdtime join-prune interval
The period during which the downstream interface is in the Prune state is set.
Issue 04 (2010-08-31)
4-15
After the period expires, the pruned interface starts to forward packets again. Before
the period expires, the router refreshes the Prune state when receiving a State-Refresh
message.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim holdtime join-prune interval
The period during which the downstream interface is in the Prune state is set.
After the period is expired, the pruned interface starts to forward packets again.
Before the period expires, the router refreshes the Prune state when receiving a StateRefresh message.
----End
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option lan-delay interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
4-16
Issue 04 (2010-08-31)
Run:
pim hello-option lan-delay interval
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option override-interval interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim hello-option override-interval interval
Issue 04 (2010-08-31)
4-17
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
Issue 04 (2010-08-31)
Router periodically send State-Refresh messages to refresh the prune state of interfaces and
maintain the SPT.
Routers can work normally under the control of the default parameter values. Users can adjust
related parameters according to the specific network environment.
NOTE
Pre-configuration Tasks
Before adjusting control parameters for State-Refresh, complete the following tasks:
l
Data Preparation
To adjust control parameters for State-Refresh, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
4-19
The interface on which PIM-DM State-Refresh is disabled cannot forward any State-Refresh
message.
NOTE
You can run the pim state-refresh-capable command to re-enable PIM-DM State-Refresh on the interface.
----End
Procedure
Step 1 Run:
system-view
This command is applicable to the first-hop router connecting with the multicast source.
The interval for sending PIM State-Refresh messages should be shorter than the timeout period for
keeping the Prune state.
You can run the holdtime join-prune command to set the timeout period for keeping the Prune state.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Step 2 Run:
pim [ vpn-instance vpn-instance-name ]
The period for waiting to receive the next State-Refresh message is set.
----End
Procedure
Step 1 Run:
system-view
This command is valid only on the router directly connected to the source.
----End
Issue 04 (2010-08-31)
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourceHuawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
4-21
mask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
Pre-configuration Task
Before configuring control parameters for graft, complete the following tasks:
4-22
Issue 04 (2010-08-31)
Data Preparation
To configure control parameters for graft, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourceHuawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
4-23
mask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
Pre-configuration Tasks
Before adjusting control parameters for Assert, complete the following tasks:
l
Data Preparation
To adjust control parameters for Assert, you need the following data.
4-24
Issue 04 (2010-08-31)
No.
Data
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
holdtime assert interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim holdtime assert interval
4-25
The router that fails in the election prevents its downstream interface from forwarding
multicast data.
After the Holdtime period of the Assert state expires, the downstream interface can
forward packets.
----End
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
4-26
Issue 04 (2010-08-31)
PIM silent is applicable only to the interface directly connected to the host network segment
that is connected only to this router.
CAUTION
If PIM silent is enabled on the interface connected to a router, the PIM neighbor relationship
cannot be established and a multicast fault may occur.
If the host network segment is connected to multiple routers and PIM silent is enabled on multiple
interfaces of the routers, these interfaces do not send Assert messages. Therefore, multiple
interfaces that forward multicast data exist in the user network segment. A multicast fault thus
occurs.
Pre-configuration Tasks
Before configuring PIM silent, complete the following tasks:
l
Configuring PIM-DM
Configuring IGMP
Data Preparation
To configure PIM silent, you need the following data.
No.
Data
4-27
Context
Do as follows on the interface connected to the host network segment:
Procedure
Step 1 Run:
system-view
Procedure
l
----End
Example
Run the display pim interface verbose command, and you can find that the configuration is
complete.
<HUAWEI> display pim interface gigabitethernet 6/0/0 verbose
VPN-Instance: public net
Interface: GigabitEthernet6/0/0, 10.1.2.1
PIM version: 2
PIM mode: Dense
PIM state: up
PIM DR: 10.1.2.1 (local)
PIM DR Priority (configured): 1
PIM neighbor count: 0
PIM hello interval: 30 s
PIM LAN delay (negotiated): 500 ms
PIM LAN delay (configured): 500 ms
PIM hello override interval (negotiated): 2500 ms
PIM hello override interval (configured): 2500 ms
PIM Silent: enabled
4-28
Issue 04 (2010-08-31)
CAUTION
The statistics of the PIM control messages on the interface cannot be restored after you reset
them. Confirm the action before you run the command.
Procedure
l
----End
Issue 04 (2010-08-31)
4-29
Procedure
l
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
Issue 04 (2010-08-31)
RouterA
Ethernet
Receiver
GE2/0/0
Ethernet
HostA
POS1/0/0
Source
POS3/0/0
GE4/0/0
N1
Leaf network
PIM-DM
GE2/0/0
POS1/0/0
RouterD
POS1/0/0
POS2/0/0
RouterB
N2
POS1/0/0
Receiver
HostB
GE2/0/0
Ethernet
RouterC
router
Interface
IP address
router
Interface
IP address
Router A
POS 1/0/0
192.168.1.1/24
Router D
POS 1/0/0
192.168.2.2/24
GE 2/0/0
10.110.1.1/24
POS 2/0/0
192.168.3.2/24
POS 1/0/0
192.168.2.1/24
POS 3/0/0
192.168.1.2/24
GE 2/0/0
10.110.2.1/24
GE 4/0/0
10.110.5.1/24
POS 1/0/0
192.168.3.1/24
GE 2/0/0
10.110.2.2/24
Router B
Router C
Configuration Roadmap
The network is a small-scale experiment network. Therefore, PIM-DM is adopted. Enable PIM
silent on Router A to prevent Hello message attack. The configuration roadmap is as follows:
1.
2.
3.
Enable PIM silent on the interface connected to hosts, and configure IGMP.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Enable multicast on each router and PIM-DM on each interface.
# Enable multicast on Router A and enable PIM-DM on each interface. The configuration
procedures on Router B, Router C, and Router D are similar to those on Router A, and are not
mentioned here.
[RouterA] multicast routing-enable
Issue 04 (2010-08-31)
4-31
Step 2 Enable PIM silent on the interface connected to hosts, and configure IGMP on the interface.
# On Router A, enable PIM silent on the interface connected to hosts, and configure IGMP on
the interface.
[RouterA] interface gigabitethernet 2/0/0
[RouterA-GigabitEthernet2/0/0] pim silent
[RouterA-GigabitEthernet2/0/0] igmp enable
[RouterA-GigabitEthernet2/0/0] quit
# On Router B, configure IGMP on the interface. The configurations of Router C are the same
as that of Router B, and are not mentioned here.
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] igmp enable
[RouterB-GigabitEthernet2/0/0] quit
DR-Pri
1
1
1
1
1
DR-Address
172.168.0.2
10.110.5.1
192.168.1.2
192.168.2.2
192.168.3.2
(local)
(local)
(local)
(local)
(local)
# Run the display pim neighbor command to view the PIM neighbor relationship between
routers. Take the PIM neighbor relationship on Router D as an example:
<RouterD> display pim neighbor
VPN-Instance: public net
Total Number of Neighbors = 3
Neighbor
Interface
192.168.1.1
Pos3/0/0
192.168.2.1
Pos1/0/0
192.168.3.1
Pos2/0/0
Uptime
00:02:22
00:00:22
00:00:23
Expires
00:01:27
00:01:29
00:01:31
Dr-Priority
1
1
1
BFD-Session
N
N
N
# Run the display pim routing-table command, and you can view the PIM routing table. Assume
that Host A requests the information of group G (225.1.1.1). After multicast source S
(10.110.5.100) sends multicast packets to multicast group G (255.1.1.1), the MDT (Multicast
Distribution Tree) is established be means of flooding. All PIM multicast routers (including
Router A and Router D) on the MDT have the (S, G) entry. Host A joins G, and Router A
generates an (*, G) entry. The display information on Router B and Router C is similar to that
on Router A.
<RouterA> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
Protocol: pim-dm, Flag: WC
UpTime: 03:54:19
Upstream interface: NULL
Upstream neighbor: NULL
RPF prime neighbor: NULL
Downstream interface(s) information:
4-32
Issue 04 (2010-08-31)
----End
Configuration Files
l
Issue 04 (2010-08-31)
4-33
4-34
Issue 04 (2010-08-31)
pim dm
#
ospf 1
area 0.0.0.0
network 192.168.2.0 0.0.0.255
network 192.168.3.0 0.0.0.255
network 192.168.1.0 0.0.0.255
network 10.110.5.0 0.0.0.255
#
return
Issue 04 (2010-08-31)
4-35
5-1
5-2
Issue 04 (2010-08-31)
For details of RPF, refer to the chapter IPv4 Multicast Routing Management in the NE80E/40E Router
Configuration Guide - IP Multicast.
The working process of the Protocol Independent Multicast-Sparse Mode (PIM-SM) consists
of neighbor discovery, assert, DR election, RP discovery, join, prune, register, and SPT
switchover.
As shown in Figure 5-1, PIM-SM is used in a large-scale network with sparsely distributed
group members.
Figure 5-1 Application of PIM-SM a the multicast network
Receiver
IGMP
Source
Multicast
Server
PIM-SM
UserA
PIM-SM
PIM-SM
PIM-SM
PIM-SM
IGMP
UserB
PIM-SM
PIM-SM
Receiver
IGMP
Receiver
UserC
Issue 04 (2010-08-31)
5-3
NOTE
The Protocol Independent Multicast Dense Mode (PIM-DM) is applicable to a small-scale network
with densely distributed members.
PIM-SM can be used to construct the Any-Source Multicast (ASM) and Source-Specific Multicast
(SSM) models.
Static RP
You can specify a static RP on all the routers in a PIM-SM domain. When a dynamic RP exists
in the domain, the dynamic RP is preferred by default, but you can configure the static RP to be
preferred.
Dynamic RP
You can configure C-RPs and C-BSRs in a PIM-SM domain and set the unified rules used to
dynamically generated the BSR and the RP. You can adjust the priority for C-RP election, adjust
the lifetime of the advertisement message on the BSR received from the C-RP, adjust the interval
for the C-RP to send advertisement messages, and specify an Access Control List (ACL) to limit
the range of the multicast groups served by the C-RP.
BSR
You can specify the C-BSR in the BSR domain, adjust the hash length used by the RP for C-RP
election, adjust the priority used for BSR election, and adjust the legal BSR address range. To
limit the transmission of BSR messages, you can configure the BSR service boundary on an
interface of the router on the boundary of the BSR domain.
5-4
Issue 04 (2010-08-31)
DR switching delay
Neighbor filtering function: An interface sets up neighbor relationships with only the
addresses matching the filtering rules and deletes the neighbors unmatched with the filtering
rules.
Time period for the downstream interface to keep the forwarding state
Neighbor check function: checks whether the Join/Prune and Assert messages are sent to
or received from a PIM neighbor. If not, these messages are not sent.
PIM BFD
In the NE80E/40E, you can dynamically set up the BFD session to detect the status of the link
between PIM neighbors. Once a fault occurs on the link, BFD reports the fault to PIM.
PIM GR
The NE80E/40E supports the PIM GR function on the router with double MPUs. PIM GR
ensures normal multicast data forwarding during master-slave switchover of the router.
5-5
Multi-Instance PIM
In multi-instance applications, a multicast router needs to maintain the PIM neighbor list,
multicast routing table, BSR information, and RP-Set information for different VPN instances
and keep the information independent between the instances. The router functions as multiple
multicast routers running PIM independently.
When a router receives a data packet, it needs to differentiate which VPN instance the packet
belongs to and forward it based on the multicast routing table of that VPN instance, or create
PIM-related multicast routing entries in that VPN instance.
The SSM model is only supported in IGMPv3. If user hosts must run IGMPv1 or IGMPv2, configure IGMP
SSM mapping on router interfaces.
Through IGMP, a router knows the multicast group G that a user wants to join.
l
If G is in the SSM group address range and the source S is specified when the user joins G
through IGMPv3, the SSM model is used to provide multicast services.
If G is in the SSM group address range and the router is configured with the (S, G) SSM
mapping rules, the SSM model is used to provide multicast services.
If G is not in the SSM group address range, the ASM model is used to provide multicast
services.
In the PIM-SM network, the ASM model supports the following methods to obtain an RP. You
can select the method as required.
l
5-6
dynamic RP: To obtain the dynamic RP, select several routers in the PIM-SM domain and
configure them as C-RPs and C-BSRs, and then configure the BSR boundary on the
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
interface on the boundary of the domain. Each router in the PIM-SM domain can then
automatically obtain the RP.
l
Static RP: To obtain a static RP, manually configure RP on each router in the PIM-SM
domain. For the large-scale PIM network, configuring the static RP is complicated. To
enhance the robustness and the operating management of the multicast network, the static
RP is usually used as the backup of the BSR-RP.
A multicast group may be in the service range of the dynamic RP and the static RP
simultaneously. By default, The router prefers the dynamic RP. If the static RP precedence is
configured, the static RP is preferred.
Different multicast groups correspond to different RPs. Compared with all groups corresponding
to an RP, this can reduce the burden of an RP and enhance the robustness of the network.
Pre-configuration Tasks
Before configuring basic PIM-SM functions, complete the following tasks:
l
Data Preparation
To configure basic PIM-SM functions, you need the following data.
No.
Data
Static RP address
C-RP priority
Timeout of the period during which BSR waits to receive the Advertisement message
from C-RP.
C-BSR priority
Issue 04 (2010-08-31)
5-7
Context
CAUTION
The configuration related to the VPN instance is applicable only to the PE router. If the interface
of the VPN instance connects to the host, run the commands in step 3 and step 4.
Do as follows on the router:
Procedure
Step 1 Run:
system-view
PIM-SM and PIM-DM cannot be enabled on an interface at the same time. The PIM mode on all interfaces
that belong to the same instance must be consistent. When the router is distributed in the PIM-SM domain,
enable PIM-SM on all non-boundary interfaces.
Procedure
Step 1 Run:
system-view
5-8
Issue 04 (2010-08-31)
PIM SM is enabled.
After PIM SM is enabled on the interface and PIM neighbor relationships are set up between
routers, the packets from the PIM neighbors can be processed.
----End
CAUTION
When the static RP and the dynamicRP are configured in the PIM-SM at the same time, faults
may occur in the network. So, confirm the action before you run the command. If you want to
use only the dynamicRP in the PIM-SM network, skip the configuration.
Do as follows on all routers in the PIM-SM area:
Procedure
Step 1 Run:
system-view
All routers in the PIM-SM area must be configured with the same static-rp command.
l
basic-acl-number | acl-name acl-name: specifies the ACL. The ACL defines the range of
the multicast group served by the static RP. When the range of multicast groups that multiple
static RPs serve overlaps, the static RP with the largest IP address functions as the RP.
preferred: indicates the preference of the static RP. If the C-RP is configured in the network
at the same time, the router prefers the RP statically specified after preferred is used.
Otherwise, C-RP is preferred.
----End
Issue 04 (2010-08-31)
5-9
CAUTION
The configuration is applicable only to the dynamic RP. If you want to use the static RP in the
network, skip the configuration.
Do as follows on the router that may become RP in the PIM-SM area:
Procedure
Step 1 Run:
system-view
interface-type interface-number: specifies the interface where the C-RP resides. The
interface must be configured with PIM-SM.
priority priority: specifies the priority for electing C-RP. The greater is the value, the lower
is the priority. By default, it is 0.
In the RP election, the C-RP with the highest priority wins. In case of the same priority, the
hash function is used and the C-RP with the greatest hash value wins. In case of the same
priority and the same hash value, the C-RP with the highest IP address wins.
NOTE
holdtime hold-interval: specifies the interval during which the BSR waits for the
Advertisement message from the C-RP. By default, the interval is 150 seconds.
advertisement-interval adv-interval: specifies the interval during which the C-RP sends the
Advertisement message. By default, the interval is 60 seconds.
Step 4 Run:
c-bsr interface-type interface-number [ hash-length [ priority ] ]
5-10
Issue 04 (2010-08-31)
interface-type interface-number: specifies the interface where the C-BSR resides. The
interface must be configured with the PIM-SM.
hash-length: specifies the length of the hash. According to the G, C-RP address, and the value
of hash-length, routers calculate the C-RPs that have the same priority and require to serve
G by operating hash functions, and compare the calculation results. The C-RP with the
greatest calculated value functions as the RP that serves G.
priority: specifies the priority used by routers to join the BSR election. The greater is the
value, the higher is the priority. By default, it is 0.
In the BSR election, the C-BSR with the highest priority wins. In the case of the same priority,
the C-BSR with the largest IP address wins.
Procedure
Step 1 Run:
system-view
Ensure that the SSM group address range of all routers in the network is consistent.
----End
Issue 04 (2010-08-31)
5-11
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
Run the display pim [ vpn-instance vpn-instance-name | all-instance ] rp-info [ groupaddress ] command to check the RP in a PIM-SM domain.
----End
5-12
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before adjusting control parameters for a multicast source, complete the following tasks:
l
Data Preparation
To adjust control parameters for a multicast source, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
5-13
Step 3 Run:
source-lifetime interval
Procedure
Step 1 Run:
system-view
A filter is configured.
If the basic ACL is configured, only the packets with the source addresses that pass the filtering
are forwarded.
If the advanced ACL is configured, only the packets with the source addresses and group
addresses that pass the filtering are forwarded.
NOTE
If acl-number | acl-name acl-name is specified in the source-policy command and ACL rules are
created, only the multicast packets whose source addresses match the ACL rules are permitted.
If acl-number | acl-name acl-name is specified in the source-policy command and no ACL rule is
created, the multicast packets with any source addresses are not forwarded.
The source-policy command does not filter the static (S, G) entries and the PIM entries of the Join
messages received from private networks.
----End
5-14
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfaceHuawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
number | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
The configuration is applicable only to a BSR-RP. If you want to use only a static RP in the network, skip
the configuration.
The router can work normally under the control of default values. The NE80E/40E allows users
to adjust the parameters as required.
NOTE
Pre-configuration Tasks
Before adjusting control parameters of the C-RP and C-BSR, complete the following tasks:
Issue 04 (2010-08-31)
5-15
Data Preparation
To adjust various control parameters of the C-RP and C-BSR, you need the following data.
No.
Data
RP priority
Timeout of the period during which a BSR waits to receive Advertisement messages
from a C-RP
Priority of a C-BSR
You can re-set various parameters of a C-RP. This configuration is optional. If there is no specific
requirement, default values of parameters are recommended.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Step 4 Run:
c-rp advertisement-interval interval
The interval during which the C-RP sends Advertisement messages is set.
Step 5 Run:
c-rp holdtime interval
The time for holding the Advertisement message from a C-RP is set. The value must be greater
than the interval for a C-RP to send advertisement messages.
The C-RP periodically sends advertisement messages to the BSR. After receiving the
advertisement messages, the BSR obtains the Holdtime of the C-RP from the message. During
the Holdtime, the C-RP is valid. When the Holdtime expires, the C-RP ages out.
----End
You can re-set various parameters of a C-BSR. This configuration is optional. If there is no specific
requirement, the default values of parameters are recommended.
Procedure
Step 1 Run:
system-view
The time of holding the Bootstrap message received from a BSR is set.
Issue 04 (2010-08-31)
5-17
The BSR periodically sends a Bootstrap message to the network. After receiving the Bootstrap
message, the routers keep the message for a certain time. During the period, the BSR election
stops temporarily. If the Holdtime timer times out, a new round of BSR election is triggered
among C-BSRs.
NOTE
Ensure that the value of c-bsr holdtime is greater than the value of c-bsr interval. Otherwise, the winner
of BSR election cannot be fixed.
----End
Procedure
Step 1 Run:
system-view
The BSR boundary is configured. Bootstrap messages cannot pass the BSR boundary.
By default, all the PIM-SM routers on the network can receive Bootstrap messages.
NOTE
Routers outside the BSR boundary cannot participate in multicast forwarding in this PIM-SM domain.
----End
By default, all BSR packets are received without the BSR source address check.
Procedure
Step 1 Run:
system-view
5-18
Issue 04 (2010-08-31)
This configuration is optional. By default, a router does not check the C-RP address and the group address
contained in a received Advertisement message and adds them to the RP-set.
Procedure
Step 1 Run:
system-view
The range of the valid C-RP addresses and the range of the multicast group addresses that a
router serves are specified. When receiving an Advertisement message, the router checks the CRP address and the addresses of the groups that the C-RP serves in the message. The C-RP
address and the addresses of the groups that the C-RP serves are added to the RP-Set only when
they are in the valid address range. The C-RP spoofing can thus be prevented.
{ advanced-acl-number | acl-name acl-name }: specifies the advanced ACL. The ACL defines
the filtering policy for the C-RP address range and the address range of the groups that a C-RP
serves.
----End
Issue 04 (2010-08-31)
5-19
Run the display pim [ vpn-instance vpn-instance-name | all-instance ] rp-info [ groupaddress ] command to check the RP in a PIM-SM domain.
----End
5-20
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before configuring a BSR administrative domain, complete the following tasks:
l
Data Preparation
To configure a BSR administrative domain, you need the following data.
No.
Data
Priority and hash mask length for electing a BSR in a BSR domain
Priority and hash mask length of electing the global domain BSR
Procedure
Step 1 Run:
system-view
The routers outside the BSR administrative domain cannot forward the multicast packets of the BSR
administrative domain.
Issue 04 (2010-08-31)
5-21
Procedure
Step 1 Run:
system-view
The BSR administrative domain boundary is configured. Multicast packets that belong to the
BSR administrative domain cannot traverse the boundary.
----End
Global configuration: For global configuration, see Adjusting Control Parameters of the C-RP and
C-BSR. It is valid in the global domain and each BSR administrative domain.
Configuration in the global domain: Because the configuration in the global domain takes precedence
over the global configuration, the global configuration is used when the configuration in the global
domain is not done.
Procedure
l
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
c-bsr group group-address { mask | mask-length } [ hash-length hashlength | priority priority ] *
Issue 04 (2010-08-31)
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
c-bsr global [ hash-length hash-length | priority priority ] *
----End
Run the display pim [ vpn-instance vpn-instance-name | all-instance ] rp-info [ groupaddress ] command to check the RP in a PIM-SM domain.
----End
Issue 04 (2010-08-31)
5-23
Pre-configuration Tasks
Before configuring control parameters for establishing the neighbor relationship, complete the
following tasks:
l
Data Preparation
To adjust the control parameters for establishing the neighbor relationship, you need the
following data.
No.
Data
DR switchover delay, that is, the period during which the original entries are still
valid when the interface changes from a DR to a non-DR.
Issue 04 (2010-08-31)
NOTE
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
timer hello interval
Run:
hello-option holdtime interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim timer hello interval
Run:
pim triggered-hello-delay interval
Run:
pim hello-option holdtime interval
5-25
If no Hello message is received after the interval expires, the neighbor is considered
unreachable.
6.
Run:
pim require-genid
The Generation ID option is contained in a received Hello message. The Hello message
without the Generation ID option is rejected.
By default, the router handles the Hello message without the Generation option.
----End
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option dr-priority priority
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
5-26
Issue 04 (2010-08-31)
Run:
pim hello-option dr-priority priority
Run:
pim timer dr-switch-delay interval
Configuration on the interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option neighbor-tracking
5-27
The function of tracking downstream neighbors cannot be implemented unless all the PIM
routers in the shared network segment are enabled with this function.
Configuration on an interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim hello-option neighbor-tracking
The function of tracking downstream neighbors cannot be implemented unless all PIM
routers in the shared network segment are enabled with this function.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
NOTE
When configuring the PIM neighbor filtering function on the interface, you must also configure the
neighbor filtering function correspondingly on the router that sets up the neighbor relationship with the
interface.
----End
----End
Issue 04 (2010-08-31)
5-29
Pre-configuration Tasks
Before adjusting control parameters for source registering, complete the following tasks:
l
Data Preparation
To adjust control parameters for source registering, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
----End
5-31
Pre-configuration Tasks
Before adjusting control parameters for forwarding, complete the following tasks:
l
Data Preparation
To adjust control parameters for forwarding, you need the following data.
No.
Data
Number or name of the ACL used to filter join information in the Join/Prune messages
Whether neighbor check needs to be performed after Join/Prune message and Assert
messages are sent or received
Issue 04 (2010-08-31)
Context
Do as follows on the PIM-SM router:
NOTE
Configuration on the interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
timer join-prune interval
Run:
holdtime join-prune interval
The interval for holding the forwarding state of a downstream interface is set.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
timer join-prune interval
Run:
pim holdtime join-prune interval
The interval for holding the forwarding state of a downstream interface is set.
5.
Run:
pim require-genid
The Generation ID option is contained in a received Hello message. The Hello message
without the Generation ID option is rejected.
By default, the router handles the Hello message without the Generation option.
Issue 04 (2010-08-31)
5-33
The change of the Generation ID in the Hello message received from an upstream
neighbor indicates that the upstream neighbor is lost or the status of the upstream
neighbor has changed. The router immediately sends the Join/Prune message to the
upstream router to refresh the status.
----End
Configuration on the interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
hello-option lan-delay interval
Run:
hello-option override-interval interval
Configuration on an Interface
1.
Run:
system-view
5-34
Issue 04 (2010-08-31)
Run:
interface interface-type interface-number
Run:
pim hello-option lan-delay interval
Run:
pim hello-option override-interval interval
Procedure
Step 1 Run:
system-view
5-35
network. Then, the router checks whether the Join/Prune and Assert messages are sent to or
received from a PIM neighbor. If not, the router drops the messages.
Do as follows on the router enabled with PIM-SM:
Procedure
Step 1 Run:
system-view
5-36
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before adjusting control parameters for assert, complete the following tasks:
l
Data Preparation
To adjust control parameters for assert, you need the following data.
No.
Data
5-37
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim [ vpn-instance vpn-instance-name ]
Run:
holdtime assert interval
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim holdtime assert interval
5-38
Issue 04 (2010-08-31)
ack | hello | join-prune | state-refresh | bsr } ] command to check the number of sent or
received PIM control messages.
l
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
The DR at the source side and the RP need to encapsulate and decapsulate packets.
Forwarding path may not be the shortest path from the source to receivers.
Large-volume data flow increases the load of the RP, and may cause a fault.
5-39
SPT switchover triggered by the RP: The RP sends a Join message to the source, and
establishes a multicast route along the shortest path from the source to the RP. The
subsequent packets are forwarded along the path.
SPT switchover triggered by the DR at the member side: The DR at the member side checks
the forwarding rate of multicast data. If the DR finds that the rate exceeds the threshold,
the DR tiggers the SPT switchover immediately. The DR sends a Join message to the source,
and establishes a multicast route along the shortest path from the source to the DR. The
subsequent packets are forwarded along the path.
Routers can work normally under the control of default values. The NE80E/40E allows users to
adjust the parameters as required.
NOTE
Pre-configuration Tasks
Before configuring the SPT switchover, complete the following tasks:
l
Data Preparation
To configure the SPT switchover, you need the following data.
No.
Data
Rate threshold that a leaf PIM router switches packets from the RPT to the SPT
Group filtering policy and sequence policy for the switchover from the RPT to the
SPT
Interval for checking the rate threshold of multicast data before the RPT-to-SPT
switchover
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Step 2 Run:
pim [ vpn-instance vpn-instance-name ]
Step 4 Run:
timer spt-switch interval
The interval for checking the forwarding rate of multicast data is set.
----End
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
----End
5-41
Pre-configuration Tasks
Before configuring PIM BFD, complete the following task:
l
Data Preparation
To configure PIM BFD, you need the following data.
No.
Data
Minimum intervals for sending and receiving BFD detection messages, and local
detection multiple
This function is applicable to NBMA interfaces and broadcast interfaces rather than MTunnel interfaces.
Procedure
Step 1 Run:
5-42
Issue 04 (2010-08-31)
system-view
Procedure
Step 1 Run:
system-view
Run the following commands to check information about a PIM BFD session.
Issue 04 (2010-08-31)
5-43
----End
Pre-configuration Tasks
Before enabling PIM GR, complete the following task:
5-44
Issue 04 (2010-08-31)
Data Preparation
To enable PIM GR, you need the following data.
No.
Data
Unicast GR period
PIM GR period
Procedure
Step 1 Run:
system-view
PIM GR is enabled.
Step 4 (Optional) Run:
graceful-restart period period
Issue 04 (2010-08-31)
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interface-number |
register } | outgoing-interface { include | exclude | match } { interface-type interfaceHuawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
5-45
number | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] * [ outgoinginterface-number [ number ] ]
l
display pim [ vpn-instance vpn-instance-name | all-instance ] routing-table brief [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interface-number |
register } ] *
----End
CAUTION
If PIM silent is enabled on the interface connected to a router, the PIM neighbor relationship
cannot be set up and a multicast fault may occur.
If the host network segment is connected to multiple routers and PIM silent is enabled on multiple
interfaces, the interfaces become static DRs. Therefore, multiple DRs exist in this network
segment, and a fault occurs.
5-46
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before configuring PIM silent, complete the following tasks:
l
Configuring PIM-SM
Configuring IGMP
Data Preparation
To configure PIM silent, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
5-47
Procedure
l
----End
Example
Run the display pim interface verbose command, and you can find that the configuration is
complete.
<RouterA> display pim interface verbose
VPN-Instance: public net
Interface: GigabitEthernet6/1/1, 2.2.2.2
PIM version: 2
PIM mode: Sparse
PIM DR: 2.2.2.2 (local)
PIM DR Priority (configured): 1
PIM neighbor count: 0
PIM hello interval: 30 s
PIM LAN delay (negotiated): 500 ms
PIM LAN delay (configured): 500 ms
PIM hello override interval (negotiated): 2500 ms
PIM hello override interval (configured): 2500 ms
PIM Silent: enabled
PIM neighbor tracking (negotiated): disabled
PIM neighbor tracking (configured): disabled
PIM generation ID: 0X2649E5DA
PIM require-genid: disabled
PIM hello hold interval: 105 s
PIM hello assert interval: 180 s
PIM triggered hello delay: 5 s
PIM J/P interval: 60 s
PIM J/P hold interval: 210 s
PIM state-refresh capability on link: non-capable
PIM BSR domain border: disabled
PIM dr-switch-delay timer : not configured
Number of routers on link not using DR priority: 0
Number of routers on link not using LAN delay: 0
Number of routers on link not using neighbor tracking: 1
5-48
Issue 04 (2010-08-31)
CAUTION
The statistics of PIM control messages on an interface cannot be restored after you clear it. So,
confirm the action before you use the command.
Procedure
l
----End
CAUTION
Clearing PIM status of the downstream interfaces may trigger the sending of corresponding Join/
Prune messages, which affects multicast services.
Using the following command can clear join information about illegal users, and clear the PIM
status of the specified interface in a specified entry, such as PIM Join/Prune status and Assert
status.
The command cannot be used to clear the IGMP or static group join status on a specified
interface.
Procedure
Step 1 After confirming that PIM status of the specified downstream interfaces of the specified PIM
entry need to be cleared, run the reset pim [ vpn-instance vpn-instance-name ] routing-table
group group-address mask { group-mask-length | group-mask } source source-address
interface interface-type interface-number command in the user view.
----End
Issue 04 (2010-08-31)
5-49
Procedure
l
Run the following commands in any view to check the PIM routing table.
display pim { vpn-instance vpn-instance-name | all-instance } routing-table [ groupaddress [ mask { group-mask-length | group-mask } ] | source-address [ mask { sourcemask-length | source-mask } ] | incoming-interface { interface-type interfacenumber | register } | outgoing-interface { include | exclude | match } { interfacetype interface-number | register | none } | mode { dm | sm | ssm } | flags flag-value |
fsm ] * [ outgoing-interface-number [ number ] ]
display pim routing-table [ group-address [ mask { group-mask-length | groupmask } ] | source-address [ mask { source-mask-length | source-mask } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } | mode { dm | sm | ssm } | flags flag-value | fsm ] *
[ outgoing-interface-number [ number ] ]
Run the display pim [ vpn-instance vpn-instance-name | all-instance ] rp-info [ groupaddress ] command in any view to check information about the RP to which a multicast
group corresponds.
----End
5-50
Issue 04 (2010-08-31)
RouterA
POS3/0/0
Ethernet
GE2/0/0
Receiver
POS1/0/0
POS2/0/0
Source
N1
GE3/0/0
RouterD
HostA
PIM-SM
RouterE
POS1/0/0
Leaf networks
POS3/0/0
POS4/0/0
POS4/0/0
POS1/0/0
RouterC
POS2/0/0
GE2/0/0
POS1/0/0
Receiver
RouterB
HostB
POS2/0/0
N2
GE1/0/0
Ethernet
router
Interface
IP Address
Router A
POS 1/0/0
192.168.9.1/24
POS 3/0/0
192.168.1.1/24
GE 2/0/0
10.110.1.1/24
POS 1/0/0
192.168.2.1/24
GE 2/0/0
10.110.2.1/24
POS 2/0/0
192.168.3.1/24
GE 1/0/0
10.110.2.2/24
POS 1/0/0
192.168.4.2/24
POS 2/0/0
192.168.1.2/24
POS 4/0/0
10.110.4.1/24
Router B
Router C
Router D
Issue 04 (2010-08-31)
5-51
Router E
GE 3/0/0
10.110.5.1/24
POS 1/0/0
192.168.3.2/24
POS 2/0/0
192.168.2.2/24
POS 3/0/0
192.168.9.2/24
POS 4/0/0
192.168.4.1/24
Configuration Roadmap
The ISP network is accessed to the Internet. To expand services, PIM-SM is adopted to configure
multicast functions, and ASM and SSM models are used to provide multicast services.
1.
Configure an IP address for each interface on routers and a unicast routing protocol. PIM,
an intra-domain multicast routing protocol, depends on unicast routing protocols. The
multicast routing protocol can work normally only when unicast routing protocols work
normally.
2.
Enable the multicast function on all the routers providing multicast services. PIM-SM can
be configured only after multicast is enabled.
3.
Enable PIM-SM on all interfaces of the multicast routers. Other PIM-SM functions can be
configured only after PIM-SM is enabled.
NOTE
If IGMP needs to be configured on this interface, PIM-SM must be enabled before IGMP is enabled.
The configuration order cannot be reversed; otherwise, the configuration of PIM-SM fails.
4.
Enable IGMP on the interface connected to user hosts. A receiver can join and leave a
multicast group freely by sending IGMP messages. Leaf routers maintain the member
relationship through IGMP.
5.
Enable PIM silent on the router interface connected to hosts to prevent malicious hosts
from attacking the router by simulating and sending PIM Hello packets; therefore, the
security of multicast routers can be ensured.
NOTE
PIM silent is applicable only to the router interface directly connected to the host network segment
that is connected only to this router.
6.
7.
5-52
After creating an (*, G) entry according to the new multicast member relationship, the DR on
the user side sends Join/Prune messages to the RP, updating the shared tree.
When a multicast data source starts to send data to groups, the DR unicasts a Register message
to the RP. After receiving the Register message, the RP decapsulates it and then forwards it to
other multicast members along the shared tree. At the same time, the RP sends a Register-Stop
message to the DR on the multicast source side. After the Register-Stop message is received by
the DR, the traffic can be switched from RPT to the SPT.
(Optional) Configure the BSR boundary on the interface connected to the Internet.
Bootstrap messages cannot pass through the BSR boundary; therefore, the BSR serves this
PIM-SM domain only. In this manner, multicast services can be controlled effectively.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
8.
(Optional) Configure the SSM group address range on each router. Ensure that multicast
routers in the PIM-SM domain provide services only for multicast groups in the SSM group
address range. In this manner, multicast services can be controlled effectively.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address and a unicast routing protocol on each interface.
Step 2 Enable multicast on all routers and PIM-SM on all interfaces.
# Enable multicast on all routers and PIM-SM on all interfaces. The configurations of Router
B, Router C, Router D, and Router E are the same as the configuration of Router A, and are not
mentioned here.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet 2/0/0
[RouterA-GigabitEthernet2/0/0] pim sm
[RouterA-GigabitEthernet2/0/0] quit
[RouterA] interface pos 1/0/0
[RouterA-Pos1/0/0] pim sm
[RouterA-Pos1/0/0] quit
[RouterA] interface pos 3/0/0
[RouterA-Pos3/0/0] pim sm
[RouterA-Pos3/0/0] quit
RPs are classified into two types, that is, the static RP and the dynamic RP. You can configure the static
RP and the dynamic at the same time or just configure one of them.
When the static RP and the dynamic RP are configured simultaneously, you can adjust parameters to
specify the preferred RP.
This example shows how to configure the static RP and the dynamic RP, to prefer the dynamic
RP, and specify the static RP as the standby RP by configuring the parameters.
# Configure the dynamic RP on one or more routers in the PIM-SM domain. Set the service
range of the RP advertisement and configure the C-BSR and the C-RP on Router E.
Issue 04 (2010-08-31)
5-53
# Configure the static RP on all multicast routers. Configure Router A, Router B, Router C,
Router D, and Router E. The configurations on Router B, Router C, Router D, and Router E are
similar to those on Router A. The detailed configurations are not mentioned here.
NOTE
If preferred is set in the static-rp x.x.x.x command, the static RP is preferred as the RP in the PIM-SM
domain.
[RouterA] pim
[RouterA-pim] static-rp 192.168.2.2
Step 6 On Router D, configure the BSR boundary on the interface connected to the Internet.
[RouterD] interface pos 4/0/0
[RouterD-Pos4/0/0] pim bsr-boundary
[RouterD-Pos4/0/0] quit
DR-Pri
1
1
DR-Address
10.110.2.2
192.168.3.1
(local)
# Run the display pim bsr-info command to view the BSR election on a router. For example,
the BSR information on Router A and Router E (including the C-BSR information on Router
E) is as follows:
<RouterA> display pim bsr-info
VPN-Instance: public net
Elected AdminScoped BSR Count: 0
Elected BSR Address: 192.168.9.2
Priority: 0
Hash mask length: 30
State: Accept Preferred
Scope: Not scoped
Uptime: 01:40:40
Expires: 00:01:42
C-RP Count: 1
<RouterE> display pim bsr-info
VPN-Instance: public net
Elected AdminScoped BSR Count: 0
Elected BSR Address: 192.168.9.2
Priority: 0
5-54
Issue 04 (2010-08-31)
# Run the display pim rp-info command to view the RP information obtained by a router. For
example, the RP information on Router A is as follows:
<RouterA> display pim rp-info
VPN-Instance: public net
PIM-SM BSR RP information:
Group/MaskLen: 225.1.1.0/24
RP: 192.168.9.2
Priority: 0
Uptime: 00:51:45
Expires: 00:02:22
PIM SM static RP information:
Static RP: 192.168.2.2
# Run the display pim routing-table command to view the PIM multicast routing table on a
router. Host A needs to receive the information about group 225.1.1.1/24, and Host B needs to
receive the information sent by source 10.110.5.100/24 to group 232.1.1.1/24. The display is as
follows:
<RouterA> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 192.168.9.2
Protocol: pim-sm, Flag: WC
UpTime: 00:13:46
Upstream interface: Pos1/0/0,
Upstream neighbor: 192.168.9.2
RPF neighbor: 192.168.9.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0,
Protocol: igmp, UpTime: 00:13:46, Expires:(10.110.5.100, 225.1.1.1)
RP: 192.168.9.2
Protocol: pim-sm, Flag: SPT ACT
UpTime: 00:00:42
Upstream interface: Pos3/0/0
Upstream neighbor: 192.168.1.2
RPF neighbor: 192.168.1.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 00:00:42, Expires:<RouterD> display pim routing-table
VPN-Instance: public net
Total 0 (*, G) entry; 2 (S, G) entries
(10.110.5.100, 225.1.1.1)
RP: 192.168.9.2
Protocol: pim-sm, Flag: SPT ACT
UpTime: 00:00:42
Upstream interface: GigabitEthernet3/0/0
Upstream neighbor: 10.110.5.100
RPF neighbor: 10.110.5.100
Downstream interface(s) information:
Issue 04 (2010-08-31)
5-55
----End
Configuration Files
l
5-56
Issue 04 (2010-08-31)
igmp enable
igmp version 3
pim silent
#
interface Pos3/0/0
link-protocol ppp
undo shutdown
ip address 192.168.1.1 255.255.255.0
pim sm
#
interface Pos1/0/0
link-protocol ppp
undo shutdown
ip address 192.168.9.1 255.255.255.0
pim sm
#
ospf 1
area 0.0.0.0
network 10.110.1.0 0.0.0.255
network 192.168.1.0 0.0.0.255
network 192.168.9.0 0.0.0.255
#
pim
static-rp 192.168.2.2
ssm-policy 2000
#
return
l
Issue 04 (2010-08-31)
5-57
5-58
Issue 04 (2010-08-31)
5-59
RouterA
POS2/0/0
Ethernet
POS1/0/0
POS2/0/0
Source
GE3/0/0
Leaf
networks
POS1/0/0
POS1/0/0
POS3/0/0
RouterB
GE2/0/0
RouterC
Receiver
HostA
PIM-SM
Ethernet
router
Interface
IP address
Router A
POS 1/0/0
192.168.1.1/24
POS 2/0/0
192.168.3.1/24
POS 1/0/0
192.168.2.1/24
POS 2/0/0
192.168.3.2/24
GE 3/0/0
10.110.5.1/24
POS 1/0/0
192.168.1.2/24
POS 3/0/0
192.168.2.2/24
GE 2/0/0
10.110.2.1/24
Router B
Router C
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Enable multicast on each router, PIM-SM on each interface, and IGMP on the interface at
the host side.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
5-60
Issue 04 (2010-08-31)
The number of IGMP version running between Router C and the leaf network is 2.
Procedure
Step 1 Configure an IP address and a unicast routing protocol on each interface.
# Based on Figure 5-3, configure an IP address and mask of each interface, interconnect
routers through OSPF, ensure that Router A, Router B, and Router C can interconnect at the
network layer, and configure the three routers to dynamically update routes through a unicast
routing protocol. The configuration details are not mentioned here.
Step 2 Enable multicast on each router, PIM-SM on each interface, and IGMP on the interface at the
host side.
# Enable multicast on each router, PIM-SM on each interface, and IGMP on the interfaces
through which Router C is connected to the leaf network. The configurations of Router A and
Router B are the same as the configuration of Router C, and are not mentioned here.
[RouterC] multicast routing-enable
[RouterC] interface gigabitethernet 2/0/0
[RouterC-GigabitEthernet2/0/0] pim sm
[RouterC-GigabitEthernet2/0/0] igmp enable
[RouterC-GigabitEthernet2/0/0] igmp version 2
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface pos 3/0/0
[RouterC-Pos2/0/0] pim sm
[RouterC-Pos2/0/0] quit
[RouterC] interface pos 1/0/0
[RouterC-Pos1/0/0] pim sm
[RouterC-Pos1/0/0] quit
Issue 04 (2010-08-31)
5-61
UpTime: 00:13:46
Upstream interface: Pos1/0/0,
Upstream neighbor: 192.168.1.1
RPF neighbor: 192.168.1.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0,
Protocol: igmp, UpTime: 00:13:46, Expires:(10.110.5.100, 225.1.1.1)
RP: 192.168.1.1
Protocol: pim-sm, Flag: ACT
UpTime: 00:00:42
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.1.1
RPF neighbor: 192.168.1.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 00:00:42, Expires:-
# When the rate is greater than 1024 kbit/s, run the display pim routing-table command to view
the PIM multicast routing table on the router. You can find that the upstream neighbor is Router
B. The display is as follows:
<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 192.168.1.1
Protocol: pim-sm, Flag: WC
UpTime: 00:13:46
Upstream interface: Pos2/0/0,
Upstream neighbor: 192.168.2.2
RPF neighbor: 192.168.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0,
Protocol: igmp, UpTime: 00:13:46, Expires:(10.110.5.100, 225.1.1.1)
RP: 192.168.1.1
Protocol: pim-sm, Flag:RPT SPT ACT
UpTime: 00:00:42
Upstream interface: Pos2/0/0
Upstream neighbor: 192.168.2.2
RPF neighbor: 192.168.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 00:00:42, Expires:-
----End
Configuration Files
l
5-62
Issue 04 (2010-08-31)
undo shutdown
ip address 192.168.3.1 255.255.255.0
pim sm
#
pim
static-rp 192.168.1.1
#
ospf 1
area 0.0.0.0
network 192.168.1.0 0.0.0.255
network 192.168.3.0 0.0.0.255
#
return
l
Issue 04 (2010-08-31)
5-63
After the delay of the PIM DR switchover is set, downstream receivers may receive two copies of the same
data during the DR switchover, and trigger the assert mechanism. If you do not tend to trigger the assert
mechanism, you need not configure the DR switchover delay.
Figure 5-4 Networking diagram of applying PIM BFD on a multi-router network segment
RouterA
Source
PIM-SM
10.1.7.1/24
RouterC
RouterB
GE2/0/0
10.1.1.2/24
GE2/0/0
10.1.1.1/24
User1
5-64
User2
Issue 04 (2010-08-31)
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure PIM BFD on the interface that is connected to the host network segment.
2.
Configure the PIM DR switching delay on the interface that is connected to the host network
segment.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address for each interface and a unicast routing protocol.
Step 2 Enable BFD globally and configure PIM BFD on an interface.
# Enable BFD globally on Router B and Router C, enable PIM BFD on the interface that is
connected to the host network segment, and configure PIM BFD parameters. Configuration
procedures of Router C are similar to those of Router B, and are not mentioned here.
[RouterB] bfd
[RouterB-bfd] quit
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] pim bfd enable
[RouterB-GigabitEthernet2/0/0] pim bfd min-tx-interval 100 min-rx-interval 100
detect-multiplier 3
Issue 04 (2010-08-31)
5-65
# Run the display pim bfd session command to display the BFD session on each router, and
you can check whether the BFD session on each router is set up.
<RouterB> display pim bfd session
VPN-Instance: public net
Total 1 BFD session Created
GigabitEthernet2/0/0 (10.1.1.1): Total 1 BFD session Created
Neighbor
ActTx(ms)
ActRx(ms)
ActMulti
Local/Remote
10.1.1.2
100
100
3
8192/8192
State
Up
# Run the display pim routing-table command to view the PIM routing table. Router C acts as
the DR. (S, G) and (*, G) entries exist. The display is as follows:
<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 10.1.5.2
Protocol: pim-sm, Flag: WC
UpTime: 00:13:46
Upstream interface: Pos1/0/0,
Upstream neighbor: 10.1.2.2
RPF neighbor: 10.1.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0,
Protocol: igmp, UpTime: 00:13:46, Expires:(10.1.7.1, 225.1.1.1)
RP: 10.1.5.2
Protocol: pim-sm, Flag: SPT ACT
UpTime: 00:00:42
Upstream interface: Pos1/0/0
Upstream neighbor: 10.1.2.2
RPF neighbor: 10.1.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 00:00:42, Expires:-
----End
Configuration Files
Router A needs to be configured only with basic PIM-SM functions that are not most of concern
in this example. Therefore, the configuration file of Router A is not mentioned here.
5-66
Issue 04 (2010-08-31)
The configuration file of Router B is as follows. The configuration file of Router C is similar to
that of Router B and is not mentioned here.
#
sysname RouterB
#
multicast routing-enable
#
bfd
#
interface Pos1/0/0
link-protocol ppp
undo shutdown
ip address 10.1.2.1 255.255.255.0
pim sm
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 10.1.1.1 255.255.255.0
pim sm
igmp enable
pim bfd enable
pim bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier 3
pim timer dr-switch-delay 20
#
ospf 1
area 0.0.0.0
network 10.1.1.0 0.0.0.255
network 10.1.2.0 0.0.0.255
#
return
Issue 04 (2010-08-31)
5-67
Ethernet
Leaf networks
RouterA
Source
POS2/0/0
POS1/0/0
GE2/0/0
POS1/0/0
POS1/0/0
GE2/0/0
RouterC
Router B
Receiver
HostA
PIM-SM
Ethernet
Device
Interface
IP Address
RouterA
POS1/0/0
192.168.2.1/24
GE2/0/0
10.110.1.1/24
POS1/0/0
192.168.2.2/24
POS2/0/0
192.168.4.1/24
POS1/0/0
192.168.4.2/24
GE2/0/0
10.110.2.1/24
RouterB
RouterC
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure IP addresses for the interfaces and a unicast routing protocol on each router.
2.
3.
Enable the multicast function, enable PIM-SM on the interfaces of routers, and enable
IGMP on the interface connecting router to the host.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
5-68
Unicast GR period
PIM GR period
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
Procedure
Step 1 Configure IP addresses for the interfaces and a unicast routing protocol on each router.
# Based on Figure 5-5, configure IP addresses and masks for the interfaces on each router.
Configure OSPF as the unicast routing protocol running between routers to ensure IP
interworking between Router A, Router B, and Router C. The detailed configuration is not
mentioned here.
Step 2 Enable unicast GR and set the GR period.
# Enable unicast GR and set the GR period to 200 seconds on each router. The configurations
on Router A and Router B are similar to those on Router C. The detailed configuration procedures
are not mentioned here.
[RouterC] ospf 1
[RouterC-ospf-1]
[RouterC-ospf-1]
[RouterC-ospf-1]
[RouterC-ospf-1]
opaque-capability enable
graceful-restart
graceful-restart period 200
quit
Step 3 Enable the multicast function, enable PIM-SM on the interfaces of routers, and enable IGMP
on the interface connecting router and the host.
# Enable the multicast function on all routers, and enable PIM-SM on the interfaces of the
routers, and enable IGMP on the interface connecting Router C to the host. The configurations
on Router A and Router B are similar to those on Router C. The detailed configuration procedures
are not mentioned here.
[RouterC] multicast routing-enable
[RouterC] interface gigabitethernet 2/0/0
[RouterC-GigabitEthernet2/0/0] pim sm
[RouterC-GigabitEthernet2/0/0] igmp enable
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface pos 1/0/0
[RouterC-Pos1/0/0] pim sm
[RouterC-Pos1/0/0] quit
loopback 0
ip address 1.1.1.1 255.255.255.255
pim sm
quit
# Configure a same static RP on each router. The configurations on Router B and Router C are
similar to those on Router A. The detailed configuration procedures are not mentioned here.
[RouterA] pim
[RouterA-pim] static-rp 1.1.1.1
[RouterA-pim] quit
5-69
# The multicast source (10.110.1.100) sends data to the multicast group (225.1.1.1). Host A
sends IGMP Report message to join multicast group and can receive the data from the multiast
source. Before Router C performs active/standby switchover, run the display pim routingtable command on Router B and Router C to view PIM routing table. The command output are
as follows:
<RouterB> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 1.1.1.1
Protocol: pim-sm, Flag: WC
UpTime: 01:52:38
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.2.1
RPF prime neighbor: 192.168.2.1
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0
Protocol: pim-sm, UpTime: 01:52:38, Expires: 00:02:53
(10.110.1.100, 225.1.1.1)
RP: 1.1.1.1
Protocol: pim-sm, Flag: SPT ACT
UpTime: 01:52:38
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.2.1
RPF prime neighbor: 192.168.2.1
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0
Protocol: pim-sm, UpTime: 01:52:38, Expires: 00:03:03
<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 1.1.1.1
Protocol: pim-sm, Flag: WC
UpTime: 01:51:24
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.4.1
RPF prime neighbor: 192.168.4.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: igmp, UpTime: 01:51:24, Expires: (10.110.1.100, 225.1.1.1)
RP: 1.1.1.1
Protocol: pim-sm, Flag: SPT ACT
UpTime: 01:51:24
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.4.1
RPF prime neighbor: 192.168.4.1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 01:51:24, Expires: -
After Router C performs active/standby switchover, during PIM GR, run the display pim
routing-table command on Router B and Router C to view PIM routing table. The command
output are as follows:
5-70
Issue 04 (2010-08-31)
In a normal multicast network, the downstream router periodically sends Join/Prune messages
upstream to refresh the timeout period of PIM routing entries on the upstream, thereby ensuring
normal multicast data forwarding.
If the GR function is not configured on Router C, the new active main control board deletes the
multicast forwarding entries on the interface board, receives IGMP Report messages from the
host again, and re-creates PIM routing entries. During this process, multicast traffic is
interrupted.
From the preceding command output, it can be found that after Router C performs active/standby
switchover, the downstream interface of Router B remains unchanged. That is, after Router C
performs active/standby switchover, Router C sends the backed up Join messages upstream. In
Issue 04 (2010-08-31)
5-71
this way, multicast forwarding entries can be maintained during GR to ensure non-stop multicast
data forwarding.
During the process of restoring multicast routing entries on Router C after active/standby
switchover, users can receive multicast data normally and services are not interrupted.
----End
Configuration Files
l
5-72
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
5-73
6 MSDP Configuration
MSDP Configuration
Issue 04 (2010-08-31)
6-1
6 MSDP Configuration
6-2
Issue 04 (2010-08-31)
6 MSDP Configuration
MSDP is applicable only to PIM-SM domains, and useful only for the Any-Source Multicast (ASM) mode.
6-3
6 MSDP Configuration
You can use a loopback interface as a C-RP or a static RP and specify the logical RP address
for an SA message.
Configuring SA Cache
By default, SA-Cache is enabled on routers. Therefore, routers can locally store the (S, G)
information carried in SA messages. When required to receive the multicast data, the routers
can obtain the (S, G) information from the SA-Cache.
You can set the maximum number of cached (S, G) entries, which can effectively prevent the
Denial of Service (DoS) attack.
You can disable SA-Cache on a router. After the SA-Cache on a router is disabled, the router
does not locally store the (S, G) information carried in SA messages. When the router needs to
receive multicast data, it needs to wait for the SA message to be sent by its MSDP peer in the
next period. This causes a delay for receivers to obtain multicast source information.
Controlling SA Requests
Certain routers cannot be enabled with SA Cache or the capacity of SA Cache on these routers
is too small. When these routers need to receive multicast data, they cannot immediately obtain
the valid (S, G) information but need to wait for the SA message to be sent by their MSDP peers
in the next period.
If SA Cache is enabled on the remote MSDP peer and the capacity of the SA Cache is large, you
can configure "sending SA request messages" on the local router to reduce the period during
which receivers obtain multicast source information.
At the same time, you can also configure the filtering rules for receiving SA request messages
on the remote MSDP peers.
Issue 04 (2010-08-31)
6 MSDP Configuration
remote peers. If the TTL value is greater than the threshold, the MSDP peer reduces the TTL
value in the IP header of the multicast packet by 1, and then encapsulates the multicast packet
in an SA message and sends the message out.
Setting rules for filtering SA messages based on multicast sources on the source RP
The source RP filters active multicast sources that register with the local router, and then
determines whether to send (S, G) entries based on the rules.
Setting rules for filtering SA messages received from remote MSDP peers
When an SA message sent by a remote MSDP peer reaches the local router, the router
determines whether to receive the message based on the rules.
Multi-Instance MSDP
MSDP peer relationships can be set up between interfaces on multicast routers that belong to
the same instance (including the public instance and VPN instance). MSDP peers exchange SA
message with each other. The inter-domain VPN multicast is thus implemented.
Multicast routers on which multi-instance is applied maintain a set of MSDP mechanisms for
each instance. Multicast routers also guarantee the information separation among different
instances; therefore, only MSDP and PIM-SM that belong to the same instance can interact.
By applying multi-instance, the NE80E/40E implements inter-domain VPN multicast.
NOTE
For details of inter-domain VPN multicast, refer to the chapter "Multicast VPN Configuration" in the
HUAWEI NetEngine80E/40E Router Configuration Guide - IP Multicast.
MSDP Authentication
Configuring MSDP MD5 or Key-Chain authentication can improve the security of TCP
connections set up between MSDP peers. Note that the MSDP peers must be configured with
the same authentication password; otherwise, the TCP connection cannot be set up between
MSDP peers and MSDP messages cannot be transmitted.
6-5
6 MSDP Configuration
Using the same interface address to set up MBGP peer relationships between inter-AS
MSDP peers or specifying inter-AS MSDP peers as RPF peers of each other
NOTE
Both BGP and MBGP can be used to set up inter-AS EBGP peer relationships. MBGP is recommended
because MBGP does not affect the unicast topology of a network.
Pre-configuration Tasks
Before configuring PIM-SM inter-domain multicast, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To configure PIM-SM inter-domain multicast, you need the following data.
No.
Data
Issue 04 (2010-08-31)
6 MSDP Configuration
Context
Do as follows on the RPs of all PIM-SM domains that belong to the same AS:
Procedure
Step 1 Run:
system-view
MSDP is enabled in the public network instance or VPN instances and the MSDP view is
displayed.
Step 3 Run:
peer peer-address connect-interface interface-type interface-number
interface-type interface-number: specifies the local interface connected to the remote MSDP
peer.
NOTE
The system does not advertise routes on MTIs to VPNs; therefore, it is not allowed to use MTIs to set up
an MSDP peer connection.
Step 5 Run:
peer peer-address mesh-group name
name: specifies the name of a mesh group. The members of the same mesh group use the
same mesh group name.
6-7
6 MSDP Configuration
l
MSDP peer connections must be set up between all members of the same mesh group.
All members of the mesh group must acknowledge each other as a member of the group.
An MSDP peer can belong to only one mesh group. If an MSDP peer is configured to join
different mesh groups for multiple times, only the latest configuration is valid.
----End
If the two RPs set up the BGP peer relationship, it is not necessary to set up the MBGP peer relationship
between them.
For details of the configuration of MBGP peers, refer to the chapter MBGP Configuration in the HUAWEI
NetEngine80E/40E Router Configuration Guide - IP Multicast.
Procedure
Step 1 Run:
system-view
MSDP is enabled in the public network instance or VPN instance, and the MSDP view is
displayed.
Step 3 Run:
peer peer-address connect-interface interface-type interface-number
peer-address: specifies the address of a remote MSDP peer. The address is the same as that
of the remote BGP or MBGP peer.
interface-type interface-number: specifies the local interface connected to the remote MSDP
peer. The interface is the same as the local BGP or MBGP interface.
Issue 04 (2010-08-31)
6 MSDP Configuration
----End
If Configuring Inter-AS MSDP Peers on MBGP Peers is complete, skip the configuration.
Procedure
Step 1 Run:
system-view
MSDP is enabled in the public network instance or VPN instance, and the MSDP view is
displayed.
Step 3 Run:
peer peer-address connect-interface interface-type interface-number
interface-type interface-number: specifies the local interface connected to the remote MSDP
peer.
Step 5 Run:
static-rpf-peer peer-address
6-9
6 MSDP Configuration
----End
Example
<HUAWEI> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
2
2
0
0
0
Peer's Address
192.168.2.1
192.168.4.2
State
UP
UP
Up/Down time
01:07:08
00:06:39
AS
200
100
SA Count
8
13
Down
0
Reset Count
0
0
Issue 04 (2010-08-31)
6 MSDP Configuration
Configure the loopback interfaces on the routers as C-RPs or configure the address of the
loopback interface as a static RP on all routers in the PIM-SM domain.
Set up the MSDP peer relationship between the routers. If the number of routers is greater
than three, it is recommended to set up the MSDP peer relationship between the routers
and configure them to join the same mesh group.
Specify the logical RP address to transmit SA messages between the MSDP peers.
Pre-configuration Tasks
Before configuring an anycast RP in a PIM-SM domain, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To configure an anycast RP in a PIM-SM domain, you need the following data.
No.
Data
RP address
Procedure
Step 1 Run:
system-view
6-11
6 MSDP Configuration
Step 2 Run:
interface loopback interface-number
ip-address: specifies the address of an RP. The RPs configured on multiple devices uses the
same IP address.
Step 4 Run:
pim sm
Before configuring a dynamic RP, you need to run this command. This command is not required when you
configure a static RP.
----End
If the PIM-SM network uses a static RP, the configuration is not necessary.
If the PIM-SM network uses a BSR-RP, the configuration is mandatory. Before configuring a C-RP,
configure a BSR and BSP boundary. The BSR address cannot be the same as the C-RP address.
Procedure
Step 1 Run:
system-view
6-12
Issue 04 (2010-08-31)
6 MSDP Configuration
When the PIM-SM network uses a BSR-RP, the configuration is not necessary.
When the PIM-SM network uses a static RP, the configuration is mandatory.
Procedure
Step 1 Run:
system-view
If the number of routers configured with the RPs that have the same IP address exceeds two, ensure the
interconnection between the routers that set up MSDP peer relationship.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
6-13
6 MSDP Configuration
MSDP is enabled in the public network instance or the VPN instance, and the MSDP view is
displayed.
Step 3 Run:
peer peer-address connect-interface interface-type interface-number
name: specifies the name of a mesh group. The members of the same mesh group use the
same mesh group name.
MSDP peer connections must be set up between all members of the mesh group.
All members of the mesh group must acknowledge each other as the member of the mesh
group.
An MSDP peer belongs to only one mesh group. If an MSDP peer is configured to join
different mesh groups for many times, only the last configuration is valid.
----End
6-14
Issue 04 (2010-08-31)
6 MSDP Configuration
Context
After receiving an SA message, an MSDP peer performs the RPF check on the message. If the
remote RP address carried in the SA message is the same as the local RP address, the SA message
is discarded.
Do as follows on the routers on which the anycast RP is to be configured:
Procedure
Step 1 Run:
system-view
The logical RP interface is configured. The logical RP interface cannot be the same as the actual
RP interface. It is recommended to configure the logical interface as the MSDP peer interface.
After the originating-rp command is used, the logical RP address carried in the SA message
sent by the router replaces the RP address in the IP header of the SA message, and the SA message
can pass the RPF check after reaching the remote router.
NOTE
The system does not advertise routes on the MTIs to VPNs; therefore, the MTIs cannot be used as logical
RPs.
----End
----End
Example
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] brief command. If the
brief information about the remote MSDP peer status is displayed, it means that the configuration
succeeds. For example:
<HUAWEI> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
1
1
0
0
0
Issue 04 (2010-08-31)
Down
0
6-15
6 MSDP Configuration
Peer's Address
2.2.2.2
State
UP
Up/Down time
00:10:17
AS
?
SA Count
0
Reset Count
0
Pre-configuration Tasks
Before managing MSDP peer connections, complete the following tasks:
6-16
Enabling IP multicast
Issue 04 (2010-08-31)
6 MSDP Configuration
Data Preparation
To manage MSDP peer connections, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
After the session with the remote MSDP peer is closed, the TCP connection is closed, the
peers no longer transmit SA messages, and the peers do not re-try setting up the connection.
The configuration, however, is saved.
You can run the undo shutdown peer-address command to open the session with the remote
MSDP peer, and reestablish the TCP connection.
----End
6-17
6 MSDP Configuration
Procedure
Step 1 Run:
system-view
The period for retrying sending the TCP connection request to the remote MSDP peer is set
----End
----End
Example
<HUAWEI> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
2
2
0
0
0
Peer's Address
192.168.2.1
192.168.4.2
State
UP
UP
Up/Down time
01:07:08
00:06:39
AS
200
100
SA Count
8
13
Down
0
Reset Count
0
0
6-18
Issue 04 (2010-08-31)
6 MSDP Configuration
Pre-configuration Tasks
Before configuring SA Cache, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To configure SA Cache, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
6-19
6 MSDP Configuration
Step 2 Run:
msdp [ vpn-instance vpn-instance-name ]
sa-limit: specifies the maximum number of cached (S, G) entries. The value of configuration
is valid when it is less than the specification of cache. Contrarily, specification of cache is
valid.
----End
Procedure
Step 1 Run:
system-view
----End
6-20
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress | source-address | { 2-byte-as-number | 4-byte-as-number } ] * command to check
(S, G) entries in the SA Cache of the public network instance, VPN instance or all instances.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
6 MSDP Configuration
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-count [ 2byte-as-number | 4-byte-as-number ] command to check the number of (S, G) entries in the
SA Cache of the public network instance, VPN instance or all instances.
----End
Example
Run the display msdp sa-cache command to check (S, G) entries in SA Cache.
<HUAWEI> display msdp sa-cache
MSDP Source-Active Cache Information of VPN-Instance: public net
MSDP Total Source-Active Cache - 3 entries
MSDP matched 3 entries
(8.8.8.8, 225.0.0.200)
Origin RP: 4.4.4.4
Pro: BGP, AS: 10
Uptime: 00:00:33, Expires: 00:05:27
(8.8.8.8, 225.0.0.201)
Origin RP: 4.4.4.4
Pro: BGP, AS: 1.0
Uptime: 00:00:33, Expires: 00:05:27
(8.8.8.8, 225.0.0.202)
Origin RP: 4.4.4.4
Pro: BGP, AS: 65535.65535
Uptime: 00:00:33, Expires: 00:05:27
Run the display msdp sa-count command to check the number of (S, G) entries in SA Cache.
<HUAWEI> display msdp sa-count
MSDP Source-Active Count Information of VPN-Instance: public net
Number of cached Source-Active entries, counted by Peer
Peer's Address
Number of SA
10.10.10.10
5
Number of source and group, counted by AS
AS
Number of source
Number of group
?
3
3
Total 5 Source-Active entries matched
6-21
6 MSDP Configuration
If SA Cache is enabled on the remote MSDP peer and the capacity of the SA Cache is large,
configuring "sending SA Request message" on the local router can shorten the period during
which receivers obtain multicast source information.
l
When the local router wants to receive (S, G) information, it sends an SA Request message
to a specified remote MSDP peer.
On receiving the SA Request message, the MSDP peer responds to the SA Request message
with the required (S, G) information. If the "filtering rule of SA Request message" is
configured on the remote MSDP peer, it checks the SA Request messages received from a
specified peers and determines whether to respond according to the checking results.
Pre-configuration Tasks
Before configuring an SA request, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To configure an SA request, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
6 MSDP Configuration
Step 3 Run:
peer peer-address request-sa-enable
Procedure
Step 1 Run:
system-view
peer-address: specifies the address of an MSDP peer that sends the SA Request message.
acl: specifies the filtering policy. If the ACL is not specified, all SA messages sent by a peer
are ignored. If the ACL is specified, only the SA messages that match the ACL are received
and other SA messages are discarded.
----End
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress | source-address | { 2-byte-as-number | 4-byte-as-number } ] * command to check
SA Cache of the public network instance, VPN instance, or all instances.
----End
Issue 04 (2010-08-31)
6-23
6 MSDP Configuration
Example
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] peer-status [ peeraddress ] command, and you can view the SA-Requests field and check whether the
configuration is valid. For example:
<HUAWEI> display msdp peer-status
MSDP Peer Information of VPN-Instance: public net
MSDP Peer 172.40.41.1, AS ?
Description:
Information about connection status:
State: Up
Up/down time: 00:26:41
Resets: 0
Connection interface: GigabitEthernet2/0/14 (172.40.41.2)
Number of sent/received messages: 27/28
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 00:26:56
Information about (Source, Group)-based SA filtering policy:
Import policy: none
Export policy: none
Information about SA-Requests:
Policy to accept SA-Request messages: 2000
Sending SA-Requests status: enable
Minimum TTL to forward SA with encapsulated data: 0
SAs learned from this peer: 0, SA Cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 16/0
Incoming/outgoing SA requests: 0/0
Incoming/outgoing SA responses: 0/0
Incoming/outgoing data packets: 0/0
Peer authentication: configured
Peer authentication type: Key-Chain
Issue 04 (2010-08-31)
6 MSDP Configuration
receiving an SA message, a remote RP decapsulates the message and forwards the multicast data
to users in the domain along the RPT.
Setting the TTL threshold can limit the transmission scope of a multicast packet contained in an
SA message. After receiving an SA message containing a multicast packet, an MSDP peer checks
the TTL value in the IP header of the multicast packet. If the TTL value is smaller than or equal
to the threshold, the MSDP peer does not forward the SA message to a specific remote peers. If
the TTL value is greater than the threshold, the MSDP peer reduces the TTL value in the IP
header of the multicast packet by 1, and then encapsulates the multicast packet in an SA message
and sends it out.
Pre-configuration Tasks
Before transmitting burst multicast data between domains, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To transmit burst multicast data between domains, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
6-25
6 MSDP Configuration
Procedure
Step 1 Run:
system-view
ttl: specifies the value of the TTL threshold. By default, the value is 0.
----End
6-26
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress | source-address | { 2-byte-as-number | 4-byte-as-number } ] * command to check
SA Cache of the public network instance, VPN instance, or all instances.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
6 MSDP Configuration
----End
Example
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] peer-status [ peeraddress ] command, and you can view the minimum TTL for forwarding an SA messages
containing a data packet and check whether the configuration is valid. For example:
<HUAWEI> display msdp peer-status
MSDP Peer Information of VPN-Instance: public net
MSDP Peer 172.40.41.1, AS ?
Description:
Information about connection status:
State: Up
Up/down time: 00:26:41
Resets: 0
Connection interface: GigabitEthernet2/0/14 (172.40.41.2)
Number of sent/received messages: 27/28
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 00:26:56
Information about (Source, Group)-based SA filtering policy:
Import policy: none
Export policy: none
Information about SA-Requests:
Policy to accept SA-Request messages: 2000
Sending SA-Requests status: enable
Minimum TTL to forward SA with encapsulated data: 10
SAs learned from this peer: 0, SA Cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 16/0
Incoming/outgoing SA requests: 0/0
Incoming/outgoing SA responses: 0/0
Incoming/outgoing data packets: 0/0
Run the display msdp sa-cache command to check the information about (S, G) entries in SA
Cache.
l
Issue 04 (2010-08-31)
6-27
6 MSDP Configuration
Origin RP: 4.4.4.4
Pro: BGP, AS: 65535.65535
Uptime: 00:00:33, Expires: 00:05:27
Setting the rules for filtering the multicast source of an SA message on the source RP. The
source RP filters active multicast sources that register with the local router, and determines
the (S, G) entries to be sent according to the rules.
Setting the rules for filtering an SA message received from a remote MSDP peer. When an
SA message sent by a remote MSDP peer reaches a router, the router determines whether
to receive the message based on the rules.
Setting the rules for filtering an SA message forwarded to a remote MSDP peer. Before
forwarding the SA message to the remote MSDP peer, the router determines whether to
forward it based on the rules.
Pre-configuration Tasks
Before configuring the filtering rules for SA messages, complete the following tasks:
l
Enabling IP multicast
Data Preparation
To configure the filtering rules for SA messages, you need the following data.
6-28
No.
Data
Issue 04 (2010-08-31)
6 MSDP Configuration
No.
Data
If the configuration is not done, an SA message created by the source RP contains the information of all
local active sources.
Procedure
Step 1 Run:
system-view
The rules for filtering the multicast source of an SA message are set.
The parameters of the command are explained as follows:
l
acl: specifies the filtering list based on multicast sources. The SA message created by an
MSDP peer contains the local source information that match the filtering rules. The MSDP
peer can thus control the local (S, G) information.
If the import-source command with acl is used, the SA message does not advertise any
information about the local active source.
----End
6-29
6 MSDP Configuration
NOTE
If the configuration is not done, the router receives all SA messages that pass the RPF check.
Procedure
Step 1 Run:
system-view
The rules for filtering an SA message received from a remote MSDP peer are set.
The parameters of the command are explained as follows:
l
acl: specifies the advanced filtering list. Only the (S, G) information that passes the filtering
of the ACL is received. The (S, G) information is contained in an SA message sent by the
peer specified by peer-address .
If the peer peer-address sa-policy import command without acl is used, the router does not
receive any (S, G) information from the peer specified by peer-address.
----End
If the configuration is not done, the router forwards all SA messages that pass the RPF check.
Procedure
Step 1 Run:
system-view
The rules for filtering an SA message forwarded to a remote MSDP peer is set.
6-30
Issue 04 (2010-08-31)
6 MSDP Configuration
acl: specifies the advanced filtering list. Only the (S, G) information that matches the ACL
rule is forwarded to the peer specified by peer-address.
If the peer peer-address sa-policy export command without acl is used, the router does not
forward any (S, G) information to the peer specified by peer-address.
----End
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress | source-address | { 2-byte-as-number | 4-byte-as-number } ] * command to check
SA Cache of the public network instance, VPN instance, or all instances.
----End
Example
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] peer-status [ peeraddress ] command, and you can view information about the (Source, Group)-based SA filtering
policy field and check whether the configuration is valid. For example:
<HUAWEI> display msdp peer-status
MSDP Peer Information of VPN-Instance: public net
MSDP Peer 172.40.41.1, AS ?
Description:
Information about connection status:
State: Up
Up/down time: 00:26:41
Resets: 0
Connection interface: GigabitEthernet2/0/14 (172.40.41.2)
Number of sent/received messages: 27/28
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 00:26:56
Information about (Source, Group)-based SA filtering policy:
Import policy: 3000
Export policy: 3002
Information about SA-Requests:
Policy to accept SA-Request messages: 2000
Sending SA-Requests status: enable
Minimum TTL to forward SA with encapsulated data: 10
SAs learned from this peer: 0, SA Cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 16/0
Incoming/outgoing SA requests: 0/0
Incoming/outgoing SA responses: 0/0
Incoming/outgoing data packets: 0/0
Run the display msdp sa-cache command to check the information about (S, G) entries in SA
Cache.
Issue 04 (2010-08-31)
6-31
6 MSDP Configuration
l
Pre-configuration Tasks
Before configuring MSDP authentication, complete the following tasks:
6-32
Enabling IP multicast
Issue 04 (2010-08-31)
6 MSDP Configuration
Data Preparation
Before configuring MSDP authentication, prepare the following data:
No.
Data
Procedure
Step 1 Run:
system-view
MSDP MD5 authentication and MSDP Key-Chain authentication are mutually exclusive.
The MD5 authentication password that starts and ends with $@$@ is invalid, because $@$@ is used to
distinguish old and new passwords.
----End
6-33
6 MSDP Configuration
Context
By default, MSDP Key-Chain authentication is not configured.
Do as follows on the router configured with MSDP peers:
Procedure
Step 1 Run:
system-view
MSDP MD5 authentication and MSDP Key-Chain authentication are mutually exclusive.
----End
----End
Example
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] peer-status [ peeraddress ] command, and you can find the Peer authentication and Peer authentication type
fields in the command output. For example:
<HUAWEI> display msdp peer-status
MSDP Peer Information of VPN-Instance: public net
MSDP Peer 172.40.41.1, AS ?
Description:
Information about connection status:
6-34
Issue 04 (2010-08-31)
6 MSDP Configuration
State: Up
Up/down time: 00:26:41
Resets: 0
Connection interface: GigabitEthernet2/0/14 (172.40.41.2)
Number of sent/received messages: 27/28
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 00:26:56
Information about (Source, Group)-based SA filtering policy:
Import policy: 3000
Export policy: 3002
Information about SA-Requests:
Policy to accept SA-Request messages: 2000
Sending SA-Requests status: enable
Minimum TTL to forward SA with encapsulated data: 10
SAs learned from this peer: 0, SA-cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 16/0
Incoming/outgoing SA requests: 0/0
Incoming/outgoing SA responses: 0/0
Incoming/outgoing data packets: 0/0
Peer authentication: configured
Peer authentication type: Key-Chain
CAUTION
The statistics of MSDP peers cannot be restored after you clear it. So, confirm the action before
you use the command.
Procedure
l
Run the reset msdp [ vpn-instance vpn-instance-name | all-instance ] peer [ peeraddress ] command in the user view to clear the TCP connection with a specified MSDP
peer and all statistics of the specified MSDP peer.
Run the reset msdp [ vpn-instance vpn-instance-name | all-instance ] statistics [ peeraddress ] command in the user view to clear the statistics of an MSDP peer or multiple
MSDP peers of the public network instance, VPN instance, or all instances, if MSDP peers
are not reset.
Issue 04 (2010-08-31)
6-35
6 MSDP Configuration
----End
CAUTION
The (S, G) information in SA Cache cannot be restored after you clear it. So, confirm the action
before you use the command.
Procedure
l
Run the reset msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress ] command in the user view to clear the entries in MSDP SA Cache.
----End
Procedure
l
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-cache [ groupaddress | source-address | { 2-byte-as-number | 4-byte-as-number } ] * command in any
view to check the (S, G) information in SA Cache.
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-count [ 2byte-as-number | 4-byte-as-number ] command in any view to check the number of (S, G)
entries in MSDP Cache.
Run the display msdp [ vpn-instance vpn-instance-name | all-instance ] controlmessage counters [ peer peer-address | message-type { source-active | sa-request | saresponse | keepalive | notification | traceroute-request | traceroute-reply | datapackets | unknown-type } ] * command in any view to check statistics about the received,
sent, and discarded MSDP messages.
----End
6-36
Issue 04 (2010-08-31)
6 MSDP Configuration
AS200
AS100
Loopback0
1.1.1.1/32
Loopback0
2.2.2.2/32
Receiver
PIM-SM2
RouterA
POS2/0/0
POS2/0/0
GE1/0/0
POS1/0/0
RouterB
POS1/0/0
RouterC GE1/0/0
POS2/0/0
POS2/0/0
RouterD
POS3/0/0
PIM-SM1
S1
RouterF
POS3/0/0
POS2/0/0
POS2/0/0
RouterE
GE1/0/0
PIM-SM3
S3
Loopback0
3.3.3.3/32
MSDP peer
router
Interface
IP Address
router
Interface
IP Address
RouterA
GE1/0/0
10.110.1.1/24
RouterD
GE1/0/0
10.110.2.1/24
POS2/0/0
192.168.1.1/24
POS2/0/0
192.168.3.2/24
POS1/0/0
192.168.2.1/24
POS2/0/0
192.168.5.1/24
POS2/0/0
192.168.1.2/24
POS3/0/0
192.168.4.2/24
RouterB
Issue 04 (2010-08-31)
RouterE
6-37
6 MSDP Configuration
RouterC
POS1/0/0
192.168.2.2/24
POS2/0/0
192.168.3.1/24
POS3/0/0
192.168.4.1/24
RouterF
GE1/0/0
10.110.3.1/24
POS2/0/0
192.168.5.2/24
Configuration Roadmap
Solution: configure MSDP peer relationships between RPs of each PIM-SM domain. The
configuration roadmap is as follows:
1.
Configure IP addresses of interfaces on each router, and configure OSPF in the ASs to
ensure that unicast routes are reachable in the ASs.
2.
Configure EBGP peers between ASs and configure BGP and OSPF to import routes to each
other to ensure that unicast routes are reachable.
3.
Enable multicast and PIM-SM on each interface, configure the boundary of a domain, and
enable IGMP on the interface connected to hosts.
4.
Configure a C-BSR and a C-RP. Configure the RPs of PIM-SM1 and PIM-SM2 on ASBRs.
5.
Establish the MSDP peer relationship between RPs of each domain. MSDP peers and EBGP
peers between ASs use the same interface address. According to RPF rules, routers receive
SA messages forwarded by the next hop of the route to the source RP.
Data Preparation
To complete this configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address and a unicast routing protocol on each router.
# Configure an IP address and mask on each interface as shown in Figure 6-1. Configure OSPF
in the AS. Ensure that the communication between routers is normal at the network layer. Ensure
dynamic routing updates between routers with the help of the unicast routing protocol. The
procedures are not mentioned here.
Step 2 Configure BGP between ASs and configure BGP and OSPF to import routes each other.
# Configure EBGP on Router B and import OSPF routes.
[RouterB] bgp
[RouterB-bgp]
[RouterB-bgp]
[RouterB-bgp]
[RouterB-bgp]
100
router-id 1.1.1.1
peer 192.168.2.2 as-number 200
import-route ospf 1
quit
6-38
Issue 04 (2010-08-31)
6 MSDP Configuration
# Import BGP routes to OSPF on Router B. The configuration of Router C is similar to that of
Router B, and is not mentioned here.
[RouterB] ospf 1
[RouterB-ospf-1] import-route bgp
[RouterB-ospf-1] quit
Step 3 Enable multicast on each router and enable PIM-SM on each interface, configure the boundary
of a domain and enable IGMP on the interface connected to hosts.
# Enable multicast on Router B, and enable PIM-SM on each interface. The configurations of
other routers are similar to that of Router B, and are not mentioned here.
[RouterB] multicast routing-enable
[RouterB] interface pos 2/0/0
[RouterB-Pos2/0/0] pim sm
[RouterB-Pos2/0/0] quit
[RouterB] interface pos 1/0/0
[RouterB-Pos1/0/0] pim sm
Configure the domain boundary on POS 1/0/0 and POS 3/0/0 of Router C and the BSR service
boundary on POS 3/0/0 of Router E. The configurations of Router C and Router E are similar
to that of Router B, and are not mentioned here.
# Enable IGMP on interface through which Router D is connected to the leaf network.
[RouterD] interface gigabitethernet 1/0/0
[RouterD-GigabitEthernet1/0/0] igmp enable
6-39
6 MSDP Configuration
[RouterE] msdp
[RouterE-msdp] peer 192.168.4.1 connect-interface pos3/0/0
[RouterE-msdp] quit
MsgSent
21
MsgSent
16
00:13:09
Established
00:12:04
Established
# Run the display bgp routing-table command. You can view the BGP routing table on a
router. For example, the BGP routing table on Router C is as follows:
<RouterC> display bgp routing-table
Total Number of Routes: 5
BGP Local router ID is 2.2.2.2
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Network
NextHop
MED
LocPrf
PrefVal Path/Ogn
*>
1.1.1.1/32
192.168.2.1
0
0
100?
*>i
2.2.2.2/32
0.0.0.0
0
0
?
*>
192.168.2.0
0.0.0.0
0
0
?
*>
192.168.2.1/32
0.0.0.0
0
0
?
*>
192.168.2.2/32
0.0.0.0
0
0
?
# Run the display msdp brief command. You can view MSDP peer relationships between
routers. The brief information about MSDP peer relationships between Router B, Router C, and
Router E is as follows:
<RouterB> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
1
1
0
0
0
Peer's Address
State
Up/Down time
AS
SA Count
192.168.2.2
UP
00:12:27
200
13
<RouterC> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
2
2
0
0
0
Peer's Address
State
Up/Down time
AS
SA Count
192.168.2.1
UP
01:07:08
100
8
192.168.4.2
UP
00:06:39
200
13
<RouterE> display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
1
1
0
0
0
Peer's Address
State
Up/Down time
AS
SA Count
192.168.4.1
UP
00:15:32
200
8
Down
0
Reset Count
0
Down
0
Reset Count
0
0
Down
0
Reset Count
0
# Run the display msdp peer-status command. You can view the detailed information about
the MSDP peers. The detailed information about MSDP peers on Router B is as follows:
<RouterB> display msdp peer-status
6-40
Issue 04 (2010-08-31)
6 MSDP Configuration
# Run the display pim routing-table command. You can view the PIM routing table on a
router. When S1 (10.110.1.2/24) in PIM-SM1 domain and S3 (10.110.3.2/24) in PIM-SM3
domain send multicast data to G (225.1.1.1/24), Receiver (10.110.2.2/24) in PIM-SM2 domian
can receive the multicast data. The information about the PIM routing tables on Router B and
Router C is as follows:
<RouterB> display pim routing-table
VPN-Instance: public net
Total 0 (*, G) entry; 1 (S, G) entry
(10.110.1.2, 225.1.1.1)
RP: 1.1.1.1(local)
Protocol: pim-sm, Flag: SPT EXT ACT
UpTime: 00:00:42
Upstream interface: Pos2/0/0
Upstream neighbor: 192.168.1.1
RPF neighbor: 192.168.1.1
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos1/0/0
Protocol: pim-sm, UpTime: 00:00:42, Expires:<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 2 (S, G) entries
(*, 225.1.1.1)
RP: 2.2.2.2(local)
Protocol: pim-sm, Flag: WC RPT
UpTime: 00:13:46
Upstream interface: NULL,
Upstream neighbor: NULL
RPF prime neighbor: NULL
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0,
Protocol: pim-sm, UpTime: 00:13:46, Expires:(10.110.1.2, 225.1.1.1)
RP: 2.2.2.2
Protocol: pim-sm, Flag: SPT MSDP ACT
UpTime: 00:00:42
Upstream interface: Pos1/0/0
Upstream neighbor: 192.168.2.1
Issue 04 (2010-08-31)
6-41
6 MSDP Configuration
----End
Configuration Files
l
6-42
Issue 04 (2010-08-31)
6 MSDP Configuration
multicast routing-enable
#
interface Pos1/0/0
undo shutdown
link-protocol ppp
ip address 192.168.2.2 255.255.255.0
pim sm
pim bsr-boundary
#
interface Pos2/0/0
undo shutdown
link-protocol ppp
ip address 192.168.3.1 255.255.255.0
pim sm
#
interface Pos3/0/0
undo shutdown
link-protocol ppp
ip address 192.168.4.1 255.255.255.0
pim sm
pim bsr-boundary
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
pim sm
#
bgp 200
router-id 2.2.2.2
peer 192.168.2.1 as-number 100
import-route ospf 1
#
ospf 1
import-route bgp
area 0.0.0.0
network 192.168.3.0 0.0.0.255
network 192.168.4.0 0.0.0.255
network 2.2.2.2 0.0.0.0
#
pim
c-bsr LoopBack0
c-rp LoopBack0
#
msdp
peer 192.168.2.1 connect-interface Pos1/0/0
peer 192.168.4.2 connect-interface Pos3/0/0
#
return
l
Issue 04 (2010-08-31)
6-43
6 MSDP Configuration
#
ospf 1
area 0.0.0.0
network 192.168.4.0 0.0.0.255
network 192.168.5.0 0.0.0.255
network 3.3.3.3 0.0.0.0
#
pim
c-bsr LoopBack0
c-rp LoopBack0
#
msdp
peer 192.168.4.1 connect-interface Pos3/0/0
#
return
AS100
AS200
Loopback0
RouterE
POS1/0/0
POS2/0/0
Loopback0
RouterD
RouterC
POS2/0/0
100
POS1/0/0
POS1/0/0
S1
Receiver
Loopback0
RouterB
POS2/0/0 PIM-SM1
PIM-SM2
Receiver
RouterG
POS1/0/0
RouterF
RouterA
PIM-SM3
S2
BGP peers
6-44
router
Interface
IP Address
router
Interface
IP Address
Router A
POS 1/0/0
192.168.5.2/24
Router D
POS 1/0/0
192.168.3.2/24
Issue 04 (2010-08-31)
6 MSDP Configuration
Router B
POS 2/0/0
192.168.2.2/24
Loopback 0
2.2.2.2/32
Router C
POS 1/0/0
192.168.1.1/24
Router E
POS 2/0/0
192.168.2.1/24
POS 2/0/0
192.168.4.1/24
Router F
POS 1/0/0
192.168.5.1/24
Loopback 0
1.1.1.1/32
Loopback 0
3.3.3.3/32
Configuration Roadmap
Solution: set up an MSDP peer on RP in each PIM-SM domain. Set up static RPF peer among
MSDP peers. Thus the transmission of source information across sources is implemented without
changing unicast topology. The steps are as follows:
1.
Configure an IP address for each interface, configure OSPF in the ASs, configure EBGP
between ASs, and configure BGP and OSPF to import routes into each other.
2.
Enable multicast on each router and PIM-SM on each interface, enable IGMP on the
interface connected to hosts, and configure the positions of Loopback 0 interfaces, the CBSR, and the C-RP. The Loopback 0 interfaces on Router C, Router D, and Router F act
as C-BSRs and C-RPs of their PIM-SM domains.
3.
Set up MSDP peer relationships between RPs in each domain, and the MSDP peer
relationship between Router C and Router D and between Router C and Router F.
4.
Specify a static RPF peer for an MSDP peer. The static RPF peers of Router C are Router
D and Router F. Router D and Router F has only one static RPF peer, that is, Router C.
According to RPF rules, routers receive SA messages from static RPF peers.
Data Preparation
To complete this configuration, you need the following data:
l
The AS number of Router A, Router B and Router C is 100. The router IDs of the three
routers are 1.1.1.3, 1.1.1.2 and 1.1.1.1 respectively.
The AS number of Router D and Router E is 200. The router IDs of the two routers are
2.2.2.2 and 2.2.2.1 respectively.
The AS number of Router F and Router G is 200. The router ID of Router F is 3.3.3.3.
The name of policy adopted by Router C in filtering the SA message from Router D and
Router F is list-df.
The name of policy adopted by Router D and Router F in filtering the SA message from
Router C is list-c.
Procedure
Step 1 Configure an IP address for each interface and a unicast routing protocol.
# As shown in Figure 6-2, configure an IP address and mask for each interface. Configure OSPF
in the AS. Configure EBGP between Router A and Router F, Router B, and Router E. Configure
BGP and OSPF to import routes into each other. Ensure the normal communication between
routers on the network layer. Ensure dynamic routing updates between routers through the
unicast routing protocol. The procedures are not mentioned here.
Step 2 Enable multicast on each router and PIM-SM on each interface.
Issue 04 (2010-08-31)
6-45
6 MSDP Configuration
# Enable multicast on each router and enable PIM-SM on each interface. The configurations of
the other routers are similar to that of Router C, and are not mentioned here.
[RouterC] multicast routing-enable
[RouterC] interface pos 1/0/0
[RouterC-Pos1/0/0] pim sm
[RouterC-Pos1/0/0] quit
[RouterC] interface pos 2/0/0
[RouterC-Pos2/0/0] pim sm
[RouterC-Pos2/0/0] quit
# Configure the BSR boundary on POS 1/0/0 of Router A, POS 2/0/0 of Router B, POS 2/0/0
of Router E and POS 1/0/0 of Router F. The configurations of Router B, Router E, and Router
F are similar to that of Router A, and are not mentioned here.
[RouterA] interface pos 1/0/0
[RouterA-Pos1/0/0] pim bsr-boundary
[RouterA-Pos1/0/0] quit
# Configure Router C as the static RPF peer of Router D and Router F. The configurations of
Router F are similar to that of Router D, and are not mentioned here.
[RouterD] ip ip-prefix list-c permit 192.168.0.0 16 greater-equal 16 less-equal 32
[RouterD] msdp
[RouterD-msdp] peer 192.168.1.1 connect-interface pos 1/0/0
[RouterD-msdp] static-rpf-peer 192.168.1.1 rp-policy list-c
6-46
Issue 04 (2010-08-31)
6 MSDP Configuration
Down
0
Reset Count
0
0
Down
0
Reset Count
0
Down
0
Reset Count
0
----End
Configuration Files
Configuration file of Router C is as follows:
#
sysname RouterC
#
multicast routing-enable
#
interface Pos1/0/0
undo shutdown
link-protocol ppp
ip address 192.168.1.1 255.255.255.0
pim sm
#
interface Pos2/0/0
undo shutdown
link-protocol ppp
ip address 192.168.4.1 255.255.255.0
pim sm
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
pim sm
#
ospf 1
area 0.0.0.0
network 192.168.1.0 0.0.0.255
network 192.168.4.0 0.0.0.255
network 1.1.1.1 0.0.0.0
#
pim
c-bsr LoopBack0
c-rp LoopBack0
#
ip ip-prefix list-df permit 192.168.0.0 16 greater-equal 16 less-equal 32
#
msdp
peer 192.168.3.2 connect-interface pos 1/0/0
peer 192.168.5.1 connect-interface pos 2/0/0
static-rpf-peer 192.168.3.2 rp-policy list-df
static-rpf-peer 192.168.5.1 rp-policy list-df
#
return
The configuration fiiles of Router D and Router F are similar to the files mentioned previously,
and are not mentioned here.
Issue 04 (2010-08-31)
6-47
6 MSDP Configuration
Receiver
user2
PIM-SM
Source
S1
RouterB
GE2/0/0
Loopback10
GE1/0/0
GE2/0/0
GE3/0/0
RouterD
Loopback1
Source
S2
POS1/0/0
GE1/0/0
Loopback0
RouterA
GE2/0/0
Loopback0
GE2/0/0
Loopback1
RouterC
POS1/0/0
POS1/0/0
POS2/0/0
GE3/0/0
Loopback10
RouterE
Receiver
user1
MSDP peers
router
Interface
IP Address
router
Interface
IP Address
Router A
GE 1/0/0
10.110.5.1/24
Router D
POS 1/0/0
192.168.3.1/24
GE 2/0/0
10.110.1.2/24
GE 2/0/0
10.110.2.1/24
GE 1/0/0
10.110.6.1/24
GE 3/0/0
10.110.3.1/24
GE 2/0/0
10.110.2.2/24
Loopback 0
2.2.2.2/32
POS 1/0/0
192.168.1.1/24
Loopback 1
4.4.4.4/32
GE 2/0/0
10.110.1.1/24
Loopback 10
10.1.1.1/32
GE 3/0/0
10.110.4.1/24
POS 1/0/0
192.168.3.2/24
Loopback 0
1.1.1.1/32
POS 2/0/0
192.168.1.2/24
Loopback 1
3.3.3.3/32
Loopback 10
10.1.1.1/32
Router B
Router C
6-48
Router E
Issue 04 (2010-08-31)
6 MSDP Configuration
Configuration Roadmap
Solution: Configure an anycast RP. The receiver sends a Join message to the RP closest to the
topology. The source sends a Register message to the RP closest to the topology. The steps are
as follows:
1.
Configure an IP address for each interface and configure OSPF in the PIM-SM area.
2.
Enable multicast on each router and PIM-SM on each interface and enable IGMP on the
interface connected to hosts.
3.
Configure the same loopback interface address for Router C and Router D. Configure the
C-BSR on Loopback 1 interfaces and the C-RP on Loopback 10 interfaces.
4.
Data Preparation
To complete this configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address on each interface and a unicast routing protocol.
#Configure an IP address and mask to each interface according to Figure 6-3. Configure OSPF.
Ensure the communication between routers on the network layer. Ensure dynamic routing
updates between routers by means of the unicast routing protocol. The procedures are not
mentioned here.
Step 2 Enable multicast on each router and configure PIM-SM on each interface.
# Enable multicast on each router, and enable PIM-SM on each interface. Enable IGMP on the
interface connected to hosts. The configurations of other routers are similar to that of Router C,
and are not mentioned here.
[RouterC] multicast routing-enable
[RouterC] interface gigabitethernet 3/0/0
[RouterC-GigabitEthernet3/0/0] igmp enable
[RouterC-GigabitEthernet3/0/0] pim sm
[RouterC-GigabitEthernet3/0/0] quit
[RouterC] interface gigabitethernet 2/0/0
[RouterC-GigabitEthernet2/0/0] pim sm
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface pos 1/0/0
[RouterC-Pos1/0/0] pim sm
[RouterC-Pos1/0/0] quit
Step 3 Configure Loopback 1 and Loopback 10 interfaces, and the C-BSR and C-RP.
# Configure the address of Loopback 1 interface and the address of Loopback 10 interface on
Router C and Router D respectively. Configure the C-BSP on Loopback 1 and the C-RP on
Loopback 10. The configurations of Router D are similar to that of Router C, and are not
mentioned here.
[RouterC] interface loopback 1
[RouterC-LoopBack1] ip address 3.3.3.3 255.255.255.255
Issue 04 (2010-08-31)
6-49
6 MSDP Configuration
[RouterC-LoopBack1] pim sm
[RouterC-LoopBack1] quit
[RouterC] interface loopback 10
[RouterC-LoopBack10] ip address 10.1.1.1 255.255.255.255
[RouterC-LoopBack10] pim sm
[RouterC-LoopBack10] quit
[RouterC] pim
[RouterC-pim] c-bsr loopback 1
[RouterC-pim] c-rp loopback 10
[RouterC-pim] quit
Down
0
Reset Count
0
Down
0
Reset Count
0
# Run the display pim routing-table command. You can view PIM routes on a router. In the
PIM-SM domain, S1 (10.110.5.100/24) sends multicast information to G (225.1.1.1). User 1
that joins G receives the multicast data sent to G. Comparing with the display of PIM routes on
Router C and Router D, you can find that the valid RP is Router C. That is, S1 registers with
Router C, and User 1 sends Join messages to Router C.
<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 10.1.1.1 (local)
Protocol: pim-sm, Flag: WC
UpTime: 00:28:49
Upstream interface: Register
Upstream neighbor: NULL
6-50
Issue 04 (2010-08-31)
6 MSDP Configuration
There is no display.
# User 1 leaves G, and S1 stops sending multicast data to G. You can run the reset multicast
routing-table all and reset multicast forwarding-table all commands to clear the multicast
routing entries and multicast forwarding entries on Router C.
# User 2 joins G, and S2 (10.110.6.100/24) sends multicast data to G. Comparing with the display
of PIM routes on Router C and Router D, you can find that the valid RP is Router D. That is, S2
registers with Router D, and User 2 sends Join messages to Router D.
<RouterC> reset multicast routing-table all
<RouterC> reset multicast forwarding-table all
There is no display.
<RouterD> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, 225.1.1.1)
RP: 10.1.1.1 (local)
Protocol: pim-sm, Flag: WC RPT
UpTime: 00:07:23
Upstream interface: NULL,
Upstream neighbor: NULL
RPF prime neighbor: NULL
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet3/0/0,
Protocol: pim-sm, UpTime: 00:07:23, Expires:(10.110.6.100, 225.1.1.1)
RP: 10.1.1.1 (local)
Protocol: pim-sm, Flag: SPT 2MSDP ACT
UpTime: 00:10:20
Upstream interface: GigabitEthernet2/0/0
Upstream neighbor: 10.110.2.2
RPF prime neighbor: 10.110.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet3/0/0
Protocol: pim-sm, UpTime: 00:10:22, Expires: -
----End
Configuration Files
Configuration file of Router C is as follows.
#
sysname RouterC
Issue 04 (2010-08-31)
6-51
6 MSDP Configuration
#
multicast routing-enable
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 10.110.4.1 255.255.255.0
igmp enable
pim sm
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 10.110.1.1 255.255.255.0
pim sm
#
interface Pos1/0/0
undo shutdown
link-protocol ppp
ip address 192.168.1.1 255.255.255.0
pim sm
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
pim sm
#
interface LoopBack1
ip address 3.3.3.3 255.255.255.255
pim sm
#
interface LoopBack10
ip address 10.1.1.1 255.255.255.255
pim sm
#
ospf 1
area 0.0.0.0
network 10.110.1.0 0.0.0.255
network 10.110.4.0 0.0.0.255
network 1.1.1.1 0.0.0.0
network 3.3.3.3 0.0.0.0
network 10.1.1.1 0.0.0.0
network 192.168.1.0 0.0.0.255
#
pim
c-bsr LoopBack1
c-rp LoopBack10
#
msdp
originating-rp LoopBack0
peer 2.2.2.2 connect-interface LoopBack0
#
return
The configuration of Router D is similar to that of Router C, and is not mentioned here.
6-52
Issue 04 (2010-08-31)
7 MBGP Configuration
MBGP Configuration
Issue 04 (2010-08-31)
7-1
7 MBGP Configuration
MP-BGP maintains routes for unicast and multicast at the same time, stores them in
different routing tables, and keeps the routing information of unicast and multicast separate
from each other.
MP-BGP builds different network topologies for unicast and multicast at the same time.
Most of unicast routing policies and configuration methods supported by BGP4 can be
applied to multicast. MP-BGP maintains different routes for unicast and multicast
according to routing policies.
This chapter describes the configuration of MP-BGP applied to multicast, that is, MBGP configuration.
For the details of MP-BGP, refer to the chapter "BGP Configuration" in the HUAWEI NetEngine80E/
40E Router Configuration Guide - IP Routing.
Issue 04 (2010-08-31)
7 MBGP Configuration
Unicast route
MBGP route
Setting up MBGP connections in the multicast address family view can provide routing
information for RPF check.
Pre-configuration Tasks
Before configuring basic MBGP functions, you need to configure basic Multicast functions.
Data Preparation
To configure basic MBGP functions, you need the following data.
No.
Data
CAUTION
If the two routers that plan to set up the MBGP peer relationship have set up a BGP connection,
skip the section.
Do as follows on the two routers between which the MBGP peer relationship needs to be set up.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7-3
7 MBGP Configuration
BGP is enabled, the local AS number is set, and the BGP view is displayed.
Step 3 (Optional) Run:
router-id ipv4-address
The local interface and the source address used to set up a BGP connection are specified.
If the BGP connection is set up through a Loopback interface or a sub-interface, the command
is required.
Step 6 (Optional) Run:
peer { ip-address | group-name } ebgp-max-hop [ number ]
For details of BGP peers, refer to the HUAWEI NetEngine80E/40E Router Configuration Guide - IP
Routing.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7 MBGP Configuration
Step 3 Run:
ipv4-family multicast
MBGP is enabled on the original BGP peer or peer group. The original BGP peer becomes an
MBGP peer.
The parameters of the command are explained as follows:
l
----End
CAUTION
A Route reflector is valid only for IBGP peers. Before performing the configuration, you must
establish the IBGP peer relationships between MBGP route reflector and clients.
The configuration is optional. By default, the route reflector is not configured.
Do as follows on the router that is to become an MBGP route reflector:
Procedure
Step 1 Run:
system-view
The local host is configured as a route reflector, and the peer (group) is specified as a client of
the route reflector.
The parameters of the command are explained as follows:
Issue 04 (2010-08-31)
7-5
7 MBGP Configuration
l
----End
CAUTION
MBGP routes are originated from the following:
l
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7 MBGP Configuration
route-policy route-policy-name: specifies the name of the routing policy that controls the
routes to be advertised.
Step 5 Run:
import-route protocol [ process-id ] [ med med-value | route-policy route-policyname ] *
protocol [ process-id ]: specifies the routing protocol and the process ID of the routing
protocol from which routes are imported. The routing protocol contains direct, static, rip,
isis and ospf. When the routing protocol is isis, ospf or rip, the process ID must be specified.
route-policy route-policy-name: specifies the route filtering policy. Only the route that
passes the filtering of the policy is imported.
Procedure
l
Run the display bgp multicast peer [ [ peer-address ] verbose ] command to check
information about an MBGP peer.
Run the display bgp multicast group [ group-name ] command to check information about
an MBGP peer group.
Run the display bgp multicast network command to check the routing information
advertised by MBGP.
Run the display bgp multicast routing-table [ network-address [ mask-length [ longerprefixes ] | mask [ longer-prefixes ] ] ] command to check the MBGP routing table.
----End
Issue 04 (2010-08-31)
7-7
7 MBGP Configuration
Whether MBGP changes the next hop when advertising a route to IBGP peers
Whether MBGP advertises all local routes or only the locally aggregated routes
Whether a BGP Update message sent by an MBGP peer carries the private AS number
Pre-configuration Tasks
Before configuring the policy for advertising MBGP routes, complete the task of Configuring
Basic MBGP Functions.
Data Preparation
To configure the policy for advertising MBGP routes, you need the following data.
7-8
No.
Data
AS number
Issue 04 (2010-08-31)
7 MBGP Configuration
The configuration is optional, and is valid only for an IBGP peer or peer group.
Procedure
Step 1 Run:
system-view
The local address is configured as the next hop of routes, when MBGP advertises routes to an
MBGP peer or peer group.
The parameters of the command are explained as follows:
l
----End
The configuration is optional. By default, MBGP does not aggregate local routes.
Procedure
Step 1 Run:
system-view
7-9
7 MBGP Configuration
Step 2 Run:
bgp as-number
Manual aggregation: aggregates routes in the local MBGP routing table. Manual aggregation
takes precedence over automatic aggregation.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7 MBGP Configuration
Step 4 Run:
peer { group-name | peer-address } default-route-advertise [ route-policy routepolicy-name ]
route-policy route-policy-name: specifies the routing policy that controls all advertised
routes.
----End
Procedure
Step 1 Run:
system-view
The local peer is configured to advertise the community attribute to an MBGP peer group or a
remote MBGP peer.
By default, the local peer does not advertise the community attribute.
The parameters of this command are explained as follows:
l
Issue 04 (2010-08-31)
7-11
7 MBGP Configuration
The local peer is configured to advertise the extended community attribute to an MBGP peer
group or a remote MBGP peer.
By default, the local peer does not advertise the extended community attribute.
The parameters of this command are explained as follows:
l
----End
The configuration is applicable only to an EBGP peer. By default, an update message can carries private
AS number.
Procedure
Step 1 Run:
system-view
A BGP update message sent to an MBGP peer group or a remote MBGP peer is configured not
to carry private AS number. The public AS number can be directly used on the Internet. The
private AS number cannot be advertised to the Internet, and is used only in domains.
The parameters of the command are explained as follows:
l
----End
7-12
Issue 04 (2010-08-31)
7 MBGP Configuration
Procedure
l
Run the display bgp multicast routing-table community [ aa:nn ] & <0-13> [ noadvertise | no-export | no-export-subconfed ] * [ whole-match ] command to check the
routing information of a specified MBGP community.
Run the display bgp multicast routing-table community-filter { { community-filtername | basic-community-filter-number } [ whole-match ] | advanced-community-filternumber } command to check the routes that match a specified MBGP community attribute
filter.
Run the display bgp multicast network command to check the routing information
advertised by MBGP.
Run the display bgp multicast routing-table [ network-address [ mask-length [ longerprefixes ] | mask [ longer-prefixes ] ] ] command to check the MBGP routing table.
Run the display bgp multicast routing-table cidr command to check CIDR routes.
Run the display bgp multicast routing-table statistics command to check the statistics
of the MBGP routing table.
----End
7-13
7 MBGP Configuration
For a router configured with MBGP, the routes exchanged between peers are classified into the
following types:
l
import: filters the routes sent by a specified peer. Only the routes that pass the filtering are
received.
export: filters the routes sent to a specified peer or peer group. Only the routes that pass
the filtering are sent.
Pre-configuration Task
Before configuring the route filtering policy between MBGP peers, complete the following task:
Configuring Basic MBGP Functions
Data Preparation
To configure the route filtering policy between MBGP peers, you need the following data.
No.
Data
Name of the routing policy, sequence number of the node, and matching rule
ID of the ACL
AS-Path filter
IP-Prefix
The configuration is optional and is applicable to the route exchange with any peer.
Procedure
Step 1 Run:
system-view
7-14
Issue 04 (2010-08-31)
7 MBGP Configuration
MBGP routing policy is configured to control the route exchange with any MBGP peer.
The parameters of the command are explained as follows:
l
import: filters the routes sent by any MBGP peer. Only the routes that pass the filtering are
received.
Step 5 Run:
filter-policy { basic-acl-number | acl-name acl-name | ip-prefix ip-prefix-name }
export [ protocol [ process-id ] ]
MBGP routing policy is configured to control the route exchange with any MBGP peer.
The parameters of the command are explained as follows:
l
export [ protocol [ process-id ] ]: filters the routes sent to any MBGP peer. In fact, the filtering
is performed when the local routes are imported to the MBGP routing table. This command
is used to import the local routes that pass the filtering to the MBGP routing table, and then
advertise the routing information in the MBGP routing table.
----End
The configuration is optional. By default, the route filtering policy based on route-policy is not configured.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7-15
7 MBGP Configuration
The MBGP routing policy based on route-policy is configured to control the route exchange
with a specified remote MBGP peer.
The parameters of the command are explained as follows:
l
import: filters the routes sent by a specified remote MBGP peer or peer group. Only the
routes that pass the filtering are received.
export: filters the routes sent to a specified remote MBGP peer or peer group. Only the routes
that pass the filtering are sent.
----End
The configuration is optional. By default, the route filtering policy based on the ACL is not configured.
Procedure
Step 1 Run:
system-view
7-16
Issue 04 (2010-08-31)
7 MBGP Configuration
The MBGP routing policy based on the ACL is configured to control the route exchange with
a specified remote MBGP peer.
The parameters of the command are explained as follows:
l
import: filters the routes sent by a specified remote MBGP peer or peer group. Only the
routes that pass the filtering are received.
export: filters the routes sent to a specified remote MBGP peer or peer group. Only the routes
that pass the filtering are sent.
----End
The configuration is optional. By default, the route filtering policy based on the AS-Path list is not
configured.
Procedure
Step 1 Run:
system-view
The MBGP routing policy based on the AS-Path list is configured to control the route exchange
with a specified remote MBGP route.
The parameters of the command are explained as follows:
l
Issue 04 (2010-08-31)
7-17
7 MBGP Configuration
l
import: filters the routes sent by a specified remote MBGP peer or peer group. Only the
routes that pass the filtering are received.
export: filters the routes sent to a specified remote MBGP peer or peer group. Only the routes
that pass the filtering are sent.
----End
The configuration is optional. By default, the route filtering policy based on the IP prefix list is not
configured.
Procedure
Step 1 Run:
system-view
The MBGP routing policy based on the IP prefix list is configured to control the route exchange
with a specified remote MBGP peer.
The parameters of the command are explained as follows:
l
import: filters the routes sent by a specified remote MBGP peer or peer group. Only the
routes that pass the filtering are received.
export: filters the routes sent to a specified remote MBGP peer or peer group. Only the routes
that pass the filtering are sent.
----End
7-18
Issue 04 (2010-08-31)
7 MBGP Configuration
The configuration is optional. By default, the maximum number of routes received from peers is not
configured.
Procedure
Step 1 Run:
system-view
The number of routes received from an MBGP peer or peer group is limited.
The command can be used to control the peer to receive routes. You can configure specific
parameters as required to control BGP after the number of the routes received from a peer exceeds
the threshold.
l
alert-only: indicates that only an alarm is generated when the number of routes exceeds the
limit.
idle-forever: indicates that when the number of routes exceeds the limit, the connection is
not automatically set up until the reset bgp command is used.
idle-timeout value: indicates the timeout timer for reestablishing the connection
automatically after the number of routes exceeds the limit. value specifies the value of the
timer.
If the three parameters are not set, the peer relationship is disconnected. The router retries
setting up a connection after 30 seconds. An alarm is generated and recorded in the log.
----End
7-19
7 MBGP Configuration
Procedure
l
Run the display bgp multicast routing-table different-origin-as command to check the
routes different from the original AS.
Run the display bgp multicast routing-table regular-expression [ as-regularexpression ] command to check the routing information that matches the AS regular
expression.
Run the display bgp multicast paths [ as-regular-expression ] command to check the
information about the AS paths.
Run the display bgp multicast routing-table community-filter { { community-filtername | basic-community-filter-number } [ whole-match ] | advanced-community-filternumber } command to check the routes that match the MBGP community list.
Run the display bgp multicast network command to check the routing information
advertised by MBGP.
----End
7-20
Local_Pref
Issue 04 (2010-08-31)
7 MBGP Configuration
Pre-configuration Tasks
Before configuring the policy for MBGP route selection, complete the task of Configuring Basic
MBGP Functions.
Data Preparation
To configure the policy for MBGP route selection, you need the following data.
No.
Data
AS number
Preferred value
Local_Pref
Procedure
Step 1 Run:
system-view
The preferred value is set for a route learnt from an MBGP peer group or a remote MBGP peer.
The route with the greatest preferred value is selected as the route to a specified network.
The parameters of the command are explained as follows:
Issue 04 (2010-08-31)
7-21
7 MBGP Configuration
l
----End
The configuration is optional. By default, the default preferences of EBGP routes, IBGP routes, and local
routes are 255.
Procedure
Step 1 Run:
system-view
external-preference: specifies the preference of the route learned from an EBGP peer.
internal-preference: specifies the preference of the route learned from an IBGP peer.
----End
Issue 04 (2010-08-31)
7 MBGP Configuration
NOTE
The configuration is optional. By default, the Local_Pref value of the MBGP route is 100.
Procedure
Step 1 Run:
system-view
The configuration is optional. When a BGP router obtains multiple routes with the same destination but
different next hops from different EBGP peers, the route with the smallest MED value is preferred if other
conditions of these routes are the same.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
7-23
7 MBGP Configuration
Deterministic-MED is enabled.
If this command is not configured, when an optimal route is to be selected from among routes
which are received from different ASs and which carry the same prefix, the sequence in which
routes are received is relevant to the result of route selection. After the command is configured,
however, when an optimal route is to be selected from among routes which are received from
different ASs and which carry the same prefix, routes are first grouped according to the leftmost
AS in the AS_Path. Routes with the same leftmost AS are grouped together, and after
comparison, an optimal route is selected for the group. The group optimal route is then compared
with optimal routes from other groups to determine the final optimal route. This mode of route
selection ensures that the sequence in which routes are received is no longer relevant to the result
of route selection.
Step 7 Run:
bestroute med-none-as-maximum
When the MED value of a route is lost, the route is configured with the maximum MED value.
By default, the MED value of the route is 0.
Step 8 Run:
bestroute med-confederation
Procedure
Step 1 Run:
system-view
7-24
Issue 04 (2010-08-31)
7 MBGP Configuration
Procedure
l
Run the display bgp multicast routing-table command to check the routes of the MBGP
routing table.
Run the display bgp multicast routing-table statistics command to check the statistics
of the MBGP routing table.
----End
7-25
7 MBGP Configuration
Pre-configuration Tasks
Before configuring MBGP route dampening, complete the following task:
Configuring Basic MBGP Functions
Data Preparation
To configure MBGP route dampening, you need the following data.
No.
Data
The configuration is valid only for EBGP routes. By default, the default values of dampening parameters
are used.
Procedure
Step 1 Run:
system-view
7-26
reuse: specifies the threshold for releasing routes from being suppressed. When the penalty
is smaller than the threshold, the suppressed routes are reused.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
7 MBGP Configuration
suppress: specifies the threshold for suppressing routes. The value must be greater than the
value of reuse. When the penalty is greater than the threshold, the routes are suppressed.
ceiling: specifies the ceiling value of the threshold. The value must be greater than the value
of suppress.
----End
Procedure
l
Run the display bgp multicast routing-table dampened command to check MBGP
dampened routes.
Run the display bgp multicast routing-table dampening parameter command to check
MBGP route dampening parameters.
Run the display bgp multicast routing-table flap-info [ network-address [ mask [ longermatch ] | mask-length [ longer-match ] ] | as-path-filter as-path-filter-number | regularexpression as-regular-expression ] command to check the statistics of MBGP route
flapping.
----End
CAUTION
The MBGP peer relationship is deleted after you reset MBGP connections with the reset bgp
multicast command. So, confirm the action before you use the command.
Procedure
l
Issue 04 (2010-08-31)
Run the reset bgp multicast peer-address command in the user view to reset the MBGP
connection between specified peers.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
7-27
7 MBGP Configuration
Run the reset bgp multicast all command in the user view to reset all MBGP connections.
Run the reset bgp multicast group group-name command in the user view to reset the
MBGP connections between all peers in the peer group.
Run the reset bgp multicast external command in the user view to reset external
connections.
Run the reset bgp multicast internal command in the user view to reset internal
connections.
----End
CAUTION
The MBGP statistics cannot be restored after you clear them. So, confirm the action before you
use the command.
Procedure
l
Run the reset bgp multicast flap-info [ network-address [ mask-length | mask ] | as-pathfilter as-path-list-number | regrexp regrexp ] command in the user view to clear the
information about the MBGP route flapping.
----End
7-28
Issue 04 (2010-08-31)
7 MBGP Configuration
AS100
AS200
RouterD
Loopback0
POS2/0/0
Source
RouterA
POS1/0/0
GE2/0/0
RouterB
POS1/0/0
Loopback0
POS1/0/0
POS2/0/0
POS3/0/0
Loopback0
POS3/0/0
RouterC
POS1/0/0
Loopback0
GE2/0/0
Receiver
MBGP peers
Device
Interface
IP address
Device
Interface
IP address
Router A
POS 1/0/0
192.1.1.1/24
Router C
POS 1/0/0
195.1.1.1/24
GE 2/0/0
10.10.10.1/24
GE 2/0/0
22.22.22.1/24
Loopback 0
1.1.1.1/32
POS 3/0/0
193.1.1.1/24
Loopback 0
3.3.3.3/32
Router B
POS 1/0/0
192.1.1.2/24
POS 1/0/0
195.1.1.2/24
POS 2/0/0
194.1.1.2/24
Router D
POS 2/0/0
194.1.1.1/24
POS 3/0/0
193.1.1.2/24
Loopback 0
4.4.4.4/32
Loopback 0
2.2.2.2/32
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure an address for each interface to ensure internetworking within the AS in unicast
mode.
2.
Configure the MBGP peer relationship and set up inter-AS multicast routes.
3.
4.
5.
Configure basic PIM-SM functions in each AS and enable IGMP on the interface connected
to hosts.
Issue 04 (2010-08-31)
7-29
7 MBGP Configuration
6.
7.
8.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address for each interface and OSPF in an AS.
# Configure an IP address and mask for each interface and the OSPF protocol in the AS shown
in Figure 7-1. Enable that Router B, Router C, Router D, and Receiver in AS 200 can
interconnect at the network layer. Ensure that the routers can learn routes to the loopback
interfaces. Ensure the dynamic routing updates between routers by means of the unicast routing
protocol. The process 1 of OSPF is adopted in the configuration, and the detailed process is not
mentioned here.
Step 2 Configure BGP, enable MBGP, and configure an MBGP peer.
# Enable BGP and configure an MBGP peer on Router A.
[RouterA] bgp 100
[RouterA-bgp] peer 192.1.1.2 as-number 200
[RouterA-bgp] ipv4-family multicast
[RouterA-bgp-af-multicast] peer 192.1.1.2 enable
[RouterA-bgp-af-multicast] quit
[RouterA-bgp] quit
7-30
Issue 04 (2010-08-31)
7 MBGP Configuration
# Configure Router B.
[RouterB] multicast routing-enable
[RouterB] interface Pos1/0/0
[RouterB-Pos1/0/0] pim sm
[RouterB-Pos1/0/0] quit
[RouterB] interface Pos2/0/0
[RouterB-Pos2/0/0] pim sm
[RouterB-Pos2/0/0] quit
[RouterB] interface Pos3/0/0
[RouterB-Pos3/0/0] pim sm
[RouterB-Pos3/0/0] quit
Issue 04 (2010-08-31)
7-31
7 MBGP Configuration
# Configure Router C.
[RouterC] multicast routing-enable
[RouterC] interface Pos1/0/0
[RouterC-Pos1/0/0] pim sm
[RouterC-Pos1/0/0] quit
[RouterC] interface GigabitEthernet2/0/0
[RouterC-GigabitEthernet2/0/0] pim sm
[RouterC-GigabitEthernet2/0/0] igmp enable
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface Pos3/0/0
[RouterC-Pos3/0/0] pim sm
[RouterC-Pos3/0/0] quit
# Configure Router D.
[RouterD] multicast routing-enable
[RouterD] interface Pos1/0/0
[RouterD-Pos1/0/0] pim sm
[RouterD-Pos1/0/0] quit
[RouterD] interface Pos2/0/0
[RouterD-Pos2/0/0] pim sm
[RouterD-Pos2/0/0] quit
# Configure Router B.
[RouterB] interface loopback 0
[RouterB-LoopBack0] ip address 2.2.2.2 255.255.255.255
[RouterB-LoopBack0] pim sm
[RouterB-LoopBack0] quit
[RouterB] pim
[RouterB-pim] c-bsr loopback 0
[RouterB-pim] c-rp loopback 0
[RouterB] quit
# Configure Router B.
[RouterB] interface Pos1/0/0
[RouterB-Pos1/0/0] pim bsr-boundary
[RouterB-Pos1/0/0] quit
7-32
Issue 04 (2010-08-31)
7 MBGP Configuration
# Configure Router B.
[RouterB] msdp
[RouterB-msdp] peer 192.1.1.1 connect-interface Pos 1/0/0
[RouterB-msdp] quit
# Run the display msdp brief command to check the MSDP peer relationship between
routers. For example, the brief information about the MSDP peer relationship on Router B is
displayed as follows:
[RouterB] display msdp brief
MSDP Peer Brief Information of VPN-Instance: public net
Configured
Up
Listen
Connect
Shutdown
1
1
0
0
0
Peer's Address
State
Up/Down time
AS
SA Count
192.1.1.1
Up
00:07:17
100
1
Down
0
Reset Count
0
----End
Configuration Files
l
Issue 04 (2010-08-31)
7-33
7 MBGP Configuration
ipv4-family multicast
undo synchronization
import-route direct
peer 192.1.1.2 enable
#
msdp
peer 192.1.1.2 connect-interface Pos1/0/0
#
return
l
7-34
Issue 04 (2010-08-31)
7 MBGP Configuration
#
return
l
Issue 04 (2010-08-31)
7-35
7 MBGP Configuration
link-protocol ppp
ip address 194.1.1.1 255.255.255.0
pim sm
#
interface loopback 0
ip address 4.4.4.4 255.255.255.255
pim sm
#
ospf 1
area 0.0.0.0
network 194.1.1.0 0.0.0.255
network 195.1.1.0 0.0.0.255
network 4.4.4.4 0.0.0.0
#
bgp 200
peer 194.1.1.2 as-number 200
peer 195.1.1.1 as-number 200
#
ipv4-family unicast
undo synchronization
import-route direct
peer 194.1.1.2 enable
peer 195.1.1.1 enable
#
ipv4-family multicast
undo synchronization
import-route direct
peer 194.1.1.2 enable
peer 195.1.1.1 enable
#
return
7-36
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
8-1
site4
site6
MD B
site5
PE1
VPN instance B
P
PE2
PE1
PIM
PE3
Public instance
site2
MD A
site1
PE1
VPN instance A
PE2
site3
PE3
8-2
Among all possible data receivers, only members of VPN A (Site 1, Site 2, and Site 3) can
receive multicast data from S1.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
Multicast data is transmitted among sites in the public network and each site in multicast
mode.
Connecting sites through a VPN instance, and supporting multicast based on the VPN
instance
Connecting the public network through the public instance, and supporting multicast
based on the public network instance
Supporting information communication and data switching between the public network
instance and the VPN instance
Switch-MDT Switchover
When multicast data is forwarded through a Share-MDT in the public network, the multicast
data is forwarded to all PEs that support the same VPN instance, regardless of whether there is
a receiver in the site connected to PEs. When the rate of VPN multicast data is higher, it may
lead to data flooding, which wastes the network bandwidth and adds load to PEs.
The NE80E/40E optimizes the MD. Special Switch-MDTs is set up between PEs connected to
VPN receivers and PEs connected to the VPN multicast source for VPN multicast data of a high
Issue 04 (2010-08-31)
8-3
rate flowing to the public network. The multicast data flow is then switched from the ShareMDT to the Switch-MDT. Multicast data can thus be transmitted on demand.
Users can configure the switching conditions of a Switch-MDT.
For detailed implementation process, refer to the chapter "Multicast VPN" in the HUAWEI NetEngine80E/
40E Router Feature Description - IP Multicast.
Distributed mode
The LPUF-20/21 and LPUF-40 support a complete multicast VPN function and therefore
can independently implement multicast packet forwarding among VPNs.
Integrated mode
For the LPUs that do not support the multicast VPN function, they only send packets to the
SPUC for integrated processing.
Issue 04 (2010-08-31)
Configure multicast VPN by using the MD solution. Set up Share-MDT to forward multicast
packets. When the multicast forwarding rate exceeds the threshold, Share-MDT is switched to
Switch-MDT.
Pre-configuration Tasks
Before configuring basic MD VPN functions, complete the following tasks:
l
Data Preparation
To configure basic MD VPN functions, you need the following data.
No.
Data
Share-Group address
Procedure
Step 1 Run:
set board-type slot slot-id { tunnel | netstream }
8-5
Context
Do as follows on the PE router:
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
A share group is configured. The system automatically creates an MTI, and then binds the share
group to the MTI and binds the MTI to the VPN instance.
----End
Issue 04 (2010-08-31)
Context
Do as follows on the PE router:
Procedure
Step 1 Run:
system-view
or run:
pim dm
The MTI address must be the same as the IP address that is used to set up the IBGP peer relationship on
the PE in the public network. Otherwise, the VPN multicast packets received on the MTI cannot pass the
RPF check.
8-7
----End
When the rate of the VPN multicast data entering the public network exceeds the threshold,
the VPN multicast data can be switched from Share-MDT to a specified Switch-MDT. Ondemand multicast is thus implemented.
After the VPN multicast data is switched to the switch-MDT, the switchover conditions
may not be met. In this case, the VPN multicast data can be reversely switched from SwitchMDT to Share-MDT.
Pre-configuration Tasks
Before configuring Switch-MDT switchover, complete the task of Configuring Basic MD VPN
Functions.
Data Preparation
To configure Switch-MDT switchover, you need the following data.
8-8
Issue 04 (2010-08-31)
No.
Data
Switching threshold
This configuration is optional. If this configuration is not done, Switch-MDT switchover cannot be
performed and Share-MDT is always used to transmit VPN multicast data.
Procedure
Step 1 Run:
system-view
switch-group-pool: specifies a switch-group-pool. It's suggested that the same VPN instance
on different PEs are configured with the same switch-group-pool. On a PE, the Switch-Group
address ranges to which different VPNs correspond cannot overlap.
8-9
The duration for keeping the rate of VPN multicast data lower than the threshold before reversely
switching from Switch-MDT to Share-MDT is set.
By default, the delay for switching from Switch-MDT to Share-MDT is 60 seconds.
----End
----End
Procedure
l
8-10
Issue 04 (2010-08-31)
Run the following commands in any view to check information about Switch-Group
received by a specified VPN instance in an MD.
----End
Procedure
Step 1 Run:
system-view
8-11
VPN
RED
Source2
GE1
CE-Rb
GE3
GE2
GE1
VPN
BLUE
Loopback1
GE1
VPN
RED
Loopback1
Public
GE1
GE2
GE1
CE-Ra
GE3
GE2
GE2
VPN
RED
GE2
GE2
PE-B
Source1
GE3 GE1
GE3
GE2
CE-Bb
PC3
Loopback1
CE-Rc
PE-C
GE3
GE1
GE2
Loopback2
GE3
GE1Loopback1
GE2
VPN
BLUE
CE-Bc
GE1
PE-A
PC4
PC1 Loopback1
NOTE
In Figure 8-2, GE1 stands for GigabitEthernet 1/0/0, GE2 stands for GigabitEthernet 2/0/0, and GE3 stands
for GigabitEthernet 3/0/0. The IP address of each interface is shown in the following table.
The devices support two processing modes of the multicast VPN service: distributed mode and integrated
mode. In distributed mode, you must run the multicast-vpn slot command to specify the slot that supports
multicast VPN. In integrated mode, you must run the set board-type slot and multicast-vpn slot
commands to set the service mode of the SPUC to be Tunnel mode and enable multicast VPN on an SPUC
separately. The following configuration example use the distributed mode to cofigure the multicast VPN
service.
8-12
Device
IP Address of Interface
Remarks
GE1: 192.168.6.2/24
GE2: 192.168.7.2/24
GE3: 192.168.8.2/24
Issue 04 (2010-08-31)
Device
PE-A
IP Address of Interface
Remarks
Loopback1: 2.2.2.2/32
GE1: 192.168.6.1/24
GE2: 10.110.1.1/24
VPN-RED instance
GE3: 10.110.2.1/24
VPN-RED instance
Loopback1: 1.1.1.1/32
PE-B
GE1: 192.168.7.1/24
GE2: 10.110.3.1/24
VPN-BLUE instance
GE3: 10.110.4.1/24
VPN-RED instance
Loopback1: 1.1.1.2/32
PE-C
GE1: 192.168.8.1/24
GE2: 10.110.5.1/24
VPN-RED instance
GE3: 10.110.6.1/24
VPN-BLUE instance
Loopback1: 1.1.1.3/32
Loopback2: 33.33.33.33/32
VPN-BLUE instance
Acts as C-RP of VPN-BLUE
CE-Ra
CE-Bb
CE-Rb
GE1: 10.110.7.1/24
GE2: 10.110.2.2/24
GE1: 10.110.8.1/24
GE2: 10.110.3.2/24
GE1: 10.110.9.1/24
GE2: 10.110.4.2/24
GE3: 10.110.12.1/24
Loopback1: 22.22.22.22/32
VPN-RED instance
Acts as C-RP of VPN-RED instance
CE-Rc
Issue 04 (2010-08-31)
GE1: 10.110.10.1/24
8-13
Device
IP Address of Interface
Remarks
GE2: 10.110.5.2/24
GE3: 10.110.12.2/24
GE1: 10.110.11.1/24
GE2: 10.110.6.2/24
Source1
10.110.7.2/24
Source2
10.110.8.2/24
PC1
10.110.1.2/32
PC2
10.110.9.2/32
PC3
10.110.10.2/32
PC4
10.110.11.2/32
CE-Bc
8-14
Item
Networking Requirements
Multicast
source/
receiver
Multicast source of VPN RED is Source1. The receivers include PC1, PC2, and
PC3. Multicast source of VPN BLUE is Source2. The receiver is PC4. In VPN
RED, Share-Group address is 239.1.1.1 and Switch-Group address pool ranges
from 225.2.2.1 to 225.2.2.16. In VPN BLUE, Share-Group address is 239.2.2.2
and Switch-Group address pool ranges from 225.4.4.1 to 225.4.4.16.
VPN
instance
which the
interfaces
on PEs
belong to
On PE-A, GE2 and GE3 belong to VPN-RED instance, and GE1 and
Loopback1 belong to the public network instance. On PE-B, GE2 belongs to
VPN-BLUE instance, GE3 belongs to VPN-RED instance, and GE1 and
Loopback1 belong to the public network instance. On PE-C, GE2 belongs to
VPN-RED instance, GE3 and Loopback2 belong to VPN-BLUE instance, and
GE1 and Loopback1 belong to the public network instance.
Routing
protocol
and MPLS
Multicast
function
Enable multicast on P. Enable multicast on the public network instance on PEA, PE-B, and PE-C. Enable multicast on VPN-RED instance on PE-A, PE-B,
and PE-C. Enable multicast on VPN-BLUE instance on PE-B and PE-C. Enable
multicast on CE-Ra, CE-Rb, CE-Rc, CE-Bb, and CE-Bc.
IGMP
function
Enable IGMP on GE2 of PE-A.Enable IGMP on GE1 of CE-Rb, GE1 of CERc, and GE1 of CE-Bc.
Issue 04 (2010-08-31)
Item
Networking Requirements
PIM
function
Enable PIM-SM on all the VPN interfaces in VPN-RED instance. Enable PIMSM on all the VPN interfaces in VPN-BLUE instance. Enable PIM-SM on all
the interfaces of P and CEs, as well as public network instance interfaces of
PEs. Configure Loopback1 of P as the C-BSR and C-RP of public network
(serving all multicast groups). Configure Loopback1 of CE-Rb as the C-BSR
and C-RP of VPN-RED (serving all multicast groups). Configure Loopback2
of PE-C as the C-BSR and C-RP of VPN-BLUE (serving all multicast groups).
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure MPLS/BGP VPN to ensure that the VPN network works normally and unicast
routes are reachable.
2.
3.
Enable multicast and PIM in the entire network. Enable multicast of public network on PEs
and Ps, and enable multicast of the VPN instances on PEs and CEs.
4.
Configure the same Share-group address, the same MTI, and the same switch-group-pool
for the same VPN instance on each PE.
5.
Configure the MTI address of each PE as the IBGP peer interface address in the public
network, and enable PIM on the MTI.
Data Preparation
See Table 8-2.
Procedure
Step 1 Configure PE-A.
# Configure an ID for PE-A, enable IP multicast routing in the public network, configure MPLS
LSR-ID, and enable LDP.
[PE-A] router id 1.1.1.1
[PE-A] multicast routing-enable
[PE-A] mpls lsr-id 1.1.1.1
[PE-A] mpls
[PE-A-mpls] quit
[PE-A] mpls ldp
[PE-A-mpls-ldp] quit
# Set the service mode of the SPUC to be Tunnel mode.Enable multicast VPN services on the
SPUC of the PE. Suppose that the SPUC is in slot 4, the configuration is as follows:
[PE-A]
<PE-A>
<PE-A>
[PE-A]
quit
set board-type slot 4 tunnel
system-view
multicast-vpn slot 4
# Create VPN RED instance and enter the VPN instance view. Configure the VPN IPv4 prefix
and create egress and ingress routes for the instance. Enable IP multicast and configure ShareGroup. Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
Issue 04 (2010-08-31)
8-15
# Enable LDP and PIM-SM on the interface GigabitEthernet 1/0/0 in the public network.
[PE-A] interface gigabitethernet 1/0/0
[PE-A-GigabitEthernet1/0/0] ip address 192.168.6.1 24
[PE-A-GigabitEthernet1/0/0] pim sm
[PE-A-GigabitEthernet1/0/0] mpls
[PE-A-GigabitEthernet1/0/0] mpls ldp
# Bind the interface GigabitEthernet 2/0/0 to VPN RED instance, and enable IGMP and PIMSM.
[PE-A] interface gigabitethernet 2/0/0
[PE-A-GigabitEthernet2/0/0] ip binding vpn-instance RED
[PE-A-GigabitEthernet2/0/0] ip address 10.110.1.1 24
[PE-A-GigabitEthernet2/0/0] pim sm
[PE-A-GigabitEthernet2/0/0] igmp enable
loopback 1
ip address 1.1.1.1 32
pim sm
quit
# Assign an IP address for the interface MTI0. The address of MTI0 is same as the that of the
interface Loopback0. The system then automatically binds MTI0 to VPN RED instance. Enable
PIM-SM on the interface.
[PE-A] interface MTunnel 0
[PE-A-MTunnel0] ip address 1.1.1.1 32
[PE-A-MTunnel0] pim sm
[PE-A-MTunnel0] quit
8-16
Issue 04 (2010-08-31)
# Set the service mode of the SPUC to be Tunnel mode.Enable multicast VPN services on the
SPUC of the PE. Suppose that the SPUC is in slot 4, the configuration is as follows:
[PE-B]
<PE-B>
<PE-B>
[PE-B]
quit
set board-type slot 4 tunnel
system-view
multicast-vpn slot 4
# Create VPN BLUE instance and enter the VPN instance view. Configure VPN IPv4 prefix
and create the egress and ingress routes for the instance. Enable IP multicast and configure ShareGroup. Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-B] ip vpn-instance BLUE
[PE-B-vpn-instance-BLUE] route-distinguisher 200:1
[PE-B-vpn-instance-BLUE] vpn-target 200:1 export-extcommunity
[PE-B-vpn-instance-BLUE] vpn-target 200:1 import-extcommunity
[PE-B-vpn-instance-BLUE] multicast routing-enable
[PE-B-vpn-instance-BLUE] multicast-domain share-group 239.2.2.2 binding mtunnel 1
[PE-B-vpn-instance-BLUE] multicast-domain switch-group-pool 225.4.4.1 28
# Create VPN RED instance and enter the VPN instance view. Configure VPN IPv4 prefix and
create egress and ingress routes for the instance. Enable IP multicast and configure Share-Group.
Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-B] ip vpn-instance RED
[PE-B-vpn-instance-RED] route-distinguisher 100:1
[PE-B-vpn-instance-RED] vpn-target 100:1 export-extcommunity
[PE-B-vpn-instance-RED] vpn-target 100:1 import-extcommunity
[PE-B-vpn-instance-RED] multicast routing-enable
[PE-B-vpn-instance-RED] multicast-domain share-group 239.1.1.1 binding mtunnel 0
[PE-B-vpn-instance-RED] multicast-domain switch-group-pool 225.2.2.1 28
# Enable LDP and PIM-SM on the interface GigabitEthernet 1/0/0 in the public network.
[PE-B] interface gigabitethernet 1/0/0
[PE-B-GigabitEthernet1/0/0] ip address 192.168.7.1 24
[PE-B-GigabitEthernet1/0/0] pim sm
[PE-B-GigabitEthernet1/0/0] mpls
[PE-B-GigabitEthernet1/0/0] mpls ldp
# Bind the interface GigabitEthernet 2/0/0 to VPN BLUE instance, and enable PIM-SM.
[PE-B] interface gigabitethernet 2/0/0
[PE-B-GigabitEthernet2/0/0] ip binding vpn-instance BLUE
[PE-B-GigabitEthernet2/0/0] ip address 10.110.3.1 24
[PE-B-GigabitEthernet2/0/0] pim sm
# Bind the interface GigabitEthernet 3/0/0 to VPN RED instance, and enable PIM-SM.
Issue 04 (2010-08-31)
8-17
loopback 1
ip address 1.1.1.2 32
pim sm
quit
# Assign an IP address for the interface MTI0. The address of MTI0 is same as the that of the
interface Loopback1. Enable PIM-SM on the interface.
[PE-B] interface MTunnel 0
[PE-B-MTunnel0] ip address 1.1.1.2 32
[PE-B-MTunnel0] pim sm
# Assign an IP address for MTI1. The address of MTI1 is the same as that of the interface
Loopback1. Enable PIM-SM on the interface.
[PE-B] interface MTunnel 1
[PE-B-MTunnel1] ip address 1.1.1.2 32
[PE-B-MTunnel1] pim sm
8-18
Issue 04 (2010-08-31)
[PE-C] mpls
[PE-C-mpls] quit
[PE-C] mpls ldp
[PE-C-mpls-ldp] quit
# Set the service mode of the SPUC to be Tunnel mode.Enable multicast VPN services on the
SPUC of the PE. Suppose that the SPUC is in slot 4, the configuration is as follows:
[PE-C]
<PE-C>
<PE-C>
[PE-C]
quit
set board-type slot 4 tunnel
system-view
multicast-vpn slot 4
# Create VPN RED instance and enter the VPN instance view. Configure VPN IPv4 prefix and
create egress and ingress routes for the instance. Enable IP multicast and configure Share-Group.
Specify an MTI bound to the VPN instance and the range of the switch-addres-pool.
[PE-C] ip vpn-instance RED
[PE-C-vpn-instance-RED] route-distinguisher 100:1
[PE-C-vpn-instance-RED] vpn-target 100:1 export-extcommunity
[PE-C-vpn-instance-RED] vpn-target 100:1 import-extcommunity
[PE-C-vpn-instance-RED] multicast routing-enable
[PE-C-vpn-instance-RED] multicast-domain share-group 239.1.1.1 binding mtunnel 0
[PE-C-vpn-instance-RED] multicast-domain switch-group-pool 225.2.2.1 28
# Create VPN BLUE instance and enter the VPN instance view. Configure the VPN IPv4 prefix
and create egress and ingress routes for the instance. Enable IP multicast and configure ShareGroup. Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-C] ip vpn-instance BLUE
[PE-C-vpn-instance-BLUE] route-distinguisher 200:1
[PE-C-vpn-instance-BLUE] vpn-target 200:1 export-extcommunity
[PE-C-vpn-instance-BLUE] vpn-target 200:1 import-extcommunity
[PE-C-vpn-instance-BLUE] multicast routing-enable
[PE-C-vpn-instance-BLUE] multicast-domain share-group 239.2.2.2 binding mtunnel 1
[PE-C-vpn-instance-BLUE] multicast-domain switch-group-pool 225.4.4.1 28
# Enable LDP and PIM-SM on the interface GigabitEthernet1/0/0 in the public network.
[PE-C] interface gigabitethernet 1/0/0
[PE-C-GigabitEthernet1/0/0] ip address 192.168.8.1 24
[PE-C-GigabitEthernet1/0/0] pim sm
[PE-C-GigabitEthernet1/0/0] mpls
[PE-C-GigabitEthernet1/0/0] mpls ldp
# Bind the interface GigabitEthernet2/0/0 to VPN RED instance, and enable PIM-SM.
[PE-C] interface gigabitethernet 2/0/0
[PE-C-GigabitEthernet2/0/0] ip binding vpn-instance RED
[PE-C-GigabitEthernet2/0/0] ip address 10.110.5.1 24
[PE-C-GigabitEthernet2/0/0] pim sm
# Bind the interface GigabitEthernet3/0/0 to VPN BLUE instance, and enable PIM-SM.
[PE-C] interface gigabitethernet 3/0/0
[PE-C-GigabitEthernet3/0/0] ip binding vpn-instance BLUE
[PE-C-GigabitEthernet3/0/0] ip address 10.110.6.1 24
[PE-C-GigabitEthernet3/0/0] pim sm
loopback 1
ip address 1.1.1.3 32
pim sm
quit
# Assign the an IP address for the interface MTI0. The address of MTI0 is the same as that of
the interface Loopback1. Enable PIM-SM on the interface.
Issue 04 (2010-08-31)
8-19
# Assign the an IP address for MTI1. The address of MTI1 is the same as that of the interface
Loopback1. Enable PIM-SM on the interface.
[PE-C] interface MTunnel 1
[PE-C-MTunnel1] ip address 1.1.1.3 32
[PE-C-MTunnel1] pim sm
# Bind the interface Loopback2 to VPN BLUE instance, and enable PIM-SM.
[PE-C] interface
[PE-C-LoopBack2]
[PE-C-LoopBack2]
[PE-C-LoopBack2]
[PE-C-LoopBack2]
loopback 2
ip binding vpn-instance BLUE
ip address 33.33.33.33 32
pim sm
quit
# Configure the interface Loopback2 as the C-BSR and the C-RP of VPN-BLUE.
[PE-C] pim vpn-instance BLUE
[PE-C-pim-blue] c-bsr Loopback2
[PE-C-pim-blue] c-rp Loopback2
[PE-C-pim-blue] quit
Step 4 Configure P.
# Enable multicast in the public network, configure MPLS LSR-ID, and enable LDP.
[P] multicast routing-enable
[P] mpls lsr-id 2.2.2.2
[P] mpls
[P-mpls] quit
[P] mpls ldp
8-20
Issue 04 (2010-08-31)
[P-mpls-ldp] quit
# Enable LDP and PIM-SM on the interface GigabitEthernet 1/0/0 in the public network.
[P] interface gigabitethernet 1/0/0
[P-GigabitEthernet1/0/0] ip address 192.168.6.2 24
[P-GigabitEthernet1/0/0] pim sm
[P-GigabitEthernet1/0/0] mpls
[P-GigabitEthernet1/0/0] mpls ldp
# Enable LDP and PIM-SM on the interface GigabitEthernet 2/0/0 in the public network.
[P] interface gigabitethernet 2/0/0
[P-GigabitEthernet2/0/0] ip address 192.168.7.2 24
[P-GigabitEthernet2/0/0] pim sm
[P-GigabitEthernet2/0/0] mpls
[P-GigabitEthernet2/0/0] mpls ldp
# Enable LDP and PIM-SM on the interface GigabitEthernet 3/0/0 in the public network.
[P] interface gigabitethernet 3/0/0
[P-GigabitEthernet3/0/0] ip address 192.168.8.2 24
[P-GigabitEthernet3/0/0] pim sm
[P-GigabitEthernet3/0/0] mpls
[P-GigabitEthernet3/0/0] mpls ldp
loopback 1
ip address 2.2.2.2 32
pim sm
quit
# Configure the interface Loopback1 as the C-BSR and C-RP of the public network instance.
[P] pim
[P-pim] c-bsr Loopback1
[P-pim] c-rp Loopback1
# Configure OSPF.
[P] ospf 1
[P-ospf-1] area 0.0.0.0
[P-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[P-ospf-1-area-0.0.0.0] network 192.168.0.0 0.0.255.255
[P-ospf-1-area-0.0.0.0] quit
# Configure RIP.
[CE-Ra] rip 2
[CE-Ra-rip-2] network 10.0.0.0
[CE-Ra-rip-2] import-route direct
Issue 04 (2010-08-31)
8-21
# Configure RIP.
[CE-Bb] rip 3
[CE-Bb-rip-3] network 10.0.0.0
[CE-Bb-rip-3] import-route direct
loopback 1
ip address 22.22.22.22 32
pim sm
quit
vpn-instance RED
c-bsr Loopback1
c-rp Loopback1
quit
# Configure RIP.
[CE-Rb] rip 2
[CE-Rb-rip-2] network 10.0.0.0
[CE-Rb-rip-2] network 22.0.0.0
[CE-Rb-rip-2] import-route direct
8-22
Issue 04 (2010-08-31)
# Enable PIM-SM and IGMP on the interface GigabitEthernet 1/0/0 in the VPN.
[CE-Rc] interface gigabitethernet 1/0/0
[CE-Rc-GigabitEthernet1/0/0] ip address 10.110.10.1 24
[CE-Rc-GigabitEthernet1/0/0] pim sm
[CE-Rc-GigabitEthernet1/0/0] igmp enable
# Configure RIP.
[CE-Rc] rip 2
[CE-Rc-rip-2] network 10.0.0.0
[CE-Rc-rip-2] import-route direct
# Enable PIM-SM and IGMP on the interface GigabitEthernet 1/0/0 in the VPN.
[CE-Bc] interface gigabitethernet 1/0/0
[CE-Bc-GigabitEthernet1/0/0] ip address 10.110.11.1 24
[CE-Bc-GigabitEthernet1/0/0] pim sm
[CE-Bc-GigabitEthernet1/0/0] igmp enable
# Configure RIP.
[CE-Bc] rip 3
[CE-Bc-rip-3] network 10.0.0.0
[CE-Bc-rip-3] import-route direct
Configuration Files
l
Issue 04 (2010-08-31)
8-23
#
router id 1.1.1.1
#
multicast routing-enable
#
multicast-vpn slot 4
#
mpls lsr-id 1.1.1.1
mpls
#
mpls ldp
#
ip vpn-instance RED
route-distinguisher 100:1
vpn-target 100:1 export-extcommunity
vpn-target 100:1 import-extcommunity
multicast routing-enable
multicast-domain share-group 239.1.1.1 binding MTunnel 0
multicast-domain switch-group-pool 225.2.2.0 255.255.255.240
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 192.168.6.1 255.255.255.0
pim sm
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip binding vpn-instance RED
ip address 10.110.1.1 255.255.255.0
pim sm
igmp enable
#
interface GigabitEthernet3/0/0
undo shutdown
ip binding vpn-instance RED
ip address 10.110.2.1 255.255.255.0
pim sm
#
interface LoopBack1
ip address 1.1.1.1 255.255.255.255
pim sm
#
interface MTunnel0
ip binding vpn-instance RED
ip address 1.1.1.1 255.255.255.255
pim sm
#
bgp 100
group VPN-G internal
peer VPN-G connect-interface LoopBack1
peer 1.1.1.2 as-number 100
peer 1.1.1.2 group VPN-G
peer 1.1.1.3 as-number 100
peer 1.1.1.3 group VPN-G
#
ipv4-family unicast
undo synchronization
peer VPN-G enable
peer 1.1.1.2 enable
peer 1.1.1.2 group VPN-G
peer 1.1.1.3 enable
peer 1.1.1.3 group VPN-G
#
ipv4-family vpnv4
policy vpn-target
peer VPN-G enable
peer 1.1.1.2 enable
8-24
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
8-25
8-26
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
8-27
Configuration file of P
#
sysname P
#
multicast routing-enable
#
mpls lsr-id 2.2.2.2
mpls
#
mpls ldp
#
interface GigabitEthernet1/0/0
undo shutdown
ip address 192.168.6.2 255.255.255.0
pim sm
mpls
mpls ldp
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 192.168.7.2 255.255.255.0
pim sm
mpls
mpls ldp
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 192.168.8.2 255.255.255.0
pim sm
8-28
Issue 04 (2010-08-31)
mpls
mpls ldp
#
interface LoopBack1
ip address 2.2.2.2 255.255.255.255
pim sm
#
pim
c-bsr Loopback1
c-rp Loopback1
#
ospf 1
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 192.168.0.0 0.0.255.255
#
return
l
Issue 04 (2010-08-31)
8-29
8-30
Issue 04 (2010-08-31)
undo shutdown
ip address 10.110.6.2 255.255.255.0
pim sm
#
rip 3
network 10.0.0.0
import-route direct
#
return
Source2
GE1
VPN
BLUE
VPN
RED
Loopback0
GE1
Loopback1
GE2
Loopback1
AS 100
GE3
PE-A
GE2
AS 200
GE2
PE-B
Loopback2
PE-C
Loopback2
VPN
RED
Source1
GE1
CE-C
GE2
GE1
GE1
GE2
GE1
CE-A GE2
GE1
Loopback1
GE2
CE-B
Loopback0
Loopback1
PE-D
GE3
GE2
CE-D
VPN
BLUE
GE1
PC2
NOTE
GE1 stands for GigabitEthernet 1/0/0, GE2 stands for GigabitEthernet 2/0/0, and GE3 stands for
GigabitEthernet 3/0/0. The IP address of each interface is listed as follows:
The devices support two processing modes of the multicast VPN service: distributed mode and integrated
mode. In distributed mode, you must run the multicast-vpn slot command to specify the slot that supports
multicast VPN. In integrated mode, you must run the set board-type slot and multicast-vpn slot
commands to set the service mode of the SPUC to be Tunnel mode and enable multicast VPN on an SPUC
separately. The following configuration example use the distributed mode to cofigure the multicast VPN
service.
Issue 04 (2010-08-31)
8-31
IP Address of Interface
Remarks
PE-A
GE1: 10.10.1.1/24
Public instance
GE2: 10.111.1.1/24
VPN-RED
GE3: 10.111.2.1/24
VPN-BLUE
Loopback1: 1.1.1.1/32
Public instance
It sets up IBGP peer relationship with Loopback1
interface of PE-B, and sets up the EBGP peer
relationship with Loopback1 interface of PE-D.
PE-B
GE1: 10.10.1.2/24
Public instance
GE2: 192.168.1.1/24
Public instance
GE2 is the BSR boundary.
Loopback1: 1.1.1.2/32
Public instance
This interface is used to set up BGP peer
relationships and MSDP peer relationships. This
interface sets up the IBGP peer relationship with
Loopback1 interface of PE-A and the EBGP peer
relationship with Loopback1 interface of PE-C.
Loopback2: 11.11.11.11/32
Public instance
It acts as the C-BSR and C-RP of the PIM domain
in AS 100
PE-C
GE1: 10.10.2.1/24
Public instance
GE2: 192.168.1.2/24
Public instance
GE2 is the BSR boundary.
Loopback1: 1.1.1.3/32
Public instance.
This interface is used to set up BGP peer
relationships and MSDP peer relationships. This
interface sets up the the IBGP peer relationship
with Loopback1 interface of PE-D and the EBGP
peer relationship with Loopback1 interface of
PE-B.
Loopback2: 22.22.22.22/32
Public instance
Ths interface acts as the C-BSR and C-RP of the
PIM domain in AS 200
PE-D
8-32
GE1: 10.10.2.2/24
Public instance
GE2: 10.111.3.1/24
VPN-RED
GE3: 10.111.4.1/24
VPN-BLUE
Issue 04 (2010-08-31)
Device
IP Address of Interface
Remarks
Loopback1: 1.1.1.4/32
Public instance
This interface sets up the IBGP peer relationship
with Loopback1 interface of PE-C and the EBGP
peer relationship with Loopback1 interface of
PE-A.
CE-A
GE1: 10.111.5.1/24
GE2: 10.111.1.2/24
GE1: 10.111.6.1/24
GE2: 10.111.2.2/24
Loopback0: 2.2.2.2/32
GE1: 10.111.7.1/24
GE2: 10.111.3.2/24
Loopback0: 3.3.3.3/24
GE1: 10.111.8.1/24
GE2: 10.111.4.2/24
Source1
10.111.5.2./24
Source2
10.111.6.2/24
PC1
10.111.7.2/24
PC2
10.111.8.2/24
CE-B
CE-C
CE-D
Networking Requirements
Multicast source
and multicast
receiver
Issue 04 (2010-08-31)
8-33
Item
Networking Requirements
VPN instance
which the
interfaces on PEs
belong to
Routing protocol
and MPLS
Multicast
functions
IGMP functions
PIM functions
MSDP functions
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure MPLS/BGP VPN to ensure that the VPN network works normally and unicast
routes are reachable.
