SA message filtering configuration
Network requirements
As shown in Figure 41, OSPF runs within and among the PIM-SM domains to provide unicast routing.
Set up an MSDP peering relationship between Switch A and Switch C and between Switch C and Switch D.
Source 1 sends multicast data to multicast groups 225.1.1.0/30 and 226.1.1.0/30, and Source 2 sends multicast data to multicast group 227.1.1.0/30.
Configure SA message policies to meet the following requirements:
Host A and Host B receive the multicast data only addressed to multicast groups 225.1.1.0/30 and 226.1.1.0/30.
Host C receives the multicast data only addressed to multicast groups 226.1.1.0/30 and 227.1.1.0/30.
Figure 41: Network diagram
Table 12: Interface and IP address assignment
Device | Interface | IP address | Device | Interface | IP address |
---|---|---|---|---|---|
Source 1 | — | 10.110.3.100/24 | Switch C | Vlan-int300 | 10.110.4.1/24 |
Source 2 | — | 10.110.6.100/24 | Switch C | Vlan-int104 | 10.110.5.1/24 |
Switch A | Vlan-int100 | 10.110.1.1/24 | Switch C | Vlan-int101 | 192.168.1.2/24 |
Switch A | Vlan-int102 | 10.110.2.1/24 | Switch C | Vlan-int103 | 192.168.2.2/24 |
Switch A | Vlan-int101 | 192.168.1.1/24 | Switch C | Loop0 | 2.2.2.2/32 |
Switch A | Loop0 | 1.1.1.1/32 | Switch D | Vlan-int400 | 10.110.6.1/24 |
Switch B | Vlan-int200 | 10.110.3.1/24 | Switch D | Vlan-int500 | 10.110.7.1/24 |
Switch B | Vlan-int102 | 10.110.2.2/24 | Switch D | Vlan-int104 | 10.110.5.2/24 |
Switch B | Vlan-int103 | 192.168.2.1/24 | Switch D | Loop0 | 3.3.3.3/32 |
Configuration procedure
Assign an IP address and subnet mask to each interface according to Figure 41. (Details not shown.)
Configure OSPF on the switches in the PIM-SM domains. (Details not shown.)
Enable IP multicast routing, IGMP, and PIM-SM, and configure a PIM domain border:
# On Switch A, enable IP multicast routing.
<SwitchA> system-view [SwitchA] multicast routing [SwitchA-mrib] quit
# Enable IGMP on the receiver-side interface (VLAN-interface 100).
[SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] igmp enable [SwitchA-Vlan-interface100] quit
# Enable PIM-SM on the other interfaces.
[SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface vlan-interface 102 [SwitchA-Vlan-interface102] pim sm [SwitchA-Vlan-interface102] quit [SwitchA] interface loopback 0 [SwitchA-LoopBack0] pim sm [SwitchA-LoopBack0] quit
# Enable IP multicast routing, IGMP, and PIM-SM on Switch B, Switch C, and Switch D in the same way Switch A is configured. (Details not shown.)
# Configure a PIM domain border on Switch C.
[SwitchC] interface vlan-interface 101 [SwitchC-Vlan-interface101] pim bsr-boundary [SwitchC-Vlan-interface101] quit [SwitchC] interface vlan-interface 103 [SwitchC-Vlan-interface103] pim bsr-boundary [SwitchC-Vlan-interface103] quit [SwitchC] interface vlan-interface 104 [SwitchC-Vlan-interface104] pim bsr-boundary [SwitchC-Vlan-interface104] quit
# Configure PIM domain borders on Switch A, Switch B, and Switch D in the same way Switch C is configured. (Details not shown.)
Configure C-BSRs and C-RPs:
# Configure Loopback 0 as a C-BSR and a C-RP on Switch A.
[SwitchA] pim [SwitchA-pim] c-bsr 1.1.1.1 [SwitchA-pim] c-rp 1.1.1.1 [SwitchA-pim] quit
# Configure C-BSRs and C-RPs on Switch C and Switch D in the same way Switch A is configured. (Details not shown.)
Configure MSDP peers:
# Configure an MSDP peer on Switch A.
[SwitchA] msdp [SwitchA-msdp] peer 192.168.1.2 connect-interface vlan-interface 101 [SwitchA-msdp] quit
# Configure MSDP peers on Switch C.
[SwitchC] msdp [SwitchC-msdp] peer 192.168.1.1 connect-interface vlan-interface 101 [SwitchC-msdp] peer 10.110.5.2 connect-interface vlan-interface 104 [SwitchC-msdp] quit
# Configure an MSDP peer on Switch D.
[SwitchD] msdp [SwitchD-msdp] peer 10.110.5.1 connect-interface vlan-interface 104 [SwitchD-msdp] quit
Configure SA message policies:
# Configure an SA accepting and forwarding policy on Switch C so that Switch C will not forward SA messages for (Source 1, 225.1.1.0/30) to Switch D.
[SwitchC] acl number 3001 [SwitchC-acl-adv-3001] rule deny ip source 10.110.3.100 0 destination 225.1.1.0 0.0.0.3 [SwitchC-acl-adv-3001] rule permit ip source any destination any [SwitchC-acl-adv-3001] quit [SwitchC] msdp [SwitchC-msdp] peer 10.110.5.2 sa-policy export acl 3001 [SwitchC-msdp] quit
# Configure an SA creation policy on Switch D so that Switch D will not create SA messages for Source 2.
[SwitchD] acl number 2001 [SwitchD-acl-basic-2001] rule deny source 10.110.6.100 0 [SwitchD-acl-basic-2001] quit [SwitchD] msdp [SwitchD-msdp] import-source acl 2001 [SwitchD-msdp] quit
Verifying the configuration
# Display the (S, G) entries in the SA message cache on Switch C.
[SwitchC] display msdp sa-cache MSDP Total Source-Active Cache - 8 entries Matched 8 entries Source Group Origin RP Pro AS Uptime Expires 10.110.3.100 225.1.1.0 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 225.1.1.1 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 225.1.1.2 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 225.1.1.3 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 226.1.1.0 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 226.1.1.1 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 226.1.1.2 1.1.1.1 ? ? 02:03:30 00:05:31 10.110.3.100 226.1.1.3 1.1.1.1 ? ? 02:03:30 00:05:31
# Display the (S, G) entries in the SA message cache on Switch D.
[SwitchD] display msdp sa-cache MSDP Total Source-Active Cache - 4 entries Matched 4 entries Source Group Origin RP Pro AS Uptime Expires 10.110.3.100 226.1.1.0 1.1.1.1 ? ? 00:32:53 00:05:07 10.110.3.100 226.1.1.1 1.1.1.1 ? ? 00:32:53 00:05:07 10.110.3.100 226.1.1.2 1.1.1.1 ? ? 00:32:53 00:05:07 10.110.3.100 226.1.1.3 1.1.1.1 ? ? 00:32:53 00:05:07