H3c-technologies H3C S3100V2 Series Switches Uživatelský manuál

H3C S3100V2 Switch Series IP Multicast Configuration Guide Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software

2 In unicast transmission, the traffic transmitted over the network is proportional to the number of hosts that need the information. If a large numbe

92 [SwitchA] domain domain1 [SwitchA-isp-domian1] authentication lan-access radius-scheme scheme1 [SwitchA-isp-domian1] authorization lan-access radi

93 # Create an ISP domain domain2; reference scheme2 for the authentication, authorization, and accounting for LAN users; specify domain2 as the defa

94 Host port(s):total 1 port(s). Eth1/0/3 The output shows that Ethernet 1/0/3 on Switch B has joined FF1E::101 but not FF1E::1

95 Analysis • The IPv6 ACL rule is incorrectly configured. • The IPv6 multicast group policy is not correctly applied. • The function of droppin

96 IPv6 multicast VLAN configuration(available only on the S3100V2-EI) This chapter includes these sections: • Introduction to IPv6 multicast VLAN •

97 Figure 30 Port-based IPv6 multicast VLAN After the configuration, upon receiving an MLD message on a user port, Switch A tags the message with t

98 Configuration prerequisites Before you configure port-based IPv6 multicast VLAN, complete the following tasks: • Create VLANs as required • Ena

99 To do... Use the command... Remarks Configure the specified VLAN as an IPv6 multicast VLAN and enter IPv6 multicast VLAN view multicast-vlan ipv

100 • MLDv1 runs on Router A. MLDv1 snooping runs on Switