SA message filtering configuration

Network requirements

As shown in Figure 41, OSPF runs within and among the PIM-SM domains to provide unicast routing.

Set up an MSDP peering relationship between Switch A and Switch C and between Switch C and Switch D.

Source 1 sends multicast data to multicast groups 225.1.1.0/30 and 226.1.1.0/30, and Source 2 sends multicast data to multicast group 227.1.1.0/30.

Configure SA message policies to meet the following requirements:

Figure 41: Network diagram

Table 12: Interface and IP address assignment

Device

Interface

IP address

Device

Interface

IP address

Source 1

10.110.3.100/24

Switch C

Vlan-int300

10.110.4.1/24

Source 2

10.110.6.100/24

Switch C

Vlan-int104

10.110.5.1/24

Switch A

Vlan-int100

10.110.1.1/24

Switch C

Vlan-int101

192.168.1.2/24

Switch A

Vlan-int102

10.110.2.1/24

Switch C

Vlan-int103

192.168.2.2/24

Switch A

Vlan-int101

192.168.1.1/24

Switch C

Loop0

2.2.2.2/32

Switch A

Loop0

1.1.1.1/32

Switch D

Vlan-int400

10.110.6.1/24

Switch B

Vlan-int200

10.110.3.1/24

Switch D

Vlan-int500

10.110.7.1/24

Switch B

Vlan-int102

10.110.2.2/24

Switch D

Vlan-int104

10.110.5.2/24

Switch B

Vlan-int103

192.168.2.1/24

Switch D

Loop0

3.3.3.3/32

Configuration procedure

  1. Assign an IP address and subnet mask to each interface according to Figure 41. (Details not shown.)

  2. Configure OSPF on the switches in the PIM-SM domains. (Details not shown.)

  3. Enable IP multicast routing, IGMP, and PIM-SM, and configure a PIM domain border:

    # On Switch A, enable IP multicast routing.

    <SwitchA> system-view
    [SwitchA] multicast routing
    [SwitchA-mrib] quit
    

    # Enable IGMP on the receiver-side interface (VLAN-interface 100).

    [SwitchA] interface vlan-interface 100
    [SwitchA-Vlan-interface100] igmp enable
    [SwitchA-Vlan-interface100] quit
    

    # Enable PIM-SM on the other interfaces.

    [SwitchA] interface vlan-interface 101
    [SwitchA-Vlan-interface101] pim sm
    [SwitchA-Vlan-interface101] quit
    [SwitchA] interface vlan-interface 102
    [SwitchA-Vlan-interface102] pim sm
    [SwitchA-Vlan-interface102] quit
    [SwitchA] interface loopback 0
    [SwitchA-LoopBack0] pim sm
    [SwitchA-LoopBack0] quit
    

    # Enable IP multicast routing, IGMP, and PIM-SM on Switch B, Switch C, and Switch D in the same way Switch A is configured. (Details not shown.)

    # Configure a PIM domain border on Switch C.

    [SwitchC] interface vlan-interface 101
    [SwitchC-Vlan-interface101] pim bsr-boundary
    [SwitchC-Vlan-interface101] quit
    [SwitchC] interface vlan-interface 103
    [SwitchC-Vlan-interface103] pim bsr-boundary
    [SwitchC-Vlan-interface103] quit
    [SwitchC] interface vlan-interface 104
    [SwitchC-Vlan-interface104] pim bsr-boundary
    [SwitchC-Vlan-interface104] quit
    

    # Configure PIM domain borders on Switch A, Switch B, and Switch D in the same way Switch C is configured. (Details not shown.)

  4. Configure C-BSRs and C-RPs:

    # Configure Loopback 0 as a C-BSR and a C-RP on Switch A.

    [SwitchA] pim
    [SwitchA-pim] c-bsr 1.1.1.1
    [SwitchA-pim] c-rp 1.1.1.1
    [SwitchA-pim] quit
    

    # Configure C-BSRs and C-RPs on Switch C and Switch D in the same way Switch A is configured. (Details not shown.)

  5. Configure MSDP peers:

    # Configure an MSDP peer on Switch A.

    [SwitchA] msdp
    [SwitchA-msdp] peer 192.168.1.2 connect-interface vlan-interface 101
    [SwitchA-msdp] quit
    

    # Configure MSDP peers on Switch C.

    [SwitchC] msdp
    [SwitchC-msdp] peer 192.168.1.1 connect-interface vlan-interface 101
    [SwitchC-msdp] peer 10.110.5.2 connect-interface vlan-interface 104
    [SwitchC-msdp] quit
    

    # Configure an MSDP peer on Switch D.

    [SwitchD] msdp
    [SwitchD-msdp] peer 10.110.5.1 connect-interface vlan-interface 104
    [SwitchD-msdp] quit
    
  6. Configure SA message policies:

    # Configure an SA accepting and forwarding policy on Switch C so that Switch C will not forward SA messages for (Source 1, 225.1.1.0/30) to Switch D.

    [SwitchC] acl number 3001
    [SwitchC-acl-adv-3001] rule deny ip source 10.110.3.100 0 destination 225.1.1.0 0.0.0.3
    [SwitchC-acl-adv-3001] rule permit ip source any destination any
    [SwitchC-acl-adv-3001] quit
    [SwitchC] msdp
    [SwitchC-msdp] peer 10.110.5.2 sa-policy export acl 3001
    [SwitchC-msdp] quit
    

    # Configure an SA creation policy on Switch D so that Switch D will not create SA messages for Source 2.

    [SwitchD] acl number 2001
    [SwitchD-acl-basic-2001] rule deny source 10.110.6.100 0
    [SwitchD-acl-basic-2001] quit
    [SwitchD] msdp
    [SwitchD-msdp] import-source acl 2001
    [SwitchD-msdp] quit
    

Verifying the configuration

# Display the (S, G) entries in the SA message cache on Switch C.

[SwitchC] display msdp sa-cache
 MSDP Total Source-Active Cache - 8 entries
 Matched 8 entries

Source        Group          Origin RP       Pro  AS     Uptime   Expires
10.110.3.100  225.1.1.0      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  225.1.1.1      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  225.1.1.2      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  225.1.1.3      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  226.1.1.0      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  226.1.1.1      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  226.1.1.2      1.1.1.1         ?    ?      02:03:30 00:05:31
10.110.3.100  226.1.1.3      1.1.1.1         ?    ?      02:03:30 00:05:31

# Display the (S, G) entries in the SA message cache on Switch D.

[SwitchD] display msdp sa-cache
 MSDP Total Source-Active Cache - 4 entries
 Matched  4 entries

Source        Group          Origin RP       Pro  AS     Uptime   Expires
10.110.3.100  226.1.1.0      1.1.1.1         ?    ?      00:32:53 00:05:07
10.110.3.100  226.1.1.1      1.1.1.1         ?    ?      00:32:53 00:05:07
10.110.3.100  226.1.1.2      1.1.1.1         ?    ?      00:32:53 00:05:07
10.110.3.100  226.1.1.3      1.1.1.1         ?    ?      00:32:53 00:05:07