2.
Enable the SPUC to support the multicast VPN service of integrated mode. In this manner,
multicast packets are encapsulated and decapsulated in GRE mode during the transmission
between the VPN instance and the public network instance.
NOTE
In VPN-OptionC mode, multicast packets on the ASBR-PE (PE-B and PE-C in Figure 8-3) do not
require the GRE encapsulation and decapsulation. As a result, the SPUC is not enabled to support
the multicast VPN service.
8-34
3.
Enable multicast and PIM in the entire network, enable multicast on the PEs and PEs in
the public network, and enable multicast on PEs and CEs in the VPNs.
4.
Issue 04 (2010-08-31)
5.
Configure the same Share-Group address, the same MTI, and the same Switch-MDT switch
for a VPN instance on PE-A and PE-D.
6.
Configure the MTI address as the IBGP peer interface address of the public network on
PE-A and PE-D, and enable PIM on the MTI.
Data Preparation
See Table 8-4 for information about data preparation.
Procedure
Step 1 Configuring PE-A
# Configure an ID for PE-A, enable multicast in the public network, configure an ID for an
MPLS LSR, and enable LDP.
[PE-A] router id 1.1.1.1
[PE-A] multicast routing-enable
[PE-A] mpls lsr-id 1.1.1.1
[PE-A] mpls
[PE-A-mpls] quit
[PE-A] mpls ldp
[PE-A-mpls-ldp] quit
# Set the service mode of the SPUC to be Tunnel mode.Enable multicast VPN services on the
SPUC of the PE. Suppose that the SPUC is in slot 4, the configuration is as follows:
[PE-A]
<PE-A>
<PE-A>
[PE-A]
quit
set board-type slot 4 tunnel
system-view
multicast-vpn slot 4
# Create VPN RED instance and enter the VPN instance view. Configure VPN IPv4 prefix and
create egress and ingress routes for the instance. Enable IP multicast and configure Share-Group.
Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-A] ip vpn-instance RED
[PE-A-vpn-instance-RED] route-distinguisher 100:1
[PE-A-vpn-instance-RED] vpn-target 100:1 export-extcommunity
[PE-A-vpn-instance-RED] vpn-target 100:1 import-extcommunity
[PE-A-vpn-instance-RED] multicast routing-enable
[PE-A-vpn-instance-RED] multicast-domain share-group 239.1.1.1 binding mtunnel 0
[PE-A-vpn-instance-RED] multicast-domain switch-group-pool 225.1.1.1 28
[PE-A-vpn-instance-RED] quit
# Create VPN BLUE instance and enter the VPN instance view. Configure VPN IPv4 prefix
and create egress and ingress routes for the instance. Enable IP multicast and configure ShareGroup. Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-A] ip vpn-instance BLUE
[PE-A-vpn-instance-BLUE] route-distinguisher 200:1
[PE-A-vpn-instance-BLUE] vpn-target 200:1 export-extcommunity
[PE-A-vpn-instance-BLUE] vpn-target 200:1 import-extcommunity
[PE-A-vpn-instance-BLUE] multicast routing-enable
[PE-A-vpn-instance-BLUE] multicast-domain share-group 239.4.4.4 binding mtunnel 1
[PE-A-vpn-instance-BLUE] multicast-domain switch-group-pool 225.4.4.1 28
[PE-A-vpn-instance-BLUE] quit
Issue 04 (2010-08-31)
8-35
loopback 1
ip address 1.1.1.1 32
pim sm
quit
# Configure an IP address (the same as that of Loopback 1 interface) for MTI0 and enable PIMSM.
[PE-A] interface MTunnel 0
[PE-A-MTunnel0] ip address 1.1.1.1 32
[PE-A-MTunnel0] pim sm
# Configure an IP address (the same as that of Loopback 1 interface) for MTI1 and enable PIMSM.
[PE-A] interface MTunnel 1
[PE-A-MTunnel1] ip address 1.1.1.1 32
[PE-A-MTunnel1] pim sm
8-36
Issue 04 (2010-08-31)
[PE-A-ospf-2-area-0.0.0.0]
[PE-A-ospf-2-area-0.0.0.0]
[PE-A] ospf 3 vpn-instance
[PE-A-ospf-3] import-route
[PE-A-ospf-3] area 0.0.0.0
[PE-A-ospf-3-area-0.0.0.0]
[PE-A-ospf-3-area-0.0.0.0]
loopback 1
ip address 1.1.1.2 32
pim sm
quit
loopback 2
ip address 11.11.11.11 32
pim sm
quit
Issue 04 (2010-08-31)
8-37
# Enable MPLS LDP and PIM-SM on GigabitEthernet 1/0/0 in the public network.
[PE-C] interface gigabitethernet 1/0/0
[PE-C-GigabitEthernet1/0/0] ip address 10.10.2.1 24
[PE-C-GigabitEthernet1/0/0] pim sm
[PE-C-GigabitEthernet1/0/0] mpls
[PE-C-GigabitEthernet1/0/0] mpls ldp
[PE-C-GigabitEthernet1/0/0] quit
8-38
Issue 04 (2010-08-31)
[PE-C-LoopBack1] quit
loopback 2
ip address 22.22.22.22 32
pim sm
quit
Issue 04 (2010-08-31)
8-39
# Set the service mode of the SPUC to be Tunnel mode.Enable multicast VPN services on the
SPUC of the PE. Suppose that the SPUC is in slot 4, the configuration is as follows:
[PE-A]
<PE-A>
<PE-A>
[PE-A]
quit
set board-type slot 4 tunnel
system-view
multicast-vpn slot 4
# Create VPN RED instance and enter the VPN instance view. Configure VPN IPv4 prefix and
create egress and ingress routes for the instance. Enable IP multicast and configure Share-Group.
Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-D] ip vpn-instance RED
[PE-D-vpn-instance-RED] route-distinguisher 100:1
[PE-D-vpn-instance-RED] vpn-target 100:1 export-extcommunity
[PE-D-vpn-instance-RED] vpn-target 100:1 import-extcommunity
[PE-D-vpn-instance-RED] multicast routing-enable
[PE-D-vpn-instance-RED] multicast-domain share-group 239.1.1.1 binding mtunnel 0
[PE-D-vpn-instance-RED] multicast-domain switch-group-pool 225.1.1.1 28
[PE-D-vpn-instance-RED] quit
# Create VPN BLUE instance and enter the VPN instance view. Configure VPN IPv4 prefix
and create egress and ingress routes for the instance. Enable IP multicast and configure ShareGroup. Specify an MTI bound to the VPN instance and the range of the switch-address-pool.
[PE-D] ip vpn-instance BLUE
[PE-D-vpn-instance-BLUE] route-distinguisher 200:1
[PE-D-vpn-instance-BLUE] vpn-target 200:1 export-extcommunity
[PE-D-vpn-instance-BLUE] vpn-target 200:1 import-extcommunity
[PE-D-vpn-instance-BLUE] multicast routing-enable
[PE-D-vpn-instance-BLUE] multicast-domain share-group 239.4.4.4 binding mtunnel 1
[PE-D-vpn-instance-BLUE] multicast-domain switch-group-pool 225.4.4.1 28
[PE-D-vpn-instance-BLUE] quit
8-40
loopback 1
ip address 1.1.1.4 32
pim sm
quit
Issue 04 (2010-08-31)
# Configure an IP address (the same as that of Loopback1 interface) for MTI0 and enable PIMSM.
[PE-D] interface MTunnel 0
[PE-D-MTunnel1] ip address 1.1.1.4 32
[PE-D-MTunnel1] pim sm
# Configure an IP address (the same as that of Loopback 1 interface) for MTI1 and enable PIMSM.
[PE-D] interface MTunnel 1
[PE-D-MTunnel1] ip address 1.1.1.4 32
[PE-D-MTunnel1] pim sm
Issue 04 (2010-08-31)
8-41
# Configure OSPF.
[CE-A] ospf 1
[CE-A-ospf-1] area 0.0.0.0
[CE-A-ospf-1-area-0.0.0.0] network 10.111.0.0 0.0.255.255
[CE-A-ospf-1-area-0.0.0.0] quit
loopback 0
ip address 2.2.2.2 32
pim sm
quit
# Configure OSPF.
[CE-B] ospf 1
[CE-B-ospf-1] area 0.0.0.0
[CE-B-ospf-1-area-0.0.0.0] network 10.111.0.0 0.0.255.255
[CE-B-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0
[CE-B-ospf-1-area-0.0.0.0] quit
Issue 04 (2010-08-31)
[CE-C] interface
[CE-C-LoopBack0]
[CE-C-LoopBack0]
[CE-C-LoopBack0]
loopback0
ip address 3.3.3.3 32
pim sm
quit
# Configure OSPF.
[CE-C] ospf 1
[CE-C-ospf-1] area 0.0.0.0
[CE-C-ospf-1-area-0.0.0.0] network 10.111.0.0 0.0.255.255
[CE-C-ospf-1-area-0.0.0.0] network 3.3.3.3 0.0.0.0
[CE-C-ospf-1-area-0.0.0.0] quit
# Configure OSPF.
[CE-D] ospf 1
[CE-D-ospf-1] area 0.0.0.0
[CE-D-ospf-1-area-0.0.0.0] network 10.111.0.0 0.0.255.255
[CE-D-ospf-1-area-0.0.0.0] quit
Configuration Files
l
Issue 04 (2010-08-31)
8-43
8-44
Issue 04 (2010-08-31)
import-route direct
import-route ospf 2
#
ipv4-family vpn-instance BLUE
import-route direct
import-route ospf 3
#
ipv4-family vpnv4
policy vpn-target
peer 1.1.1.4 enable
#
ospf 1
area 0.0.0.0
network 10.10.0.0 0.0.255.255
network 1.1.1.1 0.0.0.0
#
ospf 2 vpn-instance RED
import-route bgp
area 0.0.0.0
network 10.111.0.0 0.0.255.255
#
ospf 3 vpn-instance BLUE
import-route bgp
area 0.0.0.0
network 10.111.0.0 0.0.255.255
#
return
l
Issue 04 (2010-08-31)
8-45
8-46
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
8-47
8-48
Issue 04 (2010-08-31)
#
ipv4-family vpnv4
policy vpn-target
peer 1.1.1.1 enable
#
ipv4-family vpn-instance RED
import-route direct
import-route ospf 2
#
ipv4-family vpn-instance BLUE
import-route direct
import-route ospf 3
#
ospf 1
area 0.0.0.0
network 10.10.0.0 0.0.255.255
network 1.1.1.4 0.0.0.0
#
ospf 2 vpn-instance RED
import-route bgp
area 0.0.0.0
network 10.111.0.0 0.0.255.255
#
ospf 3 vpn-instance BLUE
import-route bgp
area 0.0.0.0
network 10.111.0.0 0.0.255.255
#
return
l
Issue 04 (2010-08-31)
8-49
8-50
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
9-1
Control the range of multicast groups by limiting the number of PIM routing entries. This
prevents the introduction of large-volume multicast traffic beyond the forwarding
capability of routers.
Control the range of multicast groups that users can join by limiting the number of IGMP
group memberships.
9-2
Channel: It refers to a set of IPTV services of the same type defined by operators, such as
the Standard Definition Television (SDTV) channel and the High Definition Television
(HDTV) channel. Based on these channels, operators allocate bandwidth resources and
make charging policies. A channel can have multiple multicast groups.
IGMP only-link interface: It refers to the last-hop router interface that is connected to hosts
and meets one of the following requirements:
The interface is configured with static multicast groups but is not enabled with IGMP,
PIM-SM or PIM-DM.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
IGMP only-link interfaces do not support multicast CAC. That is, to enable multicast CAC
on a router, ensure that the router does not have any IGMP only-link interface.
l
Join status of an interface: It indicates that an interface is added to the outgoing interface
list of a PIM routing entry.
Applicable Environment
In the MAN shown in Figure 9-1, the IGMP Join message sent by the user is forwarded by Layer
2 devices such as the Digital Subscriber Line Access Multiplexer (DSLAM) and switch to the
Ultimate Provider Edge (UPE). The IP core network of operators may be connected to multiple
Internet Content Providers (ICPs). Each ICP uses multicast groups allocated in advance to carry
multicast data. The multicast data enters the MAN through the Network PE (NPE), and finally
reaches users.
To prevent multicast data entering networks from exceeding the processing capability of
routers or bandwidth limit of the access network, operators can adopt the following methods
when deploying IPTV services:
l
Limiting the number of IGMP group memberships on the UPE globally, or based on an
instance or an interface.
Limiting bandwidth and the number of groups in a channel or an interface on the UPE or
NPE.
NPE
UPE
IP/MPLS Backbone
NPE
VOD Server
ICP1
VOD Server
ICP2
Usage Guideline
Multicast CAC limits subsequent multicast entries only. For example, after the limit value is
configured, routers do not delete the existing entries or corresponding interfaces, even if the
number of existing entries, the number of interfaces in the Join state, or the occupied bandwidth
exceeds the limit value.
Here, the number of entries does not refer to the actual number of PIM or IGMP entries, but is
counted in the following ways:
Issue 04 (2010-08-31)
9-3
For groups in the Any Source Multicast (ASM) group address range: For the same G, all
(*, G) entries or (S, G) entries are counted as one entry.
For groups in the Specified Source Multicast (SSM) group address range: An (S, G) entry
is counted as one entry.
The function of limiting the number of IGMP group memberships is applicable to PIM-DM and
PIM-SM networks, and the other multicast CAC functions are applicable to IPv4 PIM-SM
networks only.
Multicast CAC does not limit static (S, G) entries the PIM entries of the Join messages received from
private networks.
Limiting the number of PIM routing entries based on a single instance: The total number
of PIM routing entries related to an instance cannot exceed the limit value. When the total
number reaches the limit value, no PIM entry can be created.
Limiting the number of PIM routing entries based on a channel: A channel can contain
multiple multicast groups. The total number of PIM routing entries related to a specified
channel cannot exceed the limit value. When the total number reaches the limit value, no
PIM entry can be created.
Limiting Bandwidth
When defining the range of multicast groups for a channel, you can specify the reserved
bandwidth for each multicast group. When a new group is added to the channel, a PIM entry is
created or an interface is added to the outgoing interface lists of an existing entry only when the
following conditions are met:
l
The remaining bandwidth of the interface is equal to or greater than the reserved bandwidth
of the group.
The remaining bandwidth of the channel is equal to or greater than the reserved bandwidth
of the group.
Issue 04 (2010-08-31)
SSM model: It is recommended to set up a channel on the DR at the source side and the
last-hop router connected to users, limit the number of PIM routing entries and bandwidth
related to the channel, and limit the number of IGMP group memberships on the last-hop
router.
ASM model: It is recommended to set up a channel on the DR at the source side, the RP
and the last-hop router connected to users, limit the number of PIM routing entries and
bandwidth related to the channel, and limit the number of IGMP group memberships on
the last-hop router.
The functions of multicast CAC functions are applicable to IPv4 PIM-SM networks.
Pre-configuration Tasks
Before configuring basic Multicast CAC functions, complete the following tasks:
Configuring a PIM-SM network, and enabling PIM-SM and IGMP (or configuring static
multicast groups) on the last-hop router interface connected to users
NOTE
Ensure that no IGMP only-link interfaces or PIM-DM interfaces exist in the instance to be configured with
multicast CAC.
Data Preparation
To configure basic multicast CAC functions, you need the following data.
Issue 04 (2010-08-31)
9-5
No.
Data
Procedure
Step 1 Run:
system-view
The range of multicast groups and the range of multicast sources are configured.
per-bandwidth specifies the reserved bandwidth for each multicast group. To create PIM
routing entries of a multicast group, ensure that the remaining bandwidth is equal to or greater
than the reserved bandwidth of the multicast group; otherwise, no PIM entry can be created or
no interface can be added to the outgoing interface list.
----End
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The maximum number of PIM routing entries that can be created in the current instance is set.
If threshold is set, the system generates alarms in logs when the number of PIM entries exceeds
the value of threshold.
----End
Procedure
Step 1 Run:
system-view
The maximum number of PIM routing entries that can be created in the channel is set.
If threshold is set, the system generates alarms in logs when the number of PIM entries exceeds
the value of threshold.
----End
Issue 04 (2010-08-31)
9-7
Procedure
l
Run:
system-view
Run:
interface interface-type interface-number
Run:
multicast limit out { max-entry limit | bandwidth traffic-rate } *
The maximum number of outgoing interface lists to which the interface is added and
bandwidth limit are set for all multicast groups.
l
Single channel
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
multicast limit channel channel-name out { max-entry limit | bandwidth
traffic-rate } *
The maximum number of outgoing interface lists to which the interface is added and
bandwidth limit are set for the channel.
----End
9-8
Run the display multicast [ vpn-instance vpn-instance-name ] limit channel channelname out-interface { interface-type interface-number | all } command to check CAC
statistics based on a channel on an interface.
Issue 04 (2010-08-31)
Run the display multicast [ vpn-instance vpn-instance-name ] limit [ channel channelname ] global command to check the statistics of global entries based on a channel or all
multicast groups.
----End
Procedure
l
Run the display multicast [ vpn-instance vpn-instance-name ] limit channel channelname out-interface { interface-type interface-number | all } command in any view to check
the outgoing interface lists to which an interface is added and bandwidth limit based on a
channel.
Run the display multicast [ vpn-instance vpn-instance-name ] limit [ channel channelname ] global command in any view to check the statistics of global entries of a channel
or all multicast groups.
Run the display pim [ vpn-instance vpn-instance-name ] routing-table channel channelname command to check information about (*, G) entries or (S, G) entries of a specified
channel.
Run the following commands to check information about IGMP multicast groups.
display igmp igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] * [ static ] [ verbose ]
display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ groupaddress | interface interface-type interface-number ] ssm-mapping [ verbose ]
----End
9-9
Networking Requirements
In the MAN shown in Figure 9-2, Router D is the first-hop router connected to the multicast
source, that is, the DR at the source side; Router A, Router B, and Router C are the last-hop
routers connected to users; Router E functions as the RP. The network of the carrier is planned
as follows:
l
Set up SDTV and HDTV channels and work out different prices for the two channels.
Configure different reserved bandwidth for the two types of channels to ensure the quality
of services (QoS).
Configure users to receive multicast data from Source 1 and Source 2 only.
Limit the number of multicast groups that a user joins on routers connected to users.
RouterA
GE2/0/0
PIM-SM
RouterD
RouterE
POS1/0/0
Source1
POS3/0/0
POS2/0/0
POS4/0/0
GE2/0/0
Receiver
HostA
POS1/0/0
GE2/0/0
POS1/0/0
RouterB
POS1/0/0
Receiver
HostB
POS1/0/0
GE2/0/0
Source2
RouterC
router
Interface
IP Address
router
Interface
IP Address
Router A
POS 1/0/0
10.1.1.1/24
Router D
POS 1/0/0
10.1.4.2/24
GE 2/0/0
192.168.1.1/24
GE 2/0/0
192.168.3.1/24
POS 1/0/0
10.1.2.1/24
POS 1/0/0
10.1.3.2/24
GE 2/0/0
192.168.2.1/24
POS 2/0/0
10.1.2.2/24
POS 1/0/0
10.1.3.1/24
POS 3/0/0
10.1.1.2/24
GE 2/0/0
192.168.2.2/24
POS 4/0/0
10.1.4.1/24
Router B
Router C
Router E
Configuration Roadmap
The configuration roadmap is as follows:
1.
9-10
Configure an IP address for each interface on the routers and a unicast routing protocol.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
2.
Enable multicast on routers, PIM-SM on each interface, and IGMP on the interface
connected to hosts.
3.
Set up two channels on Router D, and configure multicast groups and reserved bandwidth
for the channel.
4.
Limit the number of PIM routing entries and the number of IGMP group memberships on
Router A, Router B, and Router C.
Data Preparation
To complete the configuration, you need the following data:
l
The maximum number of PIM entries and the maximum number of IGMP group
memberships
Procedure
Step 1 Configure an IP address for each interface on the routers and configure a unicast routing protocol.
NOTE
In this configuration example, only the commands related to the multicast CAC configuration are
mentioned.
Step 2 Enable multicast on each router, PIM-SM on each interface, and IGMP and PIM-SM on the
interface connected to hosts.
# Enable multicast on each router, PIM-SM on each interface, and IGMP on interfaces through
which Router A, Router B, and Router C are connected to leaf networks.
<RouterA> system-view
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet2/0/0
[RouterA-GigabitEthernet2/0/0] pim sm
[RouterA-GigabitEthernet2/0/0] igmp enable
[RouterA-GigabitEthernet2/0/0] igmp version 3
[RouterA-GigabitEthernet2/0/0] quit
[RouterA] interface pos1/0/0
[RouterA-Pos1/0/0] pim sm
<RouterB> system-view
[RouterB] multicast routing-enable
[RouterB] interface gigabitethernet2/0/0
[RouterB-GigabitEthernet2/0/0] pim sm
[RouterB-GigabitEthernet2/0/0] igmp enable
[RouterB-GigabitEthernet2/0/0] igmp version 3
[RouterB-GigabitEthernet2/0/0] quit
[RouterB] interface pos1/0/0
[RouterB-Pos1/0/0] pim sm
<RouterC> system-view
[RouterC] multicast routing-enable
[RouterC] interface gigabitethernet2/0/0
[RouterC-GigabitEthernet2/0/0] pim sm
[RouterC-GigabitEthernet2/0/0] igmp enable
[RouterC-GigabitEthernet2/0/0] igmp version 3
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface pos1/0/0
[RouterC-Pos1/0/0] pim sm
Issue 04 (2010-08-31)
9-11
<RouterD> system-view
[RouterD] multicast routing-enable
[RouterD] interface gigabitethernet2/0/0
[RouterD-GigabitEthernet2/0/0] pim sm
[RouterD-GigabitEthernet2/0/0] quit
[RouterD] interface pos1/0/0
[RouterD-Pos1/0/0] pim sm
<RouterE> system-view
[RouterE] interface pos1/0/0
[RouterE-Pos1/0/0] pim sm
[RouterE-Pos1/0/0] quit
[RouterE] interface pos2/0/0
[RouterE-Pos2/0/0] pim sm
[RouterE-Pos2/0/0] quit
[RouterE] interface pos3/0/0
[RouterE-Pos3/0/0] pim sm
[RouterE-Pos3/0/0] quit
[RouterE] interface pos4/0/0
[RouterE-Pos4/0/0] pim sm
Step 3 Configure multicast CAC to limit the number of entries and bandwidth on Router D.
# Set up the SDTV channel that contains multicast groups in the 225.0.0.0/24 range. The reserved
bandwidth of each multicast group is 3000 kbit/s, and a maximum of 10 PIM entries can be
created for the channel.
[RouterD] multicast-channel
[RouterD-multicast-channel] channel SDTV type asm
[RouterD-multicast-channel-SDTV] group 225.0.0.0 mask 255.255.255.0 per-bandwidth
3000
[RouterD-multicast-channel-SDTV] multicast limit 10
[RouterD-multicast-channel-SDTV] quit
# Set up the HDTV channel of the SSM model. The multicast groups contained in the channel
is in the 232.0.0.0/24 range, and the source address range is 192.168.3.0/24. The reserved
bandwidth of each multicast group is 4000 kbit/s. A maximum number of 12 PIM entries can
be created for the channel.
[RouterD-multicast-channel] channel HDTV type ssm
[RouterD-multicast-channel-HDTV] group 232.0.0.0 mask 255.255.255.0 source
192.168.3.0 mask 255.255.255.0 per-bandwidth 4000
[RouterD-multicast-channel-HDTV] multicast limit 12
[RouterD-multicast-channel-HDTV] quit
# Set the maximum number of PIM entries to 20 in the public network instance.
[RouterD-multicast-channel] multicast limit 20
[RouterD-multicast-channel] quit
# Set the number of PIM entries and bandwidth limit on POS 1/0/0.
[RouterD] interface pos1/0/0
[RouterD-Pos1/0/0] multicast limit out max-entry 12 bandwidth 160000
[RouterD-Pos1/0/0] multicast limit channel HDTV out max-entry 10 bandwidth 40000
[RouterD-Pos1/0/0] multicast limit channel SDTV out max-entry 10 bandwidth 20000
Step 4 Configure a channel and limit the number of PIM entries and bandwidth on the last-hop router
connected to users.
Set up SDTV and HDTV channels on Router A. The group range and source range are the same
as those on Router D. A maximum of 20 PIM entries can be created in the public network
instance. Configure the router not to create multicast entries for groups out of the channel.
Configurations of Router B and Router C are similar to those of Router A, and are not mentioned
here.
9-12
Issue 04 (2010-08-31)
[RouterA] multicast-channel
[RouterA-multicast-channel] multicast limit 20
[RouterA-multicast-channel] channel SDTV type asm
[RouterA-multicast-channel-SDTV] group 225.0.0.0 mask 255.255.255.0 per-bandwidth
3000
[RouterA-multicast-channel-SDTV] multicast limit 10
[RouterA-multicast-channel-SDTV] quit
[RouterA-multicast-channel] channel HDTV type ssm
[RouterA-multicast-channel-HDTV] group 232.0.0.0 mask 255.255.255.0 source
192.168.3.0 mask 255.255.255.0 per-bandwidth 4000
[RouterA-multicast-channel-HDTV] multicast limit 12
[RouterA-multicast-channel-HDTV] quit
[RouterA-multicast-channel] unspecified-channel deny
Step 5 Limit the number of IGMP group memberships on the last-hop router connected to users.
# Configure the maximum number of IGMP group memberships to 30 on Router A.
[RouterA] igmp global limit 30
# Configure the maximum number of IGMP group memberships to 20 in the public network
instance.
[RouterA] igmp
[RouterA-igmp] limit 20
[RouterA-igmp] quit
# Configurations of Router B and Router C are similar to those of Router A, and are not
mentioned here.
Step 6 Verify the configuration.
Run the display multicast limit global command, and you can view the global configuration
of multicast CAC and related statistics on a router. Take Router A as an example.
<RouterA> display multicast limit global
Multicast limitation information of instance: public net
Global entries
: 20
Global threshold
: Global Used-Entries : 2
# Run the display multicast limit channel global command, and you can view the global CAC
configuration and related statistics of a specified channel on a router. Take Router A as an
example.
<RouterA> display multicast limit channel SDTV global
Multicast limitation information of instance: public net
----------------------------------------------------------------------Channel Program
Mode Entries threshold Used-Entries
----------------------------------------------------------------------SDTV
ASM
10
0
-----------------------------------------------------------------------
# Run the display multicast limit out-interface command, and you can view the total number
of entries that takes this interface as the outgoing interface. Take Router A as an example.
<RouterD> display multicast limit out-interface all
Multicast limitation information of instance: public net
All Channel:
------------------------------------------------------------------------------Interface
Entries Bandwidth(kbit/s) Used-Entries Used-Bandwidth(kbit/s)
-------------------------------------------------------------------------------
Issue 04 (2010-08-31)
9-13
Pos1/0/0
12
160000
0
0
-------------------------------------------------------------------------------
----End
Configuration Files
l
9-14
Issue 04 (2010-08-31)
pim sm
#
interface Pos4/0/0
undo shutdown
link-protocol ppp
ip address 10.1.4.1 255.255.255.0
pim sm
#
interface NULL0
#
ospf 100
area 0.0.0.0
network 10.1.4.0 0.0.0.255
network 10.1.3.0 0.0.0.255
network 10.1.2.0 0.0.0.255
network 10.1.1.0 0.0.0.255
#
return
l
Issue 04 (2010-08-31)
9-15
multicast routing-enable
#
multicast-channel
unspecified-channel deny
multicast limit 20
channel HDTV type ssm
multicast limit 12
group 232.0.0.0 mask 255.255.255.0 source 192.168.3.0
mask 255.255.255.0 per-bandwidth 4000
channel SDTV type asm
multicast limit 10
group 225.0.0.0 mask 255.255.255.0 per-bandwidth 3000
#
interface GigabitEthernet2/0/0
undo shutdown
ip address 192.168.2.1 255.255.255.0
pim sm
igmp enable
igmp version 3
igmp limit 15
#
interface Pos1/0/0
undo shutdown
link-protocol ppp
ip address 10.1.2.1 255.255.255.0
pim sm
#
interface NULL0
#
ospf 100
area 0.0.0.0
network 192.168.2.0 0.0.0.255
network 10.1.2.0 0.0.0.255
#
igmp
limit 20
#
return
l
9-16
Issue 04 (2010-08-31)
pim sm
#
interface NULL0
#
ospf 100
area 0.0.0.0
network 192.168.2.0 0.0.0.255
network 10.1.3.0 0.0.0.255
#
igmp
limit 20
#
return
Issue 04 (2010-08-31)
9-17
10
Issue 04 (2010-08-31)
10-1
Each multicast routing protocol has its routing table, such as PIM routing table.
The multicast routing information of each multicast routing protocol forms a general
multicast routing table.
The multicast routing table resides in the multicast route management module. It is
composed of (S, G) entries. (S, G) indicates that S sends multicast data to G. If the multicast
route management module supports multiple multicast protocols, the routing table contains
multicast routes that are generated by the protocols. The routing entries are copied to the
forwarding table.
The multicast forwarding table controls the forwarding of multicast data packets.
The multicast forwarding table guides the forwarding of multicast data packets. It remains
consistent with the multicast routing table.
To ensure that multicast data is transmitted along the correct path, multicast routing protocols
use the Reverse Path Forwarding (RPF) to create multicast routing entries.
The system performs RPF check based on the following types of routes:
l
Unicast routes
The unicast routing table collects the shortest paths to each destination.
MBGP routes
The MBGP routing table provides multicast routing information.
MIGP routes
The MIGP routing table provides the routing information calculated based on physical
interfaces of the TE tunnel to guide the forwarding of multicast packets.
10-2
Issue 04 (2010-08-31)
By default, the router chooses the route with the largest next-hop address.
According to the longest match, the router selects the route longest matching the address
of the source of the packet.
Load splitting is configured among equal-cost routes. Performing load splitting of multicast
traffic according to different policies can optimize network traffic transmission in the
scenario where multiple multicast data flows exist.
There are five multicast load splitting policies: stable-preferred, balance-preferred, source
address-based, group address-based, and source and group addresses-based. The five load
splitting policies are mutually exclusive. In addition, you can configure load splitting
weights on the interfaces to achieve unbalanced multicast load splitting.
Setting the forwarding TTL threshold on an interface to limit the distance to which a packet
is forwarded.
Issue 04 (2010-08-31)
10-3
number of entries according to the actual networking and service performance can avoid
router faults caused by excessive entries.
l
The mtrace command can be used to trace multicast path on a specified multicast VPN network to maintain
multicast VPN services and locate faults on the network.
The ping multicast command is used to check whether a group is reachable and to implement
the following functions:
l
To generate multicast traffic and trigger the creation of multicast routing entries: Based
on multicast routing information, you can check whether a protocol runs normally,
determine whether the network can carry multicast services, or test the forwarding
performance.
To check the members of related groups in the network: Based on the ICMP-EchoReply messages received from destination hosts, the router on which the command is
used checks the members of the groups in the network, and calculates response time
and the TTL from the router to members. You can run the command repeatedly in a
certain interval to calculate the network delay and route flapping.
The mtrace command can be used to trace the following paths and output the hop information:
l
You can ping multicast addresses by using the Network Quality Analysis (NQA) test instances or related
commands. For detailed configurations of NQA test instances, refer to the HUAWEI NetEngine80E/40E
Router Configuration Guide - System Management NQA Configuration.
10-4
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before configuring a static multicast route, complete the following tasks:
l
Data Preparation
To configure a static multicast route, you need the following data.
No.
Data
10-5
Context
CAUTION
When configuring a static multicast route, configure the outgoing interface through the command
if the next hop is in the point-to-point format. If the next hop is not in the point-to-point format,
you must use the next hop.
Do as follows on the multicast router:
Procedure
Step 1 Run:
system-view
protocol [ process-id ]: specifies that the matching route must be present in the specified
unicast routing protocol. protocol specifies a unicast routing protocol. process-id specifies
the ID of a process.
route-policy policy-name: specifies the matching rule of the static multicast route.
rpf-nbr: specifies the next hop address that acts as the IP address of the RPF neighbor.
interface-type interface-number: specifies the type and the number of the outgoing interface.
The outgoing interface acts as the RPF interface.
preference preference: specifies the preference of the route. The greater the preference value
is, the lower the preference is.
order order-num: specifies the configuration order of routes on the same network segment.
----End
----End
10-6
Issue 04 (2010-08-31)
By default, the router chooses the route with the largest next-hop address.
According to the longest match rules, you can configure the router to select the route with
the destination address that longest matches the address of the source of the packet.
You can configure load splitting among these routers. Performing load splitting of multicast
traffic according to different policies can optimize network traffic when multiple multicast
data flows exist.
Pre-configuration Tasks
Before configuring the multicast routing policy, complete the following tasks:
l
Data Preparation
To configure the multicast routing policy, you need the following data.
No.
Data
Issue 04 (2010-08-31)
10-7
Context
CAUTION
Configurations related to VPN instances are applicable only to the PE router. When configuring
the longest match of multicast routes for a VPN instance on a PE, perform the configuration in
the VPN instance. In other cases, the longest match is configured in the public network instance.
By default, routes are selected in the order of routing entries.
Do as follows on the multicast router:
Procedure
l
Run:
system-view
Run:
multicast longest-match
VPN instance
1.
Run:
system-view
Run:
ip vpn-instance vpn-instance-name
Run:
multicast longest-match
CAUTION
Configurations related to VPN instances are applicable only to the PE router. When configuring
load splitting among multicast routes for a VPN instance on a PE, perform the configuration in
the VPN instance. In other cases, load balancing among multicast routes is configured in the
public network instance.
10-8
Issue 04 (2010-08-31)
The multicast load splitting function extends multicast routing rules, which does not fully depend
on the RPF check. If multiple equal-cost optimal routes exist over the network, they all can be
used for multicast data forwarding and multicast traffic is load split among multiple equal-cost
routes.
By default, load splitting is not performed.
Do as follows on the multicast router router:
Procedure
l
Run:
system-view
Run:
multicast load-splitting { balance-preferred | stable-preferred | source
| group | source-group }
Multicast load balancing is configured. The parameters of the command are explained
as follows:
It is recommended to adopt a fixed IPv4 multicast load splitting policy based on the actual
networking. It is recommended to use the balance-preferred or stable-preferred policy.
balance-preferred or stable-preferred cannot be configured on the interface enabled with
PIM-DM.
VPN instance
1.
Run:
system-view
10-9
2.
Run:
ip vpn-instance vpn-instance-name
Run:
multicast load-splitting { balance-preferred | stable-preferred | source
| group | source-group }
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
display multicast routing-table [ group-address [ mask { group-mask | group-masklength } ] | source-address [ mask { source-mask | source-mask-length } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } ] * [ outgoing-interface-number [ number ] ]
----End
Configuring the multicast forwarding boundary to form a close multicast forwarding area.
The interface configured with a forwarding boundary of a multicast group cannot send or
receive packets of the multicast group.
Pre-configuration Tasks
Before configuring the multicast forwarding scope, complete the following tasks:
Issue 04 (2010-08-31)
10-11
Data Preparation
To configure the multicast forwarding scope, you need the following data.
No.
Data
Group address, mask, and mask length of the multicast forwarding boundary
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
10-12
Issue 04 (2010-08-31)
display multicast routing-table [ group-address [ mask { group-mask | group-masklength } ] | source-address [ mask { source-mask | source-mask-length } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } ] * [ outgoing-interface-number [ number ] ]
Run the display multicast [ vpn-instance vpn-instance-name | all-instance ] minimumttl [ interface-type interface-number ] command to check the forwarding TTL threshold on
an interface.
----End
Issue 04 (2010-08-31)
10-13
Pre-configuration Tasks
Before configuring control parameters of the multicast forwarding table, complete the following
tasks:
l
Data Preparation
To configure control parameters of the multicast forwarding table, you need the following data.
No.
Data
Matching policy, router sequence, and route preference of the multicast routes
10-14
Issue 04 (2010-08-31)
Context
CAUTION
Configurations related to VPN instances are applicable only to the PE router. When configuring
the maximum number of entries in the forwarding table for a VPN instance on a PE, perform
the configuration in the VPN instance. In other cases, the maximum number of entries in the
forwarding table is configured in the public network instance.
By default, the maximum number supported by the system is used.
Do as follows on the multicast router:
Procedure
l
Run:
system-view
Run:
multicast forwarding-table route-limit limit
VPN instance
1.
Run:
system-view
Run:
ip vpn-instance vpn-instance-name
Run:
multicast forwarding-table route-limit limit
Issue 04 (2010-08-31)
10-15
Context
CAUTION
This configuration becomes valid only after the reset multicast forwarding-table command is
used. Multicast services are interrupted after you run the reset multicast forwarding-table
command. So, confirm the action before you use the command.
Configurations related to the VPN instance are applicable only to the PE router. When
configuring the maximum number of downstream nodes for a forwarding entry in a VPN instance
on a PE, perform the configuration in the VPN instance. In other cases, the maximum number
of entries in the forwarding table is configured in the public network instance.
Do as follows on the multicast router:
Procedure
l
Run:
system-view
Run:
multicast forwarding-table downstream-limit limit
VPN instance
1.
Run:
system-view
Run:
ip vpn-instance vpn-instance-name
Run:
multicast forwarding-table downstream-limit limit
10-16
Issue 04 (2010-08-31)
Run the display multicast [ vpn-instance vpn-instance-name | all-instance ] forwardingtable [ group-address [ mask { group-mask | group-mask-length } ] | source-address
[ mask { source-mask | source-mask-length } ] | incoming-interface { interface-type
interface-number | register } | outgoing-interface { { include | exclude | match }
{ interface-type interface-number | register |none } } | statistics | slot slot-number ] *
command to check the multicast forwarding table.
----End
Procedure
l
Run the ping multicast [ -c count | -h ttl-value | -m time | -p pattern | -q | -s packetsize | t timeout | -tos tos-value | -v ] * host command in any view to ping a common group address.
----End
Issue 04 (2010-08-31)
10-17
When checking the RPF path or multicast path from a source to a destination host, run the mtrace querypolicy [ acl-number ] command on the router connected to hosts to configure the filtering policy for queriers.
The ACL defines the address scope of reliable queriers. Based on the ACL, the last-hop router refuses the
IGMP-Tracert-Query messages sent by illegal queriers. Note the following when using this command:
l
This command is valid only for the last-hop router, and the querier is not the last-hop router.
This command is used to filter only the IGMP-Tracert-Query message encapsulated in a unicast IP
packet.
This command is not applicable to the trace that is initiated by the local querier.
When a fault occurs during data transmission, you can run the following commands in any view
to check RPF paths and multicast paths.
Procedure
l
Run the mtrace [ -ur resp-dest | -l [ stat-times ] [ -st stat-int ] | -m max-ttl | -q nqueries | ts ttl | -tr ttl | -v | -w timeout | -vpn-instance vpn-name ] * source source-address command
in any view to check the RPF path from a source to a querier.
Run the mtrace -g group [ { -mr | -ur resp-dest } | -l [ stat-times ] [ -st stat-int ] | -m maxttl | -q nqueries | -ts ttl | -tr ttl | -v | -w timeout | -vpn-instance vpn-name ] * source sourceaddress command in any view to check the multicast path from a source to a querier.
Run the mtrace [ -gw last-hop-router | -d ] -r receiver [ -ur resp-dest | -a source-ipaddress | -l [ stat-times ] [ -st stat-int ] | -m max-ttl | -q nqueries | -ts ttl | -tr ttl | -v | -w
timeout | -vpn-instance vpn-name ] * source source-address command in any view to
check the RPF path from a source to a destination host.
Run the mtrace [ -gw last-hop-router | -b | -d ] -r receiver -g group [ { -mr | -ur respdest } | -a source-ip-address | -l [ stat-times ] [ -st stat-int ] | -m max-ttl | -q nqueries | -ts
ttl | -tr ttl | -v | -w timeout | -vpn-instance vpn-name ] * source source-address command
in any view to check the multicast path from a source to a destination host.
----End
CAUTION
The reset command clears the entries in the multicast forwarding table or the multicast routing
table. It may result in abnormal multicast information forwarding. After the routing entries in
the multicast routing table are cleared, the corresponding forwarding entries corresponding to
the public network instance or VPN instance are also cleared. So, confirm the action before you
use the command.
10-18
Issue 04 (2010-08-31)
Procedure
l
Run the following commands to clear the forwarding entries in the multicast forwarding
table.
Run the following commands to clear the routing entries in the multicast routing table.
----End
Procedure
l
Run the display multicast [ vpn-instance vpn-instance-name | all-instance ] forwardingtable [ group-address [ mask { group-mask | group-mask-length } ] | source-address
[ mask { source-mask | source-mask-length } ] | incoming-interface { interface-type
interface-number | register } | outgoing-interface { { include | exclude | match }
{ interface-type interface-number | register | none } } | statistics | slot slot-number ] *
command in any view to check the multicast forwarding table.
Run the display multicast [ vpn-instance vpn-instance-name | all-instance ] minimumttl [ interface-type interface-number ] command in any view to check the minimum TTL
value when a multicast data packet is forwarded by an interface.
Run the following commands in any view to check the multicast routing table.
Issue 04 (2010-08-31)
display multicast routing-table [ group-address [ mask { group-mask | group-masklength } ] | source-address [ mask { source-mask | source-mask-length } ] | incominginterface { interface-type interface-number | register } | outgoing-interface
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
10-19
{ include | exclude | match } { interface-type interface-number | vpn-instance vpninstance-name | register | none } ] * [ outgoing-interface-number [ number ] ]
l
----End
10-20
Issue 04 (2010-08-31)
Figure 10-1 Networking diagram for changing static multicast routes to RPF routes
RouterC
POS3/0/0
12.1.1.2/24
POS3/0/0
12.1.1.1/24
RouterA
GE2/0/0
8.1.1.1/24
POS2/0/0
13.1.1.2/24
POS2/0/0
13.1.1.1/24
PIM-DM
POS1/0/0
9.1.1.1/24
POS1/0/0
9.1.1.2/24
8.1.1.2/24
7.1.1.2/24
Source
RouterB
GE3/0/0
7.1.1.1/24
Receiver
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Enable multicast on each router, PIM-DM on each interface, and IGMP on the interface
connected to hosts.
3.
Configure static multicast RPF routes on Router B, and specify Router C as the RPF
neighbor to the source.
Data Preparation
To complete the configuration, you need the following data:
l
Procedure
Step 1 Configure an IP address and a unicast routing protocol on each router.
# As shown in Figure 10-1, configure IP addresses and masks on the interfaces of each router.
OSPF is run on Router A, Router B, and Router C, and the three routers are able to update routes
Issue 04 (2010-08-31)
10-21
among them through the unicast routing protocol. The configuration procedure is not mentioned
here.
Step 2 Enable multicast on each router and PIM-DM on each interface
# Enable multicast on each router, PIM-DM on each interface, and IGMP on the interface
connected to hosts. The configurations on other routers are similar to that of Router B, and are
not mentioned here.
[RouterB] multicast routing-enable
[RouterB] interface pos 1/0/0
[RouterB-Pos1/0/0] pim dm
[RouterB-Pos1/0/0] quit
[RouterB] interface pos 2/0/0
[RouterB-Pos2/0/0] pim dm
[RouterB-Pos2/0/0] quit
[RouterB] interface gigabitethernet 3/0/0
[RouterB-GigabitEthernet3/0/0] pim dm
[RouterB-GigabitEthernet3/0/0] igmp enable
[RouterB-GigabitEthernet3/0/0] quit
# Run the display multicast rpf-info command on Router B to view the RPF information of
the source. You can find that the RPF route is a unicast route, and the RPF neighbor is Router
A. The display is as follows:
<RouterB]> display multicast rpf-info 8.1.1.2
VPN-Instance: public net
RPF information about source 8.1.1.2:
RPF interface: Pos1/0/0, RPF neighbor: 9.1.1.1
Referenced route/mask: 8.1.1.0/24
Referenced route type: unicast
Route selection rule: preference-preferred
Load splitting rule: disable
----End
Configuration Files
Configuration file of Router B
#
sysname RouterB
10-22
Issue 04 (2010-08-31)
#
multicast routing-enable
#
interface pos1/0/0
undo shutdown
link-protocol ppp
ip address 9.1.1.2 255.255.255.0
pim dm
#
interface pos2/0/0
undo shutdown
link-protocol ppp
ip address 13.1.1.1 255.255.255.0
pim dm
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 7.1.1.1 255.255.255.0
pim dm
igmp enable
#
ospf 1
area 0.0.0.0
network 7.1.1.0 0.0.0.255
network 9.1.1.0 0.0.0.255
network 13.1.1.0 0.0.0.255
#
ip rpf-route-static 8.1.1.0 255.255.255.0 13.1.1.2
#
return
Issue 04 (2010-08-31)
10-23
Figure 10-2 Networking diagram for connecting the RPF route through static multicast routes
PIM-DM
OSPF
Source1
10.1.3.2/24
GE2/0/0
10.1.3.1/24
RouterB
GE1/0/0
10.1.2.2/24
GE3/0/0
10.1.4.1/24
GE1/0/0
10.1.2.1/24
GE3/0/0
10.1.4.2/24
RouterA
GE1/0/0
10.1.5.1/24
RouterC
GE2/0/0
10.1.1.1/24
Source2
10.1.5.2/24
Receiver
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Enable multicast on each router, PIM-DM on each interface, and IGMP on the interface
connected to hosts.
3.
Data Preparation
To complete the configuration, you need the following data:
10-24
IP address of Source 2.
RPF interface through which Router B connects to Source2 is GE 3/0/0, and the RPF
neighbor is Router A.
RPF interface through which Router C connects to Source2 is GE 1/0/0, and the RPF
neighbor is Router B.
Issue 04 (2010-08-31)
Procedure
Step 1 Configure an IP address and a unicast routing protocol on each router.
# As shown in Figure 10-2, configure IP addresses and masks of the interfaces on each router.
Router B and Router C belong to the same OSPF area, and the two routers are able to update
routes among them through the unicast routing protocol. The configuration procedure is not
mentioned here.
Step 2 Enable multicast on each router and PIM-DM on each interface
# Enable multicast on each router, enable PIM-DM on each interface, and enable IGMP on the
interface connected to hosts.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim dm
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface gigabitethernet 3/0/0
[RouterA-GigabitEthernet3/0/0] pim dm
[RouterB] multicast routing-enable
[RouterB] interface gigabitethernet 1/0/0
[RouterB-GigabitEthernet1/0/0] pim dm
[RouterB-GigabitEthernet1/0/0] quit
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] pim dm
[RouterB-GigabitEthernet2/0/0] quit
[RouterB] interface gigabitethernet 3/0/0
[RouterB-GigabitEthernet3/0/0] pim dm
[RouterB-GigabitEthernet3/0/0] quit
[RouterC] multicast routing-enable
[RouterC] interface gigabitethernet 1/0/0
[RouterC-GigabitEthernet1/0/0] pim dm
[RouterC-GigabitEthernet1/0/0] quit
[RouterC] interface gigabitethernet 2/0/0
[RouterC-GigabitEthernet2/0/0] pim dm
[RouterC-GigabitEthernet2/0/0] igmp enable
[RouterC-GigabitEthernet2/0/0] quit
# Source 1 (10.1.3.2/24) and Source 2 (10.1.5.2/24) send multicast data to the multicast group
G (225.1.1.1). The receiver joins G. The receiver can then receive the multicast data sent by
Source 1, but cannot receive the multicast data sent by Source 2.
# Run the display multicast rpf-info 10.1.5.2 command on Router B and Router C. If there is
no display, it indicates that Router B and Router C have no RPF route to Source 2.
Step 3 Configure a static multicast route
# Configure a static multicast RPF route on Router B and configure Router A as the RPF neighbor
to Source 2.
[RouterB] ip rpf-route-static 10.1.5.0 255.255.255.0 10.1.4.2
# Configure a static multicast RPF route on Router C, and configure Router B as the RPF
neighbor to Source 2.
[RouterC] ip rpf-route-static 10.1.5.0 255.255.255.0 10.1.2.2
Issue 04 (2010-08-31)
10-25
# Run the display pim routing-table command to view the routing table. Router C has the
multicast entry of Source 2. The receiver can receive the multicast data from Source 2.
<RouterC> display pim routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 2 (S, G) entry
(*, 225.1.1.1)
Protocol: pim-dm, Flag: WC
UpTime: 03:54:19
Upstream interface: NULL
Upstream neighbor: NULL
RPF prime neighbor: NULL
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-dm, UpTime: 01:38:19, Expires: never
(10.1.3.2, 225.1.1.1)
Protocol: pim-dm, Flag: ACT
UpTime: 00:00:44
Upstream interface: GigabitEthernet1/0/0
Upstream neighbor: 10.1.2.2
RPF prime neighbor: 10.1.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-dm, UpTime: 00:00:44, Expires: never
(10.1.5.2, 225.1.1.1)
Protocol: pim-dm, Flag: ACT
UpTime: 00:00:44
Upstream interface: GigabitEthernet1/0/0
Upstream neighbor: 10.1.2.2
RPF prime neighbor: 10.1.2.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-dm, UpTime: 00:00:44, Expires: never
----End
Configuration Files
l
10-26
Issue 04 (2010-08-31)
undo shutdown
ip address 10.1.4.2 255.255.255.0
pim dm
#
ospf 1
area 0.0.0.0
network 10.1.5.0 0.0.0.255
network 10.1.4.0 0.0.0.255
#
return
l
Issue 04 (2010-08-31)
10-27
Multicast
Router
Unicast
Router
POS1/0/0
10.1.1.1/24
RouterA GE2/0/0
9.1.1.1/24
POS1/0/0
10.1.1.1/24
POS2/0/0
14.1.1.1/24
RouterC
9.1.1.2/24
Source
Multicast
Router
POS3/0/0
14.1.1.2/24
GE2/0/0 RouterB
8.1.1.1/24
8.1.1.2/24
Receiver
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Enable multicast on Router A and Router B, PIM-SM on each interface, and IGMP on the
interface connected to hosts.
5.
Configure a static multicast RPF route on Router B and specify Router A as the RPF
neighbor.
Data Preparation
To complete the configuration, you need the following data:
10-28
Issue 04 (2010-08-31)
Procedure
Step 1 Configure an IP address for each interface.
# Configure an IP address and mask for each interface as shown in Figure 10-3. The
configuration details are not mentioned here.
Step 2 Establish a GRE tunnel between Router A and Router B.
# Configure Router A.
[RouterA] interface tunnel 1/0/1
[RouterA-Tunnel1/0/1] ip address 20.1.1.1 24
[RouterA-Tunnel1/0/1] tunnel-protocol gre
[RouterA-Tunnel1/0/1] source 10.1.1.1
[RouterA-Tunnel1/0/1] destination 14.1.1.2
[RouterA-Tunnel1/0/1] quit
# Configure Router B.
[RouterB] interface tunnel 1/0/1
[RouterB-Tunnel1/0/1] ip address 20.1.1.2 24
[RouterB-Tunnel1/0/1] tunnel-protocol gre
[RouterB-Tunnel1/0/1] source 14.1.1.2
[RouterB-Tunnel1/0/1] destination 10.1.1.1
[RouterB-Tunnel1/0/1] quit
Step 4 Enable multicast on Router A and Router B and enable PIM-DM on each interface.
# Enable multicast on Router A and Router B, enable PIM-DM on each interface, and enable
IGMP on the interface connected to hosts.
# Configure Router A.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet2/0/0
[RouterA-GigabitEthernet2/0/0] pim dm
Issue 04 (2010-08-31)
10-29
[RouterA-GigabitEthernet2/0/0] quit
[RouterA] interface pos 1/0/0
[RouterA-Pos1/0/0] pim dm
[RouterA-Pos1/0/0] quit
[RouterA] interface tunnel 1/0/1
[RouterA-Tunnel1/0/1] pim dm
[RouterA-Tunnel1/0/1] quit
# Configure Router B.
[RouterB] multicast routing-enable
[RouterB] interface pos 3/0/0
[RouterB-Pos3/0/0] pim dm
[RouterB-Pos3/0/0] quit
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] pim dm
[RouterB-GigabitEthernet2/0/0] igmp enable
[RouterB-GigabitEthernet2/0/0] quit
[RouterB] interface tunnel 1/0/1
[RouterB-Tunnel1/0/1] pim dm
[RouterB-Tunnel1/0/1] quit
----End
Configuration Files
l
10-30
Issue 04 (2010-08-31)
10-31
equal-cost routes for transmission. In addition, it is required to configure multicast load splitting
weights for different interfaces to achieve unbalanced multicast load splitting.
Networking Requirements
Multicast route selection is based on the RPF check, and the route selection policy depends on
unicast routes. The selected unique route is used to guide the forwarding of multicast data. If
the volume of multicast traffic is excessively large on a network, the network may be congested
and multicast services may be affected. Multicast load splitting extends the rules of multicast
route selection and makes multicast route selection not completely depend on the RPF check.
When there are multiple equal-cost optimal routes on a network and the routes can be used to
forward multicast data, multicast load splitting can be performed among the routes for multicast
traffic.
Currently, multicast load splitting is classified into multicast source-based load splitting,
multicast group-based load splitting, and multicast source- and multicast group-based load
splitting. These types of multicast load splitting cannot meet the requirements of multicast
splitting in all scenarios. In the case that multicast routing entries and network configurations
are stable, RPF interfaces and RPF neighbors keep unchanged. When the number of entries is
excessively small, balanced load splitting cannot be achieved.
Stable-preferred load splitting consummates the preceding types of multicast load splitting. As
shown in Figure 10-4, there are three equal-cost routes between Router E connected to Host A
and the multicast source, and stable-preferred load splitting is configured on Router E. Therefore,
entries can be evenly distributed on the equal-cost routes and balanced load splitting can be
implemented among the equal-cost routes.
If the forwarding capabilities and the severities of traffic congestion of the three equal-cost routes
on Router E are different, balanced load splitting cannot meet network requirements. In this case,
you need to configure unbalanced load splitting on Router E, and set different load splitting
weights on the upstream interfaces of Router E to change the number of entries distributed to
the equal-cost routes. Thus, you can flexibly control the number of entries distributed on the
equal-cost routes.
10-32
Issue 04 (2010-08-31)
PIM-SM
Source
GE1/0/0
RouterA
PO
0/0
1
S1/ RouterB S2/0/0 POS1/0
2/0/
O
S
P
/1
PO
POS2/0/2
POS1/0/2
POS
POS2/0/0
0/3
2/0/ POS1/0/0
S1/
3
PO
RouterC
Loopback0
POS
1/0/
0
GE2/0/0
RouterE
0/0
S2/
PO
HostA
RouterD
Device
Interface
IP Address
Device
Interface
IP Address
Router A
GE1/0/0
10.110.1.1/24
Router C
POS1/0/0
192.168.2.2/24
POS2/0/1
192.168.1.1/24
POS2/0/0
192.168.5.1/24
POS2/0/2
192.168.2.1/24
POS1/0/0
192.168.3.2/24
POS2/0/3
192.168.3.1/24
POS2/0/0
192.168.6.1/24
LoopBack0
1.1.1.1/32
POS1/0/1
192.168.4.2/24
POS1/0/0
192.168.1.2/24
POS1/0/2
192.168.5.2/24
POS2/0/0
192.168.4.1/24
POS1/0/3
192.168.6.2/24
GE2/0/0
10.110.2.1/24
Router B
Router D
Router E
Configuration Roadmap
The configuration roadmap is as follows:
l
Configure IS-IS to implement interworking among routers and ensure that route costs are
equal.
Enable multicast on routers, enable PIM-SM on each interface, and set the loopback
interface on Router A as an RP.
Host A requires to receive data from some multicast groups for a long period. Therefore,
configure the interfaces at the host side of Router E to join the multicast groups statically
in batches.
Issue 04 (2010-08-31)
10-33
Host A requires to receive data from a new multicast group. Therefore, configure a multicast
load splitting weight for each upstream interface on Router E to achieve unbalanced
multicast load splitting.
Data Preparation
To complete the configuration, you need the following data:
l
Address of the multicast group that interfaces at the host side of Router E statically join in
batches
Procedure
Step 1 Assign an IP address to each interface on the routers according to Figure 10-4. The detailed
configuration procedure is not mentioned here.
Step 2 Configure IS-IS to implement interworking among routers and ensure that route costs are equal.
The detailed configuration procedure is not mentioned here.
Step 3 Enable multicast on all routers and enable PIM-SM on each interface.
# Configure Router A. Configurations on Routers B, C, D, and E are similar to those on
Router A. Therefore, configurations on these Routers are not mentioned here.
[RouterA] multicast routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim sm
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface pos 2/0/1
[RouterA-Pos2/0/1] pim sm
[RouterA-Pos2/0/1] quit
[RouterA] interface pos 2/0/2
[RouterA-Pos2/0/2] pim sm
[RouterA-Pos2/0/2] quit
[RouterA] interface pos 2/0/3
[RouterA-Pos2/0/3] pim sm
[RouterA-Pos2/0/3] quit
[RouterA] interface loopback 0
[RouterA-LoopBack0] pim sm
[RouterA-LoopBack0] quit
Step 6 Configure the interfaces at the host side of Router E to join the multicast groups statically in
batches.
# Configure GE 2/0/0 to join multicast groups from 225.1.1.1 to 225.1.1.3 statically.
10-34
Issue 04 (2010-08-31)
Upstream interface
Pos1/0/3
Pos1/0/3
Pos1/0/2
Pos1/0/2
Pos1/0/1
Pos1/0/1
NDwnstrms
1
1
1
1
1
1
You can find that (*, G) and (S, G) entries are equally distributed to three equal-cost routes, with
the upstream interfaces being POS 1/0/3, POS 1/0/2, and POS 1/0/1 respectively.
NOTE
The load splitting algorithm processes (*, G) and (S, G) entries separately and the process rules are the
same.
Step 8 Configure multicast load splitting weights for different upstream interfaces of Router E to
achieve unbalanced multicast load splitting.
# Set the multicast load splitting weight on POS 1/0/1 to 2.
[RouterE] interface pos 1/0/1
[RouterE-Pos1/0/1] multicast load-splitting weight 2
[RouterE-Pos1/0/1] quit
Step 9 Configure the interfaces at the host side of Router E to join new multicast groups statically in
batches.
# Configure GE 2/0/0 to join multicast groups from 225.1.1.4 to 225.1.1.9 statically.
[RouterE] interface gigabitethernet 2/0/0
[RouterE-GigabitEthernet2/0/0] igmp static-group 225.1.1.4 inc-step-mask 32 number
6
[RouterE-GigabitEthernet2/0/0] quit
Issue 04 (2010-08-31)
Upstream interface
NDwnstrms
10-35
Pos1/0/3
Pos1/0/3
Pos1/0/2
Pos1/0/2
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/1
Pos1/0/2
Pos1/0/1
Pos1/0/1
Pos1/0/2
Pos1/0/1
Pos1/0/1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
The upstream interfaces of existent (*, G) and (S, G) entries keep unchanged. Since the multicast
load splitting weight of POS 1/0/1 is higher than that of POS 1/0/2, the newly generated entries
with the upstream interface being POS 1/0/1 are more than those with the upstream interface
being POS 1/0/2. The multicast load splitting weight of POS 1/0/3 is 0, which indicates that this
interface does not take part in load splitting of new entries.
----End
Configuration Files
l
10-36
Issue 04 (2010-08-31)
isis enable 1
pim sm
#
pim
c-bsr LoopBack0
c-rp LoopBack0
#
return
l
Issue 04 (2010-08-31)
10-37
undo shutdown
ip address 192.168.3.2 255.255.255.0
isis enable 1
pim sm
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ip address 192.168.6.1 255.255.255.0
isis enable 1
pim sm
#
return
l
Fault Symptom
A router is not configured with any dynamic routing protocol. Its physical status and the status
of the link layer protocol are UP. The static route of the router, however, fails.
10-38
Issue 04 (2010-08-31)
Fault Analysis
The possible causes are as follows:
l
The static route is not configured or updated correctly so that it does not exist in the multicast
routing table.
An optimal route has been received. This may also lead to static route failure.
Troubleshooting
1.
Check whether the static route exists in the multicast routing table. Run the display
multicast routing-table static command to check the multicast static routing table and to
ensure that the corresponding route is configured correctly and exists in the multicast
configuration table.
2.
Check the interface type of the next hop of the multicast static route. If the interface is not
a point-to-point one, the outgoing interface must be configured in the format of next hop
address.
3.
Check whether a static multicast route matches a specified routing protocol. If the protocol
is specified when the static multicast route is configured, you can run the display ip
routing-table command to check whether the route is added for the specified protocol.
4.
Check whether a static multicast route matches a specified routing policy. If the routing
policy is specified when the static multicast route is configured, you can run the display
route-policy command to check the configured routing policy.
Issue 04 (2010-08-31)
10-39
11 MLD Configuration
11
MLD Configuration
Issue 04 (2010-08-31)
11-1
11 MLD Configuration
MLDv1
MLDv1 is defined in RFC 2710, and is derived from IGMPv2. MLDv1 supports the AnySource Multicast (ASM) model. With the help of SSM mapping, MLDv1 can support the
Source-Specific Multicast (SSM) model.
MLDv2
MLDv2 is defined in RFC 3810, and is derived from IGMPv3. MLDv2 supports the ASM
and SSM models.
Issue 04 (2010-08-31)
11 MLD Configuration
SSM Mapping
For MLDv1 hosts, you can configure SSM mapping to build a multicast network of the SSM
model.
Limiting the total number of MLD group memberships on a router: The total number of
MLD group memberships created by a router cannot exceed the limit value. When the total
number of MLD group memberships created by a router exceeds the limit value, no MLD
entry can be created.
Limiting the total number of MLD group memberships in a single instance: The total
number of MLD group memberships related to an instance cannot exceed the limit value.
When the total number of MLD group memberships related to an instance reaches the limit
value, no MLD entry can be created.
Limiting the total number of MLD group memberships on an interface: The total number
of MLD group memberships created on an interface cannot exceed the limit value. When
the total number of MLD group memberships created on an interface reaches the limit
value, no MLD entry can be created.
11-3
11 MLD Configuration
Pre-configuration Tasks
Before configuring basic MLD functions, configure a unicast routing protocol to interconnect
the entire multicast domain.
Data Preparation
To configure basic MLD functions, you need the following data.
No.
Data
MLD version
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
11-4
Issue 04 (2010-08-31)
11 MLD Configuration
CAUTION
Ensure that all MLD router interfaces in the same network segment are configured with the same
MLD version. Otherwise, faults may occur.
This configuration is optional. By default, MLDv2 is adopted.
Do as follows on the router connected to hosts:
Procedure
Step 1 Run:
system-view
11-5
11 MLD Configuration
NOTE
This configuration is optional. By default, the interface does not statically join any group.
Procedure
Step 1 Run:
system-view
The interface is configured to statically join a single multicast group or multiple multicast groups
in batches. After the interface statically joins the multicast groups, the router considers that the
members of the multicast groups exist on the network segment where the interface resides.
----End
This configuration is optional. By default, the interface can join any group.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
11 MLD Configuration
Run the display mld group [ ipv6-group-address | interface interface-type interfacenumber ] * [ static ] [ verbose ] command to check information on members of an MLD
multicast group.
----End
Pre-configuration Tasks
Before configuring options of an MLD packet, complete the following tasks:
l
Data Preparation
To configure options of an MLD packet, you need the following data.
No.
Data
11-7
11 MLD Configuration
Context
Do as follows on the router connected to hosts:
This configuration is optional. By default, MLD packets sent by routers carry the Router-Alert
option, but the routers do not check the Router-Alert option. That is, the routers process all the
received MLD packets, including those without the Router-Alert option.
NOTE
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
mld
Run:
require-router-alert
Run:
send-router-alert
The Router-Alert option is set in the header of the MLD packet to be sent.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
mld require-router-alert
Run:
mld send-router-alert
11-8
Issue 04 (2010-08-31)
11 MLD Configuration
The Router-Alert option is set in the header of the MLD packet to be sent.
----End
----End
CAUTION
A great many of MLD interfaces exist in the network and these MLD interfaces are mutually
restricted. Ensure that all MLD parameters of all MLD router interfaces on the same network
segment are identical. Otherwise, the network may be faulty.
The MLD querier periodically sends MLD Query messages on the share network connected to
receivers. When receiving a Report message from a member, the routers on the shared network
refresh information about the member relationship.
If non-queriers do not receive any query message within the Keepalive period of the MLD
querier, the querier is considered faulty, and a new round of the querier election is triggered
automatically.
In the application of ADSL dial-up access, one host corresponds to a port. A querier, therefore,
corresponds to only one receiver host. When a receiver host switches among multiple groups
such as TV channels, you can enable the fast leave mechanism on the querier.
Pre-configuration Tasks
Before configuring MLD query control, complete the following tasks:
l
Issue 04 (2010-08-31)
11-9
11 MLD Configuration
Data Preparation
To configure MLD query control, you need the following data.
No.
Data
Robustness variable
The interval for sending MLD group-specific Query messages and group/sourcespecific Query messages
CAUTION
In the actual configuration, ensure that the interval for sending general Query messages is greater
than the maximum response time and is smaller than the Keepalive time of the other MLD
queriers.
Do as follows on the router connected to hosts:
NOTE
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
mld
11-10
Issue 04 (2010-08-31)
11 MLD Configuration
Run:
timer query interval
Run:
robust-count robust-value
When a router starts, the router sends general query messages for the number of
robust-value times. The sending interval is 1/4 of the interval for sending MLD
general query messages.
When a router receives a Leave message, the router sends MLD last listener query
messages for the number of robust-value times.
The greater the robustness variable is, the longer the timeout period of the group is.
5.
Run:
max-response-time interval
Run:
timer other-querier-present interval
The interval for the Keepalive period of the other MLD queriers is set.
By default, the formula used to calculate the Keepalive period of the other queriers
is: the Keepalive period of the other MLD queriers = robustness variable x the interval
for sending MLD general query messages + 1/2 x the MLD maximum response time.
When default values of robustness variable, the interval for sending MLD general
query messages, and maximum response time are used, the Keepalive period of the
other MLD queriers is 255 seconds.
7.
Run:
lastlistener-queryinterval interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
11-11
11 MLD Configuration
mld timer query interval
Run:
mld max-response-time interval
Run:
mld timer other-querier-present interval
Run:
mld robust-count robust-value
Run:
mld lastlistener-queryinterval interval
The interval for sending MLD last listener query messages is set.
8.
Run:
mld prompt-leave [ group-policy { basic-acl6-number | acl6-name acl6name } ]
----End
Issue 04 (2010-08-31)
11 MLD Configuration
Hosts and routers run MLDv2. When a host joins a group, the host specifies the source
from which the host wants to receive data.
If some hosts in the network segment can run only MLDv1, the hosts cannot specify the
sources from which they want to receive data when joining related groups. In this case, you
need to configure SSM mapping and static mapping rules on the router. As a result, the (*,
G) information carried in the Report message is mapped to the (G, INCLUDE, (S1, S2, ...))
information.
Pre-configuration Tasks
Before configuring SSM mapping, complete the following tasks:
l
Data Preparation
To configure SSM mapping, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
11-13
11 MLD Configuration
Step 3 Run:
mld enable
MLD is enabled.
Step 4 Run:
mld version 2
Procedure
Step 1 Run:
system-view
ipv6-source-address: specifies the address of the source that sets up the mapping relationship
with the group.
----End
11-14
Issue 04 (2010-08-31)
11 MLD Configuration
Run the display mld group [ ipv6-group-address | interface interface-type interfacenumber ] * ssm-mapping [ verbose ] to check information about a source/group-specific
address.
Run the display mld ssm-mapping group [ ipv6-group-address ] command to check SSM
mapping rules of a specified group address.
----End
If the MLD limit function is required to be configured globally, for a single instance, and for an interface
on the same router, it is recommended that the limits on the number of global MLD group memberships,
the number of MLD group memberships in the single instance, and the number of MLD group memberships
on the interface should be in descending order.
Issue 04 (2010-08-31)
11-15
11 MLD Configuration
Pre-configuration Tasks
Before configuring the MLD limit function, complete the following task:
l
Data Preparation
To configure the MLD limit function, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
11 MLD Configuration
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
If except is not specified in the command, the router is limited by the maximum number of MLD entries
when creating the entries for all the groups or source/groups.
Before specifying except, you need to configure the corresponding ACl. Then, the interface filters the
received MLD Join messages according to the ACL. The number of entries that are filtered according to
the ACL is not limited by the maximum number of MLD entries.
----End
Issue 04 (2010-08-31)
11-17
11 MLD Configuration
Run the following commands to check information about the members of an MLD multicast
group.
# Run the display mld interface command to view the configuration and running status
of MLD on the router interface. The display information is as follows:
<RouterA> display mld interface gigabitethernet 1/0/0
GigabitEthernet1/0/0(FE80::200:5EFF:FE66:5100):
MLD is enabled
Current MLD version is 1
MLD state: up
MLD group policy: none
MLD limit: 30
Value of query interval for MLD (negotiated): 125 s
Value of query interval for MLD (configured): 125 s
Value of other querier timeout for MLD: 0 s
Value of maximum query response time for MLD: 10 s
Querier for MLD: FE80::200:5EFF:FE66:5100 (this router)
From the display, you can see the maximum number of MLD group members on GE1/0/0
of Router A.
----End
CAUTION
The MLD groups that an interface dynamically joins are deleted after you run the reset mld
group or the reset mld group ssm-mapping command. Receivers may not receive multicast
information normally. So, confirm the action before you use the command.
11-18
Issue 04 (2010-08-31)
11 MLD Configuration
Procedure
l
Run the following commands in the user view to clear the MLD groups that the interface
dynamically joins (not including the MLDv1 group in the SSM range).
reset mld group interface interface-type interface-number { all | ipv6-groupaddress [ ipv6-group-mask-length ] [ ipv6-source-address [ ipv6-source-masklength ] ] }
Run the following commands in the user view to clear MLDv1 groups in the SSM range.
reset mld group ssm-mapping interface interface-type interface-number { all | ipv6group-address [ ipv6-group-mask-length ] }
Run the reset mld control-message counters [ interface interface-type interfacenumber ] [ message-type { query | report } ] command in the user view to delete statistics
of MLD messages.
----End
Procedure
l
Run the display mld explicit-tracking [ interface interface-type interface-number [ hostaddress ipv6-host-address | group ipv6-group-address source ipv6-source-address ] ]
command in any view to check information about the MLD hosts on an interface.
Run the display mld group [ ipv6-group-address | interface interface-type interfacenumber ] * [ static ] [ verbose ] command in any view to check information about groups
on each interface.
Run the display mld group [ ipv6-group-address | interface interface-type interfacenumber ] * ssm-mapping [ verbose ] command in any view to check information about a
group configured with SSM mapping.
Issue 04 (2010-08-31)
11-19
11 MLD Configuration
Run the display mld ssm-mapping group [ ipv6-group-address ] command in any view
to check SSM mapping rules of a specified group address.
Run the display mld control-message counters [ interface interface-type interfacenumber ] [ message-type { query | report } ] command in any view to check the statistics
of MLD messages received by interfaces.
----End
RouterA
Receiver
N1
POS2/0/0
GE1/0/0
3000::12/64
HostB
RouterB
Leaf network
POS2/0/0
PIM network
GE1/0/0
3001::10/64
HostC
Receiver
RouterC
N2
POS2/0/0
GE1/0/0
3001::12/64
HostD
Ethernet
Configuration Roadmap
The configuration roadmap is as follows:
1.
11-20
Issue 04 (2010-08-31)
11 MLD Configuration
2.
3.
Data Preparation
To complete the configuration, the version number of MLD of routers and user hosts is required.
Procedure
Step 1 Enable multicast on routers and MLD and PIM-IPv6-SM on the interface at the host side.
# Enable multicast on Router A, enable MLD and PIM-IPv6-SM on GE 1/0/0, and set the MLD
version to 1.
<RouterA> system-view
[RouterA] multicast ipv6 routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim ipv6 sm
[RouterA-GigabitEthernet1/0/0] mld enable
[RouterA-GigabitEthernet1/0/0] mld version 1
[RouterA-GigabitEthernet1/0/0] quit
# The configurations of Router B and Router C are the same as the configuration of Router A,
and are not mentioned here.
Step 2 Verify the configuration.
# Run the display mld interface command to view the configuration and running status of MLD
on the router interface. MLD information on GE 1/0/0 of Router B is as follows:
<RouterB> display mld interface gigabitethernet 1/0/0
GigabitEthernet1/0/0(FE80::200:5EFF:FE66:5100):
MLD is enabled
Current MLD version is 1
MLD state: up
MLD group policy: none
Value of query interval for MLD (negotiated): 125 s
Value of query interval for MLD (configured): 125 s
Value of other querier timeout for MLD: 0 s
Value of maximum query response time for MLD: 10 s
Querier for MLD: FE80::200:5EFF:FE66:5100 (this router)
From the display, you can see that Router B is a querier. This is because the IPv6 link-local
address of GE 1/0/0 on Router B is the smallest in the network segment.
----End
Configuration Files
l
Issue 04 (2010-08-31)
11-21
11 MLD Configuration
interface GigabitEthernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 3000::12/64
pim ipv6 sm
mld enable
mld version 1
#
return
l
Issue 04 (2010-08-31)
11 MLD Configuration
The existing multicast technologies control multicast networks by limiting the number of
multicast forwarding entries or the number of outgoing interfaces of an entry, which cannot meet
the requirements of operators for real-time video services on IPTV networks and flexible
management of network resources.
Configuring MLD limit can enable operators to properly plan network resources and flexibly
control the number of multicast groups that hosts can join. In the network shown in Figure
11-2, multicast services are deployed. The global MLD limit, instance-based MLD limit, and
interface-based MLD limit are configured on Router A, Router B, and Router C connected to
hosts to limit the number of multicast groups that the hosts can join. When the number of
multicast groups that hosts can join reaches the limit, the devices are not allowed to create new
MLD entries. This ensures that the users that join related multicast groups more clearly and
stably watch related programs.
Figure 11-2 Networking diagram of configuring MLD Limit
Ethernet
HostA
RouterA
Receiver
N1
POS2/0/0
2001::1/64
GE1/0/0
3000::12/64
HostB
RouterB
Leaf network
POS2/0/0
2002::1/64
PIM
network
GE1/0/0
3001::10/64
HostC
Receiver
RouterC
N2
POS2/0/0
2003::1/64
HostD
GE1/0/0
3001::12/64
Ethernet
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Limit the number of MLD group memberships on Router A, Router B, and Router C.
Data Preparation
To complete the configuration, you need the following data:
l
Issue 04 (2010-08-31)
11-23
11 MLD Configuration
Procedure
Step 1 Enable multicast on routers and MLD and PIM-IPv6-SM on the interface at the host side.
# Enable multicast on Router A, enable MLD and PIM-IPv6-SM on GE 1/0/0, and set the MLD
version to 1.
<RouterA> system-view
[RouterA] multicast ipv6 routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim ipv6 sm
[RouterA-GigabitEthernet1/0/0] mld enable
[RouterA-GigabitEthernet1/0/0] mld version 1
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface pos 2/0/0
[RouterA-Pos2/0/0] pim ipv6 sm
[RouterA-Pos2/0/0] quit
# The configurations of Router B and Router C are the same as the configuration of Router A,
and are not mentioned here.
Step 2 Limit the number of MLD group memberships on the last-hop router connected to users.
# Configure the maximum number of MLD group memberships to 50 on Router A.
[RouterA] mld global limit 50
# Configure the maximum number of MLD group memberships to 40 in the public network
instance.
[RouterA] mld
[RouterA-mld] limit 40
[RouterA-mld] quit
# Configurations of Router B and Router C are similar to those of Router A, and are not
mentioned here.
Step 3 Verify the configuration.
# Run the display mld interface command to view the configuration and running status of MLD
on the router interface. MLD information on GE 1/0/0 of Router B is as follows:
<RouterB> display mld interface gigabitethernet 1/0/0
GigabitEthernet1/0/0(FE80::200:5EFF:FE66:5100):
MLD is enabled
Current MLD version is 1
MLD state: up
MLD group policy: none
MLD limit: 30
Value of query interval for MLD (negotiated): 125 s
Value of query interval for MLD (configured): 125 s
Value of other querier timeout for MLD: 0 s
Value of maximum query response time for MLD: 10 s
Querier for MLD: FE80::200:5EFF:FE66:5100 (this router)
From the display, you can see that the maximum number of MLD group members that the
GE1/0/0 of Router B can creat is 30.
----End
11-24
Issue 04 (2010-08-31)
11 MLD Configuration
Configuration Files
l
Issue 04 (2010-08-31)
11-25
11 MLD Configuration
#
mld global limit 50
#
multicast ipv6 routing-enable
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ipv6 enable
ipv6 address 2003::1/64
pim ipv6 sm
#
interface GigabitEthernet1/0/0
undo shutdown
ipv6 enable
ipv6 address 3001::12/64
pim ipv6 sm
mld enable
mld version 1
mld limit 30
#
mld
limit 40
#
return
11-26
Issue 04 (2010-08-31)
12
12-1
12-2
Issue 04 (2010-08-31)
This chapter is concerned only about the PIM-DM configuration in the IPv6 network. PIM-DM in this
chapter refers to IPv6 PIM-DM, unless otherwise specified.
For details of PIM-SM (IPv6), refer to the chapter PIM-SM (IPv6) Configuration in the HUAWEI
NetEngine80E/40E Router Configuration Guide - IP Multicast.
For details of ASM and SSM models, refer to the chapter "IP Multicast Overview" in the HUAWEI
NetEngine80E/40E Router Feature Description - IP Multicast.
Whether the Hello messages without the Generation ID option are accepted
Issue 04 (2010-08-31)
12-3
Neighbor filtering function: An interface sets up neighbor relationships with only the
addresses matching the filtering rules and deletes the neighbors unmatched with the filtering
rules
The interval for keeping the Prune state of the downstream interface
The delay from the time when the current router receives a Prune message from a
downstream router to the time when the current router performs the prune action in the
LAN
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before configure basic PIM-DM functions, complete the following tasks:
l
Data Preparation
To configure basic PIM-DM functions, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
12-5
Step 3 Run:
pim ipv6 dm
PIM-DM (IPv6) and PIM-SM (IPv6) cannot be enabled on an interface simultaneously. The PIM-IPv6
modes on all interfaces that belong to the same instance must be the same. When a router is deployed in a
PIM-DM (IPv6) domain, enable PIM-DM (IPv6) on all non-boundary interfaces.
----End
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
12-6
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before adjusting control parameters of a source, complete the following tasks:
l
Data Preparation
To adjust control parameters of a source, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
12-7
Procedure
Step 1 Run:
system-view
A filter is configured.
The nearer the filter to the source, the more obvious the effect of the filtering.
If the basic ACL is configured, only the packets with the source addresses that pass the filtering
are forwarded.
If the advanced ACL is configured, only the packets with the source addresses and group
addresses that pass the filtering are forwarded.
NOTE
If acl6-number | acl6-name acl6-name is specified in the source-policy command and ACL rules are
created, only the multicast packets whose source addresses match the ACL rules are permitted.
If acl6-number | acl6-name acl6-name is specified in the source-policy command and no ACL rule is
created, the multicast packets with any source addresses are not forwarded.
The source-policy command does not filter the static (S, G) entries.
----End
Run the following commands to check the PIM-IPv6 multicast routing table.
12-8
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incomingHuawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
----End
Pre-configuration Tasks
Before adjusting control parameters for maintaining neighbors, complete the following tasks:
l
Data Preparation
To adjust control parameters for maintaining neighbors, you need the following data.
Issue 04 (2010-08-31)
No.
Data
12-9
No.
Data
The configuration of the control parameters for maintaining PIM-IPv6 neighbors involves the following
cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not set, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
timer hello interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 timer hello interval
Issue 04 (2010-08-31)
4.
Run:
pim ipv6 triggered-hello-delay interval
The configuration of the control parameters for maintaining PIM-IPv6 neighbors involves the following
cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not set, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
hello-option holdtime interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
12-11
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
When configuring the neighbor filtering function on the interface, you must also configure the neighbor
filtering function correspondingly on the router that sets up the neighbor relationship with the interface.
----End
----End
12-13
receiving the Prune message, the upstream interface stops forwarding packets to this network
segment. If other downstream routers exist in this network segment, they must send the Join
message to override the prune action.
Routers under the control of default values can work normally. In the NE80E/40E, users can
adjust related parameters according to the specific network environment.
Pre-configuration Tasks
Before adjusting control parameters for prune, complete the following tasks:
l
Data Preparation
To adjust control parameters for prune, you need the following data.
No.
Data
The configuration of the control parameters of prune involves the following cases:
l
Configuration on the interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not set, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Issue 04 (2010-08-31)
3.
Run:
holdtime join-prune interval
The period during which the downstream interface is in the Prune state is set.
After the period expires, the pruned interface continues to forward packets. Before
the period expires, the router resets the Holdtime timer after receiving a State-Refresh
message.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 holdtime join-prune interval
The period during which the downstream interface is in the Prune state is set.
After the period expires, the pruned interface continues to forward packets. Before
the period expires, the router resets the Holdtime timer after receiving a State-Refresh
message.
----End
The configuration of control parameters for Prune involves the following two cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Issue 04 (2010-08-31)
12-15
Run:
pim-ipv6
Run:
hello-option lan-delay interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 hello-option lan-delay interval
The configuration of control parameters for Prune involves the following two cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
12-16
Issue 04 (2010-08-31)
Run:
hello-option override-interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 hello-option override-interval interval
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
12-17
12.6.4 Configuring the Period for Receiving the Next State-Refresh Message
12.6.5 Configuring the TTL Value of a State-Refresh Message
12.6.6 Checking the Configuration
Pre-configuration Tasks
Before adjusting control parameters for State-Refresh, complete the following tasks:
l
Data Preparation
To adjust control parameters for State-Refresh, you need the following data.
No.
Data
12-18
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
State-Refresh is disabled.
The interface on which PIM-DM State-Refresh is disabled cannot forward any State-Refresh
message.
NOTE
You can run the pim state-refresh-capable command to re-enable the PIM-DM State-Refresh on the
interface.
----End
Procedure
Step 1 Run:
system-view
The interval for sending PIM State-Refresh messages should be shorter than the timeout period for keeping
the Prune state. You can run the holdtime join-prune command to set the timeout period for keeping the
Prune state.
----End
Issue 04 (2010-08-31)
12-19
Procedure
Step 1 Run:
system-view
The period for waiting to receive the next State-Refresh message is set.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
Issue 04 (2010-08-31)
12-21
Pre-configuration Tasks
Before adjusting control parameters for graft, complete the following tasks:
l
Data Preparation
To adjust control parameters for graft, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
12-22
Run the display pim ipv6 grafts command to check the unacknowledged PIM-DM Graft
messages.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
Pre-configuration Tasks
Before adjusting control parameters for Assert, complete the following tasks:
l
Data Preparation
To adjust control parameters for asset, you need the following data.
Issue 04 (2010-08-31)
12-23
No.
Data
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
holdtime assert interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 holdtime assert interval
Issue 04 (2010-08-31)
The router that fails in the election prohibits its downstream interface from forwarding
multicast data.
After the Holdtime timer times out, the downstream interface continues to forward
packets.
----End
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
12-25
interface are deleted. The interface then acts as the static DR, which takes effect immediately.
At the same time, MLD on the interface is not affected.
PIM silent is applicable only to the router interface directly connected to the host network
segment that is connected only to this router.
CAUTION
If PIM-IPv6 silent is enabled on the interface connected to a router, the PIM-IPv6 neighbor
cannot be established and a multicast fault may occur.
If the host network segment is connected to multiple routers and PIM-IPv6 silent is enabled on
multiple router interfaces, the interfaces become static DRs. Therefore, multiple DRs exist in
this network segment, and a multicast fault occurs.
Pre-configuration Tasks
Before configuring PIM-IPv6 silent, complete the following tasks:
l
Configuring PIM-DM
Configuring MLD
Data Preparation
To configure PIM-IPv6 silent, you need the following data.
No.
Data
CAUTION
PIM silent is applicable only to the router interface directly connected to the host network
segment that can be connected to only one PIM router.
Do as follows on the router interface connected to the host network segment:
Procedure
Step 1 Run:
12-26
Issue 04 (2010-08-31)
system-view
Procedure
l
----End
CAUTION
The statistics of PIM-IPv6 control messages on an interface cannot be restored after you clear
them. So, confirm the action before you use the command.
Issue 04 (2010-08-31)
12-27
Procedure
l
Run the reset pim ipv6 control-message counters [ interface interface-type interfacenumber ] command in the user view to clear statistics of PIM-IPv6 control messages on an
interface.
----End
Procedure
l
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command in any view to check the statistics of sent and received PIM-IPv6
control messages.
Run the display pim ipv6 grafts command in any view to check the unacknowledged PIMDM Graft messages.
Run the following commands in any view to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ] [ | { begin | exclude |
include } regular-expression ]
----End
Issue 04 (2010-08-31)
Networking Requirements
As shown in Figure 12-1, multicast is deployed in the experiment network. The integrated
Interior Gateway Protocol (IGP) is deployed in the network. The unicast routes work normally.
You are required to properly configure routers in the network to enable hosts to receive the Video
On Demand (VOD) information in multicast mode.
Figure 12-1 Networking diagram of configuring basic PIM-DM functions
Host A
Host B
GE2/0/0
3001::1
POS1/0/0
2002::2
Source
RouterB
POS2/0/0
2002::1
GE1/0/0
2001::5 2001::1
RouterA
POS3/0/0
2003::1
POS1/0/0
2003::2
RouterC
GE2/0/0
4001::1
Host C Host D
Configuration Roadmap
The network is a small-scale experiment network, therefore, PIM-DM is adopted to configure
multicast. In this example, the host network segment is connected to only one router, therefore,
PIM silent can be used to prevent the Hello message attack. The configuration roadmap is as
follows:
1.
2.
3.
Enable PIM silent and MLD on the router interface connected to hosts.
Data Preparation
To complete the configuration, you need the following data:
l
Issue 04 (2010-08-31)
12-29
Procedure
Step 1 Enable IPv6 multicast on all routers and PIM-DM on all interfaces.
# Enable IPv6 multicast on Router A and PIM-DM on all interfaces. The configurations of Router
B and Router C are the same as the configuration of Router A, and are not mentioned here.
[RouterA] multicast ipv6 routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim ipv6 dm
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface pos 2/0/0
[RouterA-Pos2/0/0] pim ipv6 dm
[RouterA-Pos2/0/0] quit
[RouterA] interface pos 3/0/0
[RouterA-Pos3/0/0] pim ipv6 dm
[RouterA-Pos3/0/0] quit
Step 2 Enable PIM silent and MLD on the router interface connected to hosts.
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] pim ipv6 silent
[RouterB-GigabitEthernet2/0/0] mld enable
[RouterB-GigabitEthernet2/0/0] mld version 1
[RouterB-GigabitEthernet2/0/0] quit
The configuration of Router C is the same as the configuration of Router B, and is not mentioned
here.
Step 3 Verify the configuration.
# Run the display pim ipv6 interface command to view the PIM-IPv6 configuration and running
status on the router interface. The display of the PIM-IPv6 configuration on Router A is as
follows:
<RouterA> display pim ipv6
VPN-Instance: public net
Interface
State
GE1/0/0
up
(local)
Pos2/0/0
up
Pos3/0/0
up
interface
NbrCnt HelloInt
0
30
DR-Pri
1
DR-Address
FE80::200:AFF:FE01:109
1
1
1
1
FE80::A01:109:1(local)
FE80::A01:109:2(local)
30
30
# Run the display pim ipv6 neighbor command to check the PIM-IPv6 neighbor relationship
between routers. The display of the PIM-IPv6 neighbor relationship on Router A is as follows:
<RouterA> display pim ipv6 neighbor
VPN-Instance: public net
Total Number of Neighbors = 2
Neighbor
Interface
Uptime
FE80::A01:104:1 Pos2/0/0
00:04:16
FE80::A01:105:1 Pos3/0/0
00:03:54
Expires
00: 01:29
00 :01:17
Dr-Priority
1
1
# Run the display pim ipv6 routing-table command to view the PIM-IPv6 routing table on a
router. Assume that Host A joins multicast group G FF0E::1. Router B generates a (*, G) entry.
When multicast source S 2001::5 sends multicast packets to G, a Shortest Path Tree (SPT) is
generated through flooding-prune. The (S, G) entry exists on each router in the network. The
display is as follows:
<RouterA> display pim ipv6 routing-table
VPN-Instance: public net
Total 0 (*, G) entry; 1 (S, G) entry
12-30
Issue 04 (2010-08-31)
(2001::5, FF0E::1)
Protocol: pim-dm, Flag: LOC ACT
UpTime: 00:01:20
Upstream interface: GigabitEthernet1/0/0
Upstream neighbor: NULL
RPF prime neighbor: NULL
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0
Protocol: pim-dm, UpTime: 00:01:20, Expires: <RouterB> display pim ipv6 routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, FF0E::1)
Protocol: pim-dm, Flag: WC
UpTime: 01:46:23
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::A01:109:1
RPF prime neighbor: FE80::A01:109:1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: mld, UpTime: 01:46:23, Expires: never
(2001::5, FF0E::1)
Protocol: pim-dm, Flag: ACT
UpTime: 00:02:19
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::A01:109:1
RPF prime neighbor: FE80::A01:109:1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-dm, UpTime: 00:02:19, Expires: <RouterC> display pim ipv6 routing-table
VPN-Instance: public net
Total 0 (*, G) entry; 1 (S, G) entry
(2001::5, FF0E::1)
Protocol: pim-dm, Flag: ACT
UpTime: 00:02:19
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::A01:109:2
RPF prime neighbor: FE80::A01:109:2
Downstream interface(s) information:
Total number of downstreams: 0
----End
Configuration Files
l
Issue 04 (2010-08-31)
12-31
12-32
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
12-33
13
Issue 04 (2010-08-31)
13-1
This section describes how to configure PIM silent to prevent the malicious attack from a
malicious host.
13.12 Maintaining PIM-SM
This section describes how to clear IPv6 PIM-SM statistics and monitor the running status of
IPv6 PIM-SM.
13.13 Configuration Example
This section provides the configuration example of PIM-IPv6-SM.
13-2
Issue 04 (2010-08-31)
This chapter describes only the PIM-SM configuration in the IPv6 network. PIM-SM in this chapter
refers to the IPv6 PIM-SM, unless otherwise specified.
For the configuration of PIM-DM, refer to the chapter PIM-DM (IPv6) Configuration in the
HUAWEI NetEngine80E/40E Router Configuration Guide - IP Multicast.
For details of ASM and SSM models, refer to the chapter "IP Multicast Overview" in the HUAWEI
NetEngine80E/40E Router Feature Description - IP Multicast.
Static RP
You can specify the static RP on all routers in the PIM-SM domain. When a dynamic RP exists
in the domain, the dynamic RP is preferred by default, but you can configure the static RP to be
preferred.
Dynamic RP
You can specify a C-RP in a BSR domain, adjust the priority for C-RP election, adjust the lifetime
of the advertisement message on the BSR received from the C-RP, adjust the interval for the CIssue 04 (2010-08-31)
13-3
RP to advertise advertisement messages, and specify an Access Control List (ACL) to limit the
range of the multicast groups served by the C-RP.
BSR
You can specify a Candidate-BSR (C-BSR) in a BSR domain, adjust the hash mask length used
by the C-RP for C-RP election, adjust the priority for BSR election, and adjust the legal address
range of BSRs.
DR switching delay
Neighbor filtering function: An interface sets up neighbor relationships with only the
addresses matching the filtering rules and deletes the neighbors unmatched with the filtering
rules.
13-4
Time period for the downstream interface to keep the forwarding state
Neighbor check function: checks whether the sent or received Join/Prune and Assert
messages are to or from a PIM neighbor. If not, stop sending these messages.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
PIM GR
The NE80E/40E supports the PIM GR function on the router with double MPUs. PIM GR
ensures normal multicast data forwarding during master-slave switchover of the router.
13-5
The SSM model needs to be supported by the Multicast Listener Discovery version 2 (MLDv2). If a host
must run MLDv1, configure MLD SSM mapping on the router interface.
Through MLD, a router knows the multicast group G that a user wants to join.
l
If G is in the SSM group address range and the source S is specified when the user joins G
through MLDv2, the SSM model is used to provide multicast services.
If G is in the SSM group address range and the router is configured with the (S, G) SSM
mapping rules, the SSM model is used to provide multicast services.
If G is not in the SSM group address range, the ASM model is used to provide multicast
services.
In the PIM-SM network, the ASM model supports the following methods used to obtain an RP.
You can select at least one method to obtain an RP.
l
Embedded-RP: By default, the embedded-RP is started. The range of groups served by the
embedded-RP is limited.
Dynamic RP: To obtain a dynamic RP, select several routers in the PIM-SM domain and
configure them as C-RPs and C-BSRs, and then configure the BSR boundary on the
router interface on the boundary of the domain. Each router in the PIM-SM domain can
then automatically obtain the RP.
Static RP: To obtain a static RP, manually configure the RP on each router in the PIM-SM
domain. For the large-scale PIM-IPv6 network, configuring a static RP is complicated. To
enhance the robustness and the operation management of the multicast network, the static
RP is usually used as the backup of the BSR-RP.
A multicast group may be in the service range of the embedded-RP, dynamic -RP and static RP
simultaneously. By default, the sequence used by routers to select an RP is embedded-RP>
dynamic RP > the static RP. If the static RP precedence is configured, the static RP is preferred.
Compared with all groups corresponding to an RP, different multicast groups correspond to
different RPs can reduce the load of a single RP and enhance the robustness of the network.
Pre-configuration Tasks
Before configure basic PIM-SM functions, complete the following task:
l
Data Preparation
To configure basic PIM-SM functions, you need the following data.
13-6
No.
Data
Issue 04 (2010-08-31)
No.
Data
Timeout period during which a BSR waits to receive the advertisement message from
a C-RP
10
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
13-7
Step 3 Run:
pim ipv6 sm
PIM-DM (IPv6) and PIM-SM (IPv6) cannot be enabled on an interface simultaneously. The PIM mode on
all interfaces that belong to the same instance must be the same. When a router is deployed in a PIM-SM
(IPv6) domain, enable PIM-SM (IPv6) on all non-boundary interfaces.
----End
This configuration is optional. By default, the embedded-RP is enabled. The group address range of the
embedded-RP is FF7x::/12, and the value of x ranges from 0, 3 to F.
Procedure
Step 1 Run:
system-view
acl6-name ]
The group address scope of the embedded-RP on all routers in the PIM-SM (IPv6) domain must be the
same. You can run the undo embedded-rp command to shut down the embedded-RP.
----End
13-8
Issue 04 (2010-08-31)
CAUTION
Configuring a static RP and a BSR-RP in the PIM-SM simultaneously may cause a network
fault. Therefore, confirm the action before you perform this configuration.
If the static RP is not required in this PIM-SM network, this configuration is not necessary.
Do as follows on all routers in the PIM-SM domain:
Procedure
Step 1 Run:
system-view
A static RP is specified.
The parameters of the command are explained as follows:
l
basic-acl6-number | acl6-name acl6-name: specifies the number of the ACL. This basic ACL
defines the scope of groups served by the static RP. When the scopes of multicast groups
that multiple static RP serves overlap, the static RP with the highest IP address acts as the
RP.
preferred: indicates that the static RP takes precedence. The C-RP is configured in the
network at the same time. After preferred is set, routers prefer the static RP. Otherwise,
routers prefer the C-RP.
Multiple static RPs can be configured by using this command repeatedly, but the same ACL
cannot correspond to multiple static RPs. If the ACL is not configured, only one static RP can
be configured.
NOTE
The same static-rp command must be used on all routers in the PIM-SM domain.
----End
Issue 04 (2010-08-31)
13-9
CAUTION
This configuration is applicable only to the dynamic RP. If the dynamic RP is not used in this
network, this configuration is not necessary.
Do as follows on routers that may become RP in the PIM-SM domain:
Procedure
Step 1 Run:
system-view
ipv6-address: specifies the IPv6 address of the interface where the C-RP resides. PM-SM
must be enabled on that interface.
group-policy basic-acl6-number: specifies that the C-RP serves only the multicast group
matching ACL6. basic-acl-number: specifies the number of the basic ACL6. By default, the
C-RP serves all multicast groups.
priority priority: specifies the priority for electing the C-RP. The greater the value, the lower
the priority. By default, the priority is 192.
NOTE
In the RP election, the C-RP with the highest priority (with the lowest priority value) succeeds. In case
of the same priority, the hash function is calculated, and the C-RP with the greatest hash value succeeds.
In case of the same priority and the same hash value, the C-RP with the highest IP address succeeds.
l
holdtime hold-interval: specifies the timeout period during which the BSR waits to receive
the advertisement message from the C-RP. By default, the value is 150s.
advertisement-interval adv-interval: specifies the interval during which the C-RP sends
advertisement messages. By default, the value is 60s.
Step 4 Run:
c-bsr ipv6-address [ hash-length ]
A C-BSR is configured.
13-10
Issue 04 (2010-08-31)
ipv6-address: specifies the IPv6 address of the interface where the C-BSR resides. The
interface must be configured with PIM-SM.
hash-length: specifies the length of the hash mask. According to the group address G, C-RP
address, and the value of hash-length, routers calculate the C-RPs that have the same priority
and want to serve G by operating hash functions, and compare the calculation results. The
C-RP with the greatest calculated value acts as the RP that serves G.
You can use the c-bsr hash-length hash-length command to set the global hash length of the
C-BSRs. The set hash length then applies to all the C-BSRs configured on the router.
----End
This configuration is optional. By default, the SSM group address range is FF3x::/32.
Procedure
Step 1 Run:
system-view
Ensure that the SSM group address ranges of all routers in the network must be identical.
----End
Run the display pim ipv6 bsr-info command to check information about the BSR in the
PIM-SM (IPv6) domain.
Issue 04 (2010-08-31)
13-11
Run the display pim ipv6 rp-info [ ipv6-group-address ] command to check information
about RPs in the PIM-SM domain.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
Routers under the control of default values can work normally. In the NE80E/40E, users can adjust related
parameters according to the actual environment. If there is no special requirement from the actual network,
it is recommended to use default values.
Pre-configuration Tasks
Before adjusting control parameters of a multicast source, complete the following tasks:
13-12
Issue 04 (2010-08-31)
Data Preparation
To adjust control parameters of a multicast source, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
13-13
A filter is configured.
If the basic ACL is configured, only the packets with the source addresses that pass the filtering
are forwarded.
If the advanced ACL is configured, only the packets with the source addresses and group
addresses that pass the filtering are forwarded.
NOTE
If acl6-number | acl6-name acl6-name is specified in the source-policy command and ACL rules are
created, only the multicast packets whose source addresses match the ACL rules are permitted.
If acl6-number | acl6-name acl6-name is specified in the source-policy command and no ACL rule is
created, the multicast packets with any source addresses are not forwarded.
The source-policy command does not filter the static (S, G) entries.
----End
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
Issue 04 (2010-08-31)
Routers under the control of default values can work normally. In the NE80E/40E, users can adjust related
parameters according to the actual environment. If there is no special requirement of the actual network,
it is recommended to use default values.
Pre-configuration Tasks
Before adjusting control parameters of a C-RP and a C-BSR, complete the following tasks:
l
Data Preparation
To adjust control parameters of a C-RP and C-BSR, you need the following data.
No.
Data
Timeout period during which the BSR waits to receive the advertisement message
from the C-RP
Period for keeping the Boostrap message received from the BSR
13-15
Context
Do as follows on the router on which the C-RP is configured:
NOTE
Do as follows on the router that has been configured with a C-RP. This configuration is optional. If there
is no special requirement, default values are recommended.
Procedure
Step 1 Run:
system-view
The interval during which the C-RP sends advertisement messages is configured.
Step 5 Run:
c-rp holdtime interval
The period for keeping the advertisement message received from the C-RP is configured.
This period must be longer than the interval during the C-RP sends advertisement messages.
The C-RP periodically sends advertisement messages to the BSR. After receiving the
advertisement messages, the BSR obtains the Holdtime period from the messages. During the
Holdtime period, the advertisement message is valid. When the Holdtime period expires, the CRP ages.
----End
Do as follows on the router that has been configured with a C-BSR. This configuration is optional. If there
is no special requirement, default values are recommended.
13-16
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The interval during which the C-BSR sends Bootstrap messages is configured.
Step 6 Run:
c-bsr holdtime interval
The period for keeping the Bootstrap received from the BSR is configured.
The BSR periodically sends a Bootstrap message to the network. After receiving the Bootstrap
message, the C-BSR keeps the message for a certain period. During the period, the BSR election
stops temporarily. If the Holdtime period expires, a new round of BSR election is triggered
among C-BSRs.
NOTE
Ensure that the period for keeping the Bootstrap message received from the BSR and the interval during
which the BSR sends Bootstrap messages must be the same on all C-BSRs in the PIM-IPv6 domains. The
period for keeping the Bootstrap message received from the BSR must be longer than the interval during
which the BSR sending Bootstrap messages.
----End
The BSR boundary is used to divide a PIM-SM (IPv6) domain. routers outside the BSR boundary do not
take part in the process of multicast forwarding in the PIM-SM (IPv6) domain. This configuration is
optional. By default, all PIM-SM (IPv6) routers in the network can receive BSR messages.
Issue 04 (2010-08-31)
13-17
Procedure
Step 1 Run:
system-view
This configuration is optional. By default, source addresses of the received BSR packets are not checked,
and all received BSR packets are received.
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
This configuration is optional. By default, the C-RP address carried in the received advertisement message
and the address of the group that the C-RP serves are not checked, and all received advertisement messages
are received and added to the RP-set.
Procedure
Step 1 Run:
system-view
The range of legal C-RP addresses and the range of groups that C-RPs serve are limited. When
a router receives an advertisement message, the router checks the C-RP address and the address
of the group that the C-RP serves in the message. The advertisement message is received and
added to the RP-set only when the C-RP address and the group address are in the legal address
range. The C-RP spoofing is thus avoided.
{ advanced-acl6-number | acl6-name acl6-name }: specifies the number of the advanced ACL.
The ACL defines the filtering policy to limit the range of legal C-RP and the range of groups
that the C-RP serves.
----End
Run the display pim ipv6 bsr-info command to check information about BSRs in the PIMSM domain.
Run the display pim ipv6 rp-info [ ipv6-group-address ] command to check information
about RPs in the PIM-SM domain.
----End
13-19
Pre-configuration Tasks
Before adjusting control parameters for maintaining neighbors, complete the following tasks:
l
Data Preparation
To adjust control parameters for maintaining neighbors, you need the following data.
13-20
No.
Data
DR switching delay, that is, the remaining time for the entries to turn invalid after a
DR interface no longer functions as a DR.
Issue 04 (2010-08-31)
The configuration of the control parameters for maintaining PIM neighbors involves the following cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
timer hello interval
Run:
hello-option holdtime interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 timer hello interval
Run:
pim ipv6 triggered-hello-delay interval
13-21
After the maximum delay is set, the conflict caused by multiple PIM-IPv6 routers
simultaneously sending Hello message is avoided.
5.
Run:
pim ipv6 hello-option holdtime interval
Run:
pim ipv6 require-genid
The configuration of the control parameters for electing a DR involves the following cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
pim ipv6 hello-option dr-priority priority
Configuration on an Interface
1.
13-22
Run:
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 hello-option dr-priority priority
Run:
pim ipv6 timer dr-switch-delay interval
The DR switching delay is configured and the value of the delay is set.
When an interface changes from a DR to a non-DR, the existing routing entries are
valid until the maximum delay expires.
----End
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
hello-option neighbor-tracking
13-23
After this function is enabled, information about the downstream neighbor who has
sent a Join message and whose Join state does not times out is recorded.
NOTE
The function of tracking downstream neighbors cannot be implemented unless all the routers
running IPv6 PIM-SM in the shared network segment are enabled with this function.
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 hello-option neighbor-tracking
The function of tracking downstream neighbors cannot be implemented unless all the routers
running IPv6 PIM-SM in the shared network segment are enabled with this function.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
An interface sets up neighbor relationships with only the addresses matching the filtering rules
and deletes the neighbors unmatching the filtering rules.
NOTE
When configuring the PIM neighbor filtering function on the interface, you must also configure the
neighbor filtering function correspondingly on the router that sets up the neighbor relationship with the
interface.
----End
----End
Routers under the control of default values can work normally. In the NE80E/40E, users can adjust related
parameters according to the specific network environment. If there is no special requirement, default values
are recommended.
Issue 04 (2010-08-31)
13-25
Pre-configuration Tasks
Before adjusting control parameters of source registering, complete the following tasks:
l
Data Preparation
To adjust control parameters of source registering, you need the following data.
No.
Data
Timeout period for keeping the suppressed state of the source registering
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
The timeout period for keeping the suppressed state of the registering is set.
Step 4 Run:
probe-interval interval
----End
13-27
When the last member of a group on the router leaves its group, the router sends the Prune
message through the upstream interface to request the upstream router to perform the prune
action. After receiving the Prune message, the upstream interface stops forwarding packets to
this network segment. If other downstream routers exist in this network segment, they must send
the Join message to override the prune action.
In the ASM model, the routers periodically send Join messages to the RP in case the RPT branch
is deleted because of timeout.
NOTE
Routers under the control of default values can work normally. In the NE80E/40E, users can adjust related
parameters according to the specific network environment. If there is no special requirement, default values
are recommended.
Pre-configuration Tasks
Before adjusting control parameters for forwarding, complete the following tasks:
l
Data Preparation
To adjust control parameters for forwarding, you need the following data.
No.
Data
Whether to perform neighbor check on the received or sent Join/Prune messages and
Assert messages
13-28
Issue 04 (2010-08-31)
NOTE
The configuration of the control parameters for maintaining the forwarding relationship involves the
following cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
timer join-prune interval
Run:
holdtime join-prune interval
The value of the Holdtime filed in the sent Join/Prune message is set.
The Holdtime period is the period for keeping the Forwarding/Prune state of the
downstream interface.
l
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 timer join-prune interval
Run:
pim ipv6 holdtime join-prune interval
The value of the Holdtime filed in the sent Join/Prune message is set.
The Holdtime period is the period for keeping the Forwarding/Prune state of the
downstream interface.
5.
Run:
pim ipv6 require-genid
13-29
The configuration of the control parameters of prune involves the following cases:
l
Configuration on the interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
hello-option lan-delay interval
Run:
hello-option override-interval interval
Configuration on an Interface
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 hello-option lan-delay interval
Run:
pim ipv6 hello-option override-interval interval
Procedure
Step 1 Run:
system-view
13-31
Context
By default, checking whether the Join/Prune message and Assert messages are sent to or received
from a PIM neighbor is not enabled.
If PIM neighbor checking is required, it is recommended to configure the neighbor checking
function on the devices connected with user devices rather than on the internal devices of the
network. Then, the router checks whether the Join/Prune and Assert messages are sent to or
received from a PIM neighbor. If not, the router drops the messages.
Do as follows on the router enabled with IPv6 PIM-SM:
Procedure
Step 1 Run:
system-view
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
13-32
Issue 04 (2010-08-31)
routers under the control of default values can work normally. In the NE80E/40E, you can adjust related
parameters according to the specific network environment. If there is no special requirement, default values
are recommended.
Pre-configuration Tasks
Before adjusting control parameters for assert, complete the following tasks:
l
Data Preparation
To adjust control parameters for asset, you need the following data.
No.
Data
Issue 04 (2010-08-31)
13-33
The configuration of control parameters for Assert involves the following cases:
l
Configuration on an interface: The configuration on an interface takes precedence over the global
configuration. If the configuration on an interface is not done, the global configuration is used.
Procedure
l
Global Configuration
1.
Run:
system-view
Run:
pim-ipv6
Run:
holdtime assert interval
Configuration on an Interface
1.
Run:
system-view
Run:
interface interface-type interface-number
Run:
pim ipv6 holdtime assert interval
13-34
Issue 04 (2010-08-31)
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command to check the number of sent and received PIM-IPv6 control messages.
Run the following commands to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
The DR at the source side and the RP need to encapsulate and decapsulate packets.
The forwarding path may not be the shortest path from the source to receivers.
Heavy data traffic increases the load of the RP, and may cause a fault.
SPT switchover triggered by the RP: The RP sends a Join message to the source, and
establishes a multicast route along the shortest path from the DR at the source side to the
RP. The subsequent packets are forwarded along the path.
SPT switchover triggered by the DR at the receiver side: The DR at the receiver side checks
the forwarding rate of multicast data. If the DR finds that the rate exceeds the threshold,
the DR triggers the SPT switchover immediately. The DR sends a Join message to the
Issue 04 (2010-08-31)
13-35
source, and establishes a multicast route along the shortest path from the DR at the source
side to the DR at the receiver side. The subsequent packets are forwarded along the path.
NOTE
routers under the control of default values can work normally. In the NE80E/40E, users can adjust related
parameters according to the specific network environment. If there is no special requirement, default values
are recommended.
Pre-configuration Tasks
Before adjusting control parameters for the SPT switchover, complete the following tasks:
l
Data Preparation
To adjust control parameters for the SPT switchover, you need the following data.
No.
Data
Forwarding rate threshold that the DR at the receiver side switches packets from the
RPT to the SPT
Group filtering policy and sequence policy for the RPT-to-SPT switchover
Interval for checking the forwarding rate threshold of multicast data before RPT-toSPT switchover
Procedure
Step 1 Run:
system-view
The interval for checking the forwarding rate of multicast data is set.
13-36
Issue 04 (2010-08-31)
By default, the DR at the receiver side performs SPT switchover after receiving the first multicast
data packet.
NOTE
Before configuring the timer spt-switch command, run the spt-switch-threshold command to set the
threshold of the rate that will trigger SPT switchover. Otherwise, timer spt-switch does not take effect.
----End
This configuration is optional. By default, the RP and the DR at the receiver side immediately perform the
SPT switchover after receiving the first multicast data packet.
Procedure
Step 1 Run:
system-view
----End
----End
Issue 04 (2010-08-31)
13-37
Pre-configuration Tasks
Before configuring PIM GR, complete the following task:
l
Data Preparation
To enable PIM GR, you need the following data.
13-38
Issue 04 (2010-08-31)
No.
Data
Unicast GR period
PIM-IPv6 GR period
Procedure
Step 1 Run:
system-view
PIM GR is enabled.
Step 4 (Optional) Run:
graceful-restart period period
Issue 04 (2010-08-31)
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6-groupaddress [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif | nonbr | none |
rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incoming-interface [ interface-type
interface-number| register ] | mode { dm | sm | ssm } | outgoing-interface { exclude |
include | match } [ interface-type interface-number | none | register ] ] * [ outgoinginterface-number [ number ] ]
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
13-39
display pim ipv6 routing-table brief [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | incoming-interface { interface-type interfacenumber | register } ] *
----End
The PIM-IPv6 silent is applicable only to the router interface directly connected to the host
network segment that is connected only to this router.
CAUTION
If PIM-IPv6 silent is enabled on the interface connected to a router, the PIM-IPv6 neighbor
cannot be established and a multicast fault may occur.
If the host network segment is connected to multiple routers and PIM-IPv6 silent is enabled on
multiple router interfaces, the interface become static DRs. Therefore, multiple DRs exist in this
network segment, and a multicast fault occurs.
Pre-configuration Tasks
Before configuring PIM-IPv6 silent, complete the following tasks:
13-40
Issue 04 (2010-08-31)
Configuring PIM-SM
Configuring MLD
Data Preparation
To configure PIM-IPv6 silent, you need the following data.
No.
Data
CAUTION
PIM-IPv6 silent is applicable only to the router interface connected to the host network segment
that can be connected to only one PIM-IPv6 router.
Do as follows on the router interface connected to the host network segment:
Procedure
Step 1 Run:
system-view
13-41
Procedure
l
----End
CAUTION
The statistics of PIM-IPv6 control messages on an interface cannot be restored after you clear
it. Therefore, confirm the action before you use the command.
Procedure
l
Run the reset pim ipv6 control-message counters [ interface interface-type interfacenumber ] command in the user view to clear statistics of PIM-IPv6 control messages on an
interface.
----End
CAUTION
Clearing PIM status of the downstream interfaces may trigger the sending of corresponding Join/
Prune messages, which affects multicast services.
Using the following command can clear join information about illegal users, and clear the PIM
status of the specified interface in a specified entry, such as PIM Join/Prune status and Assert
status.
13-42
Issue 04 (2010-08-31)
The command cannot be used to clear the MLD or static group join status on a specified interface.
Procedure
Step 1 After confirming that PIM status of the specified downstream interfaces of the specified PIM
entry need to be cleared, run the reset pim ipv6 routing-table group ipv6-group-address
mask ipv6-group-mask-length source ipv6-source-address interface interface-type interfacenumber command in the user view.
----End
Procedure
l
Run the display pim ipv6 control-message counters interface interface-type interfacenumber [ message-type { assert | bsr | graft | graft-ack | hello | join-prune | staterefresh } ] command in any view to check the number of sent and received PIM-IPv6
control messages.
Run the display pim ipv6 bsr-info command in any view to check information about the
BSR.
Run the display pim ipv6 claimed-route [ ipv6-source-address ] command in any view
to check unicast routing information used by (S, G) and (*, G) entries in the PIM-SM routing
table.
Run the display pim ipv6 rp-info [ ipv6-group-address ] command in any view to check
information about the RP to which the multicast group corresponds.
Run the display pim ipv6 grafts command in any view to check the unacknowledged PIMIPv6 Graft messages.
Run the following commands in any view to check the PIM-IPv6 multicast routing table.
display pim ipv6 routing-table [ ipv6-source-address [ mask mask-length ] | ipv6group-address [ mask mask-length ] | flags { act | del | exprune | ext | loc | niif |
nonbr | none | rpt | sg_rcvr | sgjoin | spt | swt | wc | upchg } | fsm | incominginterface [ interface-type interface-number| register ] | mode { dm | sm | ssm } |
outgoing-interface { exclude | include | match } [ interface-type interface-number |
none | register ] ] * [ outgoing-interface-number [ number ] ]
----End
Issue 04 (2010-08-31)
13-43
RouterB
POS1/0/0
2002::2
Source
2001::5
POS2/0/0
2002::1
RouterA
2003::1
POS3/0/0
POS1/0/0
GE1/0/0
2001::1
POS4/0/0 2003::2
2006::1
Internet
GE2/0/0
3001::1
POS3/0/0
2004::1
HostA
HostB
POS2/0/0
2004::2
RouterD
POS3/0/0
2005::1
POS1/0/0
2005::2
GE2/0/0
4001::2
RouterC
HostC
HostD
Configuration Roadmap
The ISP network is accessed to the Internet. To expand services, PIM-SM is adopted to configure
multicast, and ASM and SSM models are used to provide multicast services. In this example,
the host network segment is connected to only one router, so PIM silent can be used to prevent
the Hello message attack. The configuration roadmap is as follows:
13-44
Issue 04 (2010-08-31)
1.
2.
3.
4.
On Router A, configure the BSR boundary on the interface connected to the Internet.
5.
6.
Enable PIM silent and MLD on the router interface connected to hosts.
Data Preparation
To complete the configuration, you need the following data:
l
The router interface connected to the host network segment runs MLDv2.
The IPv6 global unicast address of the C-BSR and C-RP is 2004::2.
Procedure
Step 1 Enable IPv6 multicast on all routers and IPv6 PIM-SM on all interfaces.
# Enable IPv6 multicast on Router A and PIM-SM on all interfaces.
[RouterA] multicast ipv6 routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim ipv6 sm
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface pos 2/0/0
[RouterA-Pos2/0/0] pim ipv6 sm
[RouterA-Pos2/0/0] quit
[RouterA] interface pos 3/0/0
[RouterA-Pos3/0/0] pim ipv6 sm
[RouterA-Pos3/0/0] quit
[RouterA] interface pos 4/0/0
[RouterA-Pos4/0/0] pim ipv6 sm
[RouterA-Pos4/0/0] quit
# The configurations of Router B, Router C, and Router D are the same as the configuration of
Router A, and are not mentioned here.
# Run the display pim ipv6 interface command to check the PIM configuration and the running
information on each interface.
Step 2 Configure the C-BSR and C-RP.
# Configure the C-RP on Router D and specify the range of groups that the C-RP served.
[RouterD] acl ipv6 number 2001
[RouterD-acl6-basic-2001] rule permit source ff3e::1 64
[RouterD-acl6-basic-2001] quit
[RouterD] pim-ipv6
[RouterD-pim6] c-rp 2004::2 group-policy 2001
# Running the display pim ipv6 bsr-info command on a router to check information about the
BSR election. Take information about the BSR on Router B and Router D as an example (on
Router D, information about the C-BSR is displayed).
Issue 04 (2010-08-31)
13-45
# Run the display pim ipv6 rp-info command to check RP information on each router. Take
RP information on Router B as an example.
<RouterB> display pim ipv6 rp-info
VPN-Instance: public net
PIM-SM BSR RP information:
Group/MaskLen: FF3E::1/64
RP: 2004::2
Priority: 192
Uptime: 00:05:19
Expires: 00:02:11
Step 3 On Router A, configure the BSR boundary on the interface connected to the Internet.
[RouterA] interface pos 4/0/0
[RouterA-Pos4/0/0] pim ipv6 bsr-boundary
[RouterA-Pos4/0/0] quit
Step 4 Configure the SSM group address range on all routers in the network.
# Configure the PIM-IPv6 SSM group address range on Router A to FF3E::1/64.
[RouterA] acl ipv6 2000
[RouterA-acl6-basic-2000] rule permit source FF3E::1 64
[RouterA-acl6-basic-2000] quit
[RouterA] pim-ipv6
[RouterA-pim6] ssm-policy 2000
[RouterA-pim6] quit
# The configurations of Router B, Router C, and Router D are the same as the configuration of
Router A, and are not mentioned here.
Step 5 Enable PIM silent and MLD on the router interface connected to hosts.
# On Router B, enable PIM silent and MLD on the interface at the host side.
[RouterB] interface gigabitethernet 2/0/0
[RouterB-GigabitEthernet2/0/0] pim ipv6 silent
[RouterB-GigabitEthernet2/0/0] mld enable
[RouterB-GigabitEthernet2/0/0] quit
# On Router C, the configuration of the interface at the host side is similar to the preceding one,
and is not mentioned here.
13-46
Issue 04 (2010-08-31)
# Run the display pim ipv6 interface command to check the PIM configuration and the running
information on each interface. Take PIM information on Router B as an example.
<RouterB> display pim ipv6
VPN-Instance: public net
Interface
State
Pos1/0/0
up
GE2/0/0
up
(local)
Pos3/0/0
up
interface
NbrCnt HelloInt
1
30
0
30
DR-Pri
1
1
DR-Address
FE80::A01:10E:1 (local)
FE80::200:AFF:FE01:10E
FE80::9D62:0:FDC5:2
30
Issue 04 (2010-08-31)
13-47
----End
13-48
Issue 04 (2010-08-31)
Configuration Files
l
Issue 04 (2010-08-31)
13-49
13-50
Issue 04 (2010-08-31)
#
ipv6
#
multicast ipv6 routing-enable
#
acl ipv6 number 2000
rule 0 permit source FF3E::1/64
#
acl ipv6 number 2001
rule 0 permit source FF0E::1/64
#
interface Pos1/0/0
undo shutdown
ipv6 enable
link-protocol ppp
ipv6 address 2003::2/64
ospfv3 1 area 0.0.0.0
pim ipv6 sm
#
interface Pos2/0/0
undo shutdown
ipv6 enable
link-protocol ppp
ipv6 address 2004::2/64
ospfv3 1 area 0.0.0.0
pim ipv6 sm
#
interface Pos3/0/0
undo shutdown
ipv6 enable
link-protocol ppp
ipv6 address 2005::1/64
ospfv3 1 area 0.0.0.0
pim ipv6 sm
#
ospfv3 1
router-id 4.4.4.4
area 0.0.0.0
#
pim-ipv6
c-bsr 2004::2
c-rp 2004::2 group-policy 2001
#
pim-ipv6
ssm-policy 2000
#
return
13-51
the active main control board backs up the PIM routing entries and Join/Prune messages that
need to be sent to upstream device to the standby main control board. When Router C performs
the active/standby switchover, the interface board maintains the original forwarding entries,
which ensures the smooth forwarding of multicast data. Therefore, the receiver can normally
receive multicast data from the multicast source when the device performs the active/standby
switchover.
Figure 13-2 Networking diagram of PIM GR
Ethernet
Leaf networks
RouterA
Source
POS2/0/0
POS1/0/0
GE2/0/0
POS1/0/0
POS1/0/0
GE2/0/0
RouterC
Router B
Receiver
HostA
PIM-SM
Ethernet
Device
Interface
IPv6 Address
RouterA
POS1/0/0
2001:2::1/64
GE2/0/0
2001:1::2/64
POS1/0/0
2001:2::2/64
POS2/0/0
2001:5::1/64
POS1/0/0
2001:5::2/64
GE2/0/0
2001:6::1/64
RouterB
RouterC
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure IPv6 addresses for the interfaces and a unicast routing protocol on each router.
2.
3.
Enable the multicast function, enable PIM SM (IPv6) on the interfaces of routers, and enable
MLD on the interface connecting router to the host.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
13-52
Issue 04 (2010-08-31)
Unicast GR period
PIM GR period
Procedure
Step 1 Configure IPv6 addresses for the interfaces and a unicast routing protocol on each router.
# Based on Figure 13-2, configure IPv6 addresses and masks for the interfaces on each router.
Configure OSPFv3 as the unicast routing protocol running between routers to ensure IP
interworking between Router A, Router B, and Router C. The detailed configuration is not
mentioned here.
Step 2 Enable unicast GR and set the GR period.
# Enable unicast GR and set the GR period to 200 seconds on each router. The configurations
on Router A and Router B are similar to those on Router C. The detailed configuration procedures
are not mentioned here.
[RouterC] ospfv3 1
[RouterC-ospfv3-1] graceful-restart
[RouterC-ospfv3-1] graceful-restart period 200
[RouterC-ospfv3-1] quit
Step 3 Enable the multicast function, enable PIM SM (IPv6) on the interfaces of routers, and enable
MLD on the interface connecting router and the host.
# Enable the multicast function on all routers, and enable PIM SM (IPv6) on the interfaces of
the routers, and enable MLD on the interface connecting Router C to the host. The configurations
on Router A and Router B are similar to those on Router C. The detailed configuration procedures
are not mentioned here.
[RouterC] multicast ipv6 routing-enable
[RouterC] interface gigabitethernet 2/0/0
[RouterC-GigabitEthernet2/0/0] pim ipv6 sm
[RouterC-GigabitEthernet2/0/0] mld enable
[RouterC-GigabitEthernet2/0/0] quit
[RouterC] interface pos 1/0/0
[RouterC-Pos1/0/0] pim ipv6 sm
[RouterC-Pos1/0/0] quit
looplback 0
ipv6 enable
ipv6 address 2002:1::1 64
pim ipv6 sm
ospfv3 1 area 0
quit
# Configure a same static RP on each router. The configurations on Router B and Router C are
similar to those on Router A. The detailed configuration procedures are not mentioned here.
[RouterA] pim-ipv6
[RouterA-pim6] static-rp 2002:1::1
[RouterA-pim6] quit
13-53
# On Router C, enable PIM GR and set the PIM GR period to 300 seconds.
[RouterC] pim-ipv6
[RouterC-pim6] graceful-restart
[RouterC-pim6] graceful-restart period 300
[RouterC-pim6] quit
13-54
Issue 04 (2010-08-31)
After Router C performs active/standby switchover, during PIM GR, run the display pim ipv6
routing-table command on Router B and Router C to view PIM routing table. The command
output are as follows:
<RouterB> display pim ipv6 routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, FF2E::1)
RP: 2002:1::1
Protocol: pim-sm, Flag: WC
UpTime: 00:02:20
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::E0:F2C:3C02:1
RPF prime neighbor: FE80::E0:F2C:3C02:1
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0
Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:10
(2001:1::1, FF2E::1)
RP: 2002:1::1
Protocol: pim-sm, Flag: SPT ACT
UpTime: 00:02:20
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::E0:F2C:3C02:1
RPF prime neighbor: FE80::E0:F2C:3C02:1
Downstream interface(s) information:
Total number of downstreams: 1
1: Pos2/0/0
Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:17
<RouterC> display pim ipv6 routing-table
VPN-Instance: public net
Total 1 (*, G) entry; 1 (S, G) entry
(*, FF2E::1)
RP: 2002:1::1
Protocol: pim-sm, Flag: WC
UpTime: 00:02:44
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::5463:0:9245:2
RPF prime neighbor: FE80::5463:0:9245:2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: mld, UpTime: 00:02:44, Expires: (2001:1::1, FF2E::1)
RP: 2002:1::1
Protocol: pim-sm, Flag: SPT ACT
UpTime: 00:02:44
Upstream interface: Pos1/0/0
Upstream neighbor: FE80::5463:0:9245:2
RPF prime neighbor: FE80::5463:0:9245:2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet2/0/0
Protocol: pim-sm, UpTime: 00:02:44, Expires: -
In a normal multicast network, the downstream router periodically sends Join/Prune messages
upstream to refresh the timeout period of PIM routing entries on the upstream, thereby ensuring
normal multicast data forwarding.
If the GR function is not configured on Router C, the new active main control board deletes the
multicast forwarding entries on the interface board, receives MLD Report messages from the
Issue 04 (2010-08-31)
13-55
host again, and re-creates PIM routing entries. During this process, multicast traffic is
interrupted.
From the preceding command output, it can be found that after Router C performs active/standby
switchover, the downstream interface of Router B, remains unchanged. That is, after Router C
performs active/standby switchover, Router C sends the backed up Join messages upstream. In
this way, multicast forwarding entries can be maintained during GR to ensure non-stop multicast
data forwarding.
During the process of restoring multicast routing entries on Router C after active/standby
switchover, users can receive multicast data normally and services are not interrupted.
----End
Configuration Files
l
13-56
Issue 04 (2010-08-31)
area 0.0.0.0
#
interface Pos1/0/0
link-protocol ppp
undo shutdown
ipv6 enable
ipv6 address 2001:2::2/64
ospfv3 1 area 0.0.0.0
pim ipv6 sm
#
interface Pos2/0/0
link-protocol ppp
undo shutdown
ipv6 enable
ipv6 address 2001:5::1/64
ospfv3 1 area 0.0.0.0
pim ipv6 sm
#
pim-ipv6
static-rp 2002:1::1
#
return
l
Issue 04 (2010-08-31)
13-57
14
Issue 04 (2010-08-31)
14-1
Source address S
Group address G
Incoming interface, which indicates that multicast data is received through this interface.
The incoming interface corresponds to the upstream interface of the related routing entry.
Outgoing interface, which indicates that multicast data is sent out through this interface.
The outgoing interface corresponds to the downstream interface in the downstream
interface list of the related routing entry.
NOTE
IPv6 multicast forwarding and routing are similar to IPv4 multicast forwarding and routing. For details,
refer to the chapter "Multicast Forwarding and Routing" in the HUAWEI NetEngine80E/40E Router
Feature Description - IP Multicast.
Issue 04 (2010-08-31)
Setting the TTL threshold for IPv6 multicast forwarding on an interface to limit the range
in which an IPv6 multicast packet can be forwarded
By default, the router selects the route with the highest next-hop address.
Load splitting is configured among equal-cost routes. Performing load splitting of multicast
traffic according to different policies can optimize network traffic transmission in the
scenario where multiple multicast data flows exist.
Pre-configuration Tasks
Before configuring the IPv6 multicast routing policy, complete the following tasks:
l
Data Preparation
To configure the IPv6 multicast routing policy, you need the following data.
Issue 04 (2010-08-31)
14-3
No.
Data
Procedure
Step 1 Run:
system-view
14-4
group: indicates group address-based load splitting. This policy is applicable to the scenario
of one source to multiple groups.
source: indicates source address-based load splitting. This policy is applicable to the scenario
of one group to multiple sources.
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
Issue 04 (2010-08-31)
source-group: indicates source and group addresses-based load splitting. This policy is
applicable to the scenario of multiple sources to multiple groups.
NOTE
It is recommended to adopt a fixed IPv6 multicast load splitting policy based on the actual networking.
The balance-preferred or stable-preferred policy is preferred.
balance-preferred or stable-preferred cannot be configured on the interface enabled with PIM-DM.
----End
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Run the display multicast ipv6 routing-table [ ipv6-source-address [ ipv6-source-masklength ] | ipv6-group-address [ ipv6-group-mask-length ] | incoming-interface { interfacetype interface-number | register } | outgoing-interface { { exclude | include | match }
Huawei Proprietary and Confidential
Copyright Huawei Technologies Co., Ltd.
14-5
----End
Setting the TTL threshold for IPv6 multicast forwarding on an interface to limit the range
in which an IPv6 multicast packet can be forwarded. The interface forwards only the packets
(including those generated by the local router) with the TTL value being equal to or greater
than the threshold value. If the TTL value of a packet is smaller than the threshold, the
interface discards the packet.
Pre-configuration Tasks
Before limiting the range of multicast forwarding, complete the following tasks:
l
Data Preparation
To limit the range of multicast forwarding, you need the following data.
14-6
No.
Data
Group address, mask, and mask length of the IPv6 multicast forwarding boundary
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
The minimum TTL value for forwarding IPv6 multicast packets is set on the interface.
By default, the TTL threshold for IPv6 multicast forwarding is 1.
----End
Issue 04 (2010-08-31)
14-7
Run the display multicast ipv6 routing-table [ ipv6-source-address [ ipv6-source-masklength ] | ipv6-group-address [ ipv6-group-mask-length ] | incoming-interface { interfacetype interface-number | register } | outgoing-interface { { exclude | include | match }
{ interface-type interface-number | register | none } } ] * [ outgoing-interface-number
[ number ] ] command to check the IPv6 multicast routing table.
Run the display multicast ipv6 boundary [ ipv6-group-address [ ipv6-group-masklength ] | interface interface-type interface-number ] command to check the IPv6 multicast
boundary configured on the interface.
----End
14-8
Issue 04 (2010-08-31)
service performance can reduce the processing pressure of a router and control the service
range.
Pre-configuration Tasks
Before configuring control parameters of the IPv6 multicast routing policy, complete the
following tasks:
l
Data Preparation
To configure control parameters of the IPv6 multicast routing policy, complete the following
tasks.
No.
Data
Procedure
Step 1 Run:
system-view
The maximum number of entries in the IPv6 multicast forwarding table is set.
The configured value is valid only when it is smaller than the default value.
----End
Issue 04 (2010-08-31)
14-9
Procedure
Step 1 Run:
system-view
The maximum number of downstream nodes of a single entry in the IPv6 multicast forwarding
table is set.
The configured value is valid only when it is smaller than the default value.
----End
Run the display multicast ipv6 forwarding-table [ ipv6-source-address [ ipv6-sourcemask-length ] | ipv6-group-address [ ipv6-group-mask-length ] | incoming-interface
{ interface-type interface-number | register } | outgoing-interface { { exclude | include |
match } { interface-type interface-number | register | none } } | slot slot-number |
statistics ] * command to check the IPv6 multicast forwarding table.
----End
14-10
Issue 04 (2010-08-31)
CAUTION
After you run the reset command to clear information in the multicast forwarding table or in the
multicast routing table, multicast data cannot be normally transmitted. So, confirm the action
before you use the command.
Procedure
l
Run the reset multicast ipv6 forwarding-table { ipv6-group-address [ ipv6-group-masklength ] | ipv6-source-address [ ipv6-source-mask-length ] | all | incoming-interface
{ interface-type interface-number | register } } * command in the user view to clear the
forwarding entry in the IPv6 multicast forwarding table.
Run the reset multicast ipv6 routing-table { ipv6-source-address [ ipv6-source-masklength ] | ipv6-group-address [ ipv6-group-mask-length ] | all | incoming-interface
{ interface-type interface-number | register } } * command in the user view to clear the
routing entry in the IPv6 multicast routing table.
----End
Procedure
l
Run the display multicast ipv6 boundary [ ipv6-group-address [ ipv6-group-masklength ] | interface interface-type interface-number ] command in any view to check
information about boundaries of all interfaces.
Run the display multicast ipv6 forwarding-table [ ipv6-source-address [ ipv6-sourcemask-length ] | ipv6-group-address [ ipv6-group-mask-length ] | incoming-interface
{ interface-type interface-number | register } | outgoing-interface { { exclude | include |
match } { interface-type interface-number | register | none } } | slot slot-number |
statistics ] * command in any view to check the IPv6 multicast forwarding table.
Run the display multicast ipv6 routing-table [ ipv6-source-address [ ipv6-source-masklength ] | ipv6-group-address [ ipv6-group-mask-length ] | incoming-interface { interfacetype interface-number | register } | outgoing-interface { { exclude | include | match }
Issue 04 (2010-08-31)
14-11
----End
14-12
Issue 04 (2010-08-31)
PIM-SM
Source
GE1/0/0
RouterA
PO
0/0
1
S1/ RouterB S2/0/0 POS1/0
2/0/
O
S
P
/1
PO
POS1/0/2
POS2/0/2
POS
POS2/0/0
0/3
2/0/ POS1/0/0
S1/
3
PO
RouterC
Loopback0
POS
1/0/
0
PO
GE2/0/0
RouterE
0/0
S2/
HostA
RouterD
Device
Interface
IP Address
Device
Interface
IP Address
Router A
GE1/0/0
2001::2/64
Router C
POS1/0/0
2003::2/64
POS2/0/1
2002::1/64
POS2/0/0
2006::1/64
POS2/0/2
2003::1/64
POS1/0/0
2004::2/64
POS2/0/3
2004::1/64
POS2/0/0
2007::1/64
LoopBack0
2000::1/64
POS1/0/1
2005::2/64
POS1/0/0
2002::2/64
POS1/0/2
2006::2/64
POS2/0/0
2005::1/64
POS1/0/3
2007::2/64
GE2/0/0
3001::1/64
Router B
Router D
Router E
Configuration Roadmap
The configuration roadmap is as follows:
l
Configure IS-IS IPv6 to implement interworking among routers and ensure that route costs
are equal.
Enable multicast on routers, enable IPv6 PIM-SM on each interface, and set the loopback
interface on Router A as an RP.
Configure stable-preferred IPv6 multicast load splitting on Router E to ensure the stability
of IPv6 multicast services.
Host A requires to receive data from some multicast groups for a long period. Configure
the interfaces at the host side of Router E to join the multicast groups statically in batches.
Issue 04 (2010-08-31)
14-13
Host A requires to receive data from a new multicast group. Therefore, configure a multicast
load splitting weight for each upstream interface on Router E to achieve unbalanced IPv6
multicast load splitting.
Data Preparation
To complete the configuration, you need the following data:
l
Address of the multicast group that interfaces at the host side of Router E statically join in
batches
Procedure
Step 1 Assign an IPv6 address to each interface on the routers according to Figure 14-1. The detailed
configuration procedure is not mentioned here.
Step 2 Configure IS-IS IPv6 to implement interworking among routers and ensure that route costs are
equal. The detailed configuration procedure is not mentioned here.
Step 3 Enable IPv6 multicast on all routers and enable IPv6 PIM-SM on each interface.
# Configure Router A. Configurations on Routers B, C, D, and E are similar to those on
RouterA. Therefore, configurations on these Routers are not mentioned here.
[RouterA] multicast ipv6 routing-enable
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] pim ipv6 sm
[RouterA-GigabitEthernet1/0/0] quit
[RouterA] interface pos 2/0/1
[RouterA-Pos2/0/1] pim ipv6 sm
[RouterA-Pos2/0/1] quit
[RouterA] interface pos 2/0/2
[RouterA-Pos2/0/2] pim ipv6 sm
[RouterA-Pos2/0/2] quit
[RouterA] interface pos 2/0/3
[RouterA-Pos2/0/3] pim ipv6 sm
[RouterA-Pos2/0/3] quit
[RouterA] interface loopback 0
[RouterA-LoopBack0] pim ipv6 sm
[RouterA-LoopBack0] quit
Step 6 Configure the interfaces at the host side of RouterE to join the multicast groups statically in
batches.
# Configure GE 2/0/0 to join multicast groups from FF13::1 to FF13::3 statically.
14-14
Issue 04 (2010-08-31)
Step 7 Verify the configuration about stable-preferred IPv6 multicast load splitting.
# The multicast source (2001::1/64) sends multicast data to multicast groups (FF13::1 to
FF13::3). Host A can receive the multicast data from the source. On Router E, check brief
information about the IPv6 PIM routing table.
<RouterE> display pim ipv6 routing-table brief
VPN-Instance: public net
Total 3 (*, G) entries; 3 (S, G) entries
00001.(*, FF13::1)
Upstream interface:Pos1/0/1
Number of downstream:1
00002.(2001::1, FF13::1)
Upstream interface:Pos1/0/1
Number of downstream:1
00003.(*, FF13::2)
Upstream interface:Pos1/0/2
Number of downstream:1
00004.(2001::1, FF13::2)
Upstream interface:Pos1/0/2
Number of downstream:1
00005.(*, FF13::3)
Upstream interface:Pos1/0/3
Number of downstream:1
00006.(2001::1, FF13::3)
Upstream interface:Pos1/0/3
Number of downstream:1
You can find that (*,G) and (S,G) entries are equally distributed to three equal-cost routes, with
the upstream interfaces being POS 1/0/1, POS 1/0/2, and POS 1/0/3 respectively.
NOTE
The load splitting algorithm processes (*,G) and (S,G) entries separately and the process rules are the same.
Step 8 Configure IPv6 multicast load splitting weights for different upstream interfaces of Router E to
achieve unbalanced IPv6 multicast load splitting.
# Set the IPv6 multicast load splitting weight on POS 1/0/1 to 2.
[RouterE] interface pos 1/0/1
[RouterE-Pos1/0/1] multicast ipv6 load-splitting weight 2
[RouterE-Pos1/0/1] quit
Step 9 Configure the interfaces at the host side of Router E to join new multicast groups statically in
batches.
# Configure GE 2/0/0 to join multicast groups from FF13::4 to FF13::9 statically.
[RouterE] interface gigabitethernet 2/0/0
[RouterE-GigabitEthernet2/0/0] mld static-group ff13::4 inc-step-mask 128 number 6
[RouterE-GigabitEthernet2/0/0] quit
Step 10 Verify the configuration about unbalanced IPv6 multicast load splitting.
Issue 04 (2010-08-31)
14-15
# The multicast source (2001::1/64) sends multicast data to multicast groups (FF13::1 to
FF13::9). Host A can receive the multicast data from the source. On Router E, check brief
information about the IPv6 PIM routing table.
<RouterE> display pim ipv6 routing-table brief
VPN-Instance: public net
Total 9 (*, G) entries; 9 (S, G) entries
00001.(*, FF13::1)
Upstream interface:Pos1/0/1
Number of downstream:1
00002.(2001::1, FF13::1)
Upstream interface:Pos1/0/1
Number of downstream:1
00003.(*, FF13::2)
Upstream interface:Pos1/0/2
Number of downstream:1
00004.(2001::1, FF13::2)
Upstream interface:Pos1/0/2
Number of downstream:1
00005.(*, FF13::3)
Upstream interface:Pos1/0/3
Number of downstream:1
00006.(2001::1, FF13::3)
Upstream interface:Pos1/0/3
Number of downstream:1
00007.(*, FF13::4)
Upstream interface:Pos1/0/1
Number of downstream:1
00008.(2001::1, FF13::4)
Upstream interface:Pos1/0/1
Number of downstream:1
00009.(*, FF13::5)
Upstream interface:Pos1/0/1
Number of downstream:1
00010.(2001::1, FF13::5)
Upstream interface:Pos1/0/1
Number of downstream:1
00011.(*, FF13::6)
Upstream interface:Pos1/0/1
Number of downstream:1
00012.(2001::1, FF13::6)
Upstream interface:Pos1/0/2
Number of downstream:1
00013.(*, FF13::7)
Upstream interface:Pos1/0/2
Number of downstream:1
00014.(2001::1, FF13::7)
Upstream interface:Pos1/0/1
Number of downstream:1
00015.(*, FF13::8)
Upstream interface:Pos1/0/1
Number of downstream:1
00016.(2001::1, FF13::8)
Upstream interface:Pos1/0/1
Number of downstream:1
00017.(*, FF13::9)
Upstream interface:Pos1/0/1
Number of downstream:1
00018.(2001::1, FF13::9)
Upstream interface:Pos1/0/1
Number of downstream:1
The upstream interfaces of existent (*,G) and (S,G) entries keep unchanged. Since the IPv6
multicast load splitting weight of POS 1/0/1 is higher than that of POS 1/0/2, the newly generated
entries with the upstream interface being POS 1/0/1 are more than those with the upstream
14-16
Issue 04 (2010-08-31)
interface being POS 1/0/2. The IPv6 multicast load splitting weight of POS 1/0/3 is 0, which
indicates that this interface does not take part in load splitting of new entries.
----End
Configuration Files
l
Issue 04 (2010-08-31)
14-17
#
ipv6
#
multicast ipv6 routing-enable
#
isis 1
network-entity 10.0000.0000.0002.00
#
ipv6 enable topology standard
#
#
interface Pos1/0/0
link-protocol ppp
ipv6 enable
undo shutdown
ipv6 address 2002::2/64
isis ipv6 enable 1
pim ipv6 sm
#
interface Pos2/0/0
link-protocol ppp
ipv6 enable
undo shutdown
ipv6 address 2005::1/64
isis ipv6 enable 1
pim ipv6 sm
#
return
l
14-18
Issue 04 (2010-08-31)
network-entity 10.0000.0000.0004.00
#
ipv6 enable topology standard
#
#
interface Pos1/0/0
link-protocol ppp
ipv6 enable
undo shutdown
ipv6 address 2004::2/64
isis ipv6 enable 1
pim ipv6 sm
#
interface Pos2/0/0
link-protocol ppp
ipv6 enable
undo shutdown
ipv6 address 2007::1/64
isis ipv6 enable 1
pim ipv6 sm
#
return
l
Issue 04 (2010-08-31)
14-19
pim ipv6 sm
multicast ipv6 load-splitting weight 0
#
return
14-20
Issue 04 (2010-08-31)
15
Issue 04 (2010-08-31)
15-1
IGMP
MLD
MSDP
By default, the multicast trap function is disabled. You can enable the trap function for each
module and adjust the frequency of sending certain types of traps through command lines.
Issue 04 (2010-08-31)
Pre-configuration Tasks
Before configuring multicast network management, complete the following tasks:
l
Data Preparation
To configure multicast network management, you need the following data.
No.
Data
Procedure
Step 1 Run:
system-view
The multicast MIB view is displayed and multicast network management is enabled.
Issue 04 (2010-08-31)
15-3
After this function is enabled, multicast MIB is bound to the public network instance.
----End
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
15-5
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
Procedure
Step 1 Run:
system-view
15-6
Issue 04 (2010-08-31)
Run the display snmp-agent trap feature-name igmp all command to check the status
of the IGMP trap function.
Run the display snmp-agent trap feature-name mld all command to check the status of
the MLD trap function.
Run the display snmp-agent trap feature-name mrm all command to check the status of
the MRM trap function.
Run the display snmp-agent trap feature-name msdp all command to check the status
of the MSDP trap function.
Run the display snmp-agent trap feature-name pim all command to check the status of
the PIM trap function.
Run the display snmp-agent trap feature-name l2-multicast all command to check the
status of the l2-multicast trap function.
----End
15-7
Pre-configuration Tasks
Before adjusting the frequency for multicast protocols to send trap messages, complete the
following tasks:
l
Data Preparation
To adjust the frequency for multicast protocols to send trap messages, you need the following
data.
No.
Data
Number of trap messages about Join/Leave events sent by IGMP per second
Number of trap messages about Join/Leave events sent by MLD per second
Interval for sending trap messages about join failure due to multicast CAC
Procedure
Step 1 Run:
system-view
The number of trap messages about Join/Leave events sent by IGMP or MLD per second is set.
----End
15-8
Issue 04 (2010-08-31)
Procedure
Step 1 Run:
system-view
15.3.4 Adjusting the Interval for Sending Trap Messages About Join
Failure due to Multicast CAC
Context
Do as follows on the router managed by the NMS:
Procedure
l
Run:
system-view
Issue 04 (2010-08-31)
15-9
Run:
multicast-mib
Run:
multicast trap-interval cac min-interval
The interval for sending trap messages about IGMP or PIM Join failure due to
multicast CAC is set.
The value of min-interval ranges from 0 to 65535. The default value is 0.
l
Run:
system-view
Run:
multicast-mib
Run:
igmp trap-interval limit min-interval
The interval for sending trap messages of the failure of IGMP joining because the
number of the IGMP entries exceeds the limit is set.
The value of min-interval ranges from 0 to 65535. The default value is 0.
----End
Run the display pim mib-notification interval command to check the configured interval
for sending PIM MIB notification messages.
----End
15-10
Issue 04 (2010-08-31)
A Glossary
Glossary
(*, G)
A
ASM
Assert
Issue 04 (2010-08-31)
A-1
A Glossary
BSR
BSR
Administrative
Scope
C
CAC
D
Downstream
Interface
The interface that forwards multicast data. The router or the receiver
host that the sent multicast data reaches is called downstream router or
downstream host. The network segment where the downstream
interface resides is called downstream network segment.
DR
F
First-hop Router
The PIM router that directly connects to the multicast source and
forwards the multicast data sent by the multicast source.
Flooding
A-2
Issue 04 (2010-08-31)
A Glossary
Graft
Graft-Ack
Indicates the Graft Acknowledgement that is applicable only to PIMDM. After receiving a Graft message from the downstream node, the
router restores the forwarding function for the downstream node. Then
a Graft-Ack message is sent from the interface of the downstream node
to indicate the acceptance of the Graft message. If receiving no GraftAck message within a specified period, the router that sends the Graft
message considers that the upstream node does not receive the Graft
message and sends it again.
H
Hash function
I
IGMP
J
Join
Issue 04 (2010-08-31)
Leaf Router
Last-hop router
The PIM router that directly connects to a multicast group member and
forwards multicast data to the member.
A-3
A Glossary
A-4
MBGP
Mesh Group
MD
MDT
MLD
mping
Issue 04 (2010-08-31)
A Glossary
MSDP
The Multicast Source Discovery Protocol that is applicable only to PIMSM and is useful for only Any-Source Multicast (ASM). The MSDP
peers set up by RPs of different PIM-SM domains share the information
on the multicast source by sending Source Active (SA). The interdomain multicast is thus implemented. The MSDP peers set up by RPs
of the same PIM-SM domain share the information on the multicast
source by sending Source Active (SA). The Anycast RP is thus
implemented.
MT
MTI
mtrace
Issue 04 (2010-08-31)
PIM
PIM-DM
PIM-IPv6
PIM-IPv6 is the PIM protocol used on IPv6 networks. Its functions and
implementation principle are similar to those of PIM.
PIM-IPv6-DM
PIM-IPv6-SM
PIM-SM
A-5
A Glossary
Prune
R
Register
RP
RPF
RPF static route, also called static multicast route, is not used to forward
data. It affects only the RPF check. By configuration the static multicast
route, users can specify the RPF interface and the RPF neighbor for the
specific "packet source" on the current router.
RPT
The multicast distribution tree that takes RP as root and multicast group
members as leaf. RPT is applicable only to PIM-SM.
A-6
SA
SA-Cache
Issue 04 (2010-08-31)
Issue 04 (2010-08-31)
A Glossary
SA-request
When the local MSDP peer has new members, but has no (S, G)
information that meet the requirements, it sends the SA request to the
specified remote MSDP peer. After receiving the SA request message,
the specified remote MSDP peer immediately responds to the SA
request message if it has the (S, G) information that meets the
requirements.
Share-Group
Share-MDT
SPT
The Shortest Path Tree is a multicast distribution tree that takes the
multicast source as root and multicast group members as leaf. The SPT
is applicable to PIM-DM, PIM-SM and PIM-SSM.
SPT switch
The SPT switch is applicable only to the PIM-SM. When the rate of the
Register packet exceeds the threshold, The RP triggers the SPT switch,
sends a Join message to the multicast source, establishes the multicast
path from the source to the RP, and informs the DR not to send Register
message. When the packet rate of the RPT exceeds the threshold, DR
triggers the SPT switch, sends a Join message to the multicast source,
establishes the SPT from the source to the DR, and switch the multicast
data to the SPT.
SSM
static-rpf-peer
The static RPF peer is the special application of MSDP peer. You can
run the command to specify static RFP peer for the MSDP peer. The
SA message sent by the static RFP peer can be free of RFP check.
Switch-group-pool
One Share-Group uniquely confirms a Switch-group-pool. The Switchgroup-pool defines an address scope of a multicast group for the SwitchMDT switch. When the Switch-MDT is performed, an address that is
used for the smallest times is chosen from the Switch-group-pool. All
VPN multicast packets that enter the public network from a PE are
encapsulated with this Switch-group address.
A-7
A Glossary
Switch-MDT
U
Upstream Interface
A-8
The interface through which the local router receives multicast data.
The router or the multicast source that forwards multicast data to the
local router is called the upstream router or upstream multicast source.
The network segment where the upstream interface resides is called the
upstream network segment.
Issue 04 (2010-08-31)
This appendix collates frequently used acronyms and abbreviations in this document.
A
ASM
Any-Source Multicast
B
BGP
BSR
BootStrap Router
C
C-BSR
Candidate-BSR
C-RP
Candidate-RP
D
DR
Designated Router
I
IGMP
ISP
L
LSP
Issue 04 (2010-08-31)
B-1
MBGP
Multicast BGP
MP-BGP
MPLS
MSDP
MD
Multicast Domains
MLD
MT
Multicast Tunnel
MTI
MTD
O
OSPF
P
PIM
PIM-DM
PIM-SM
R
PR
Rendezvous Point
RPF
RPT
RP Tree
S
SA
Source Active
SSM
Source-Specific Multicast
SPT
V
VPN
B-2
Issue 04 (2010-08-31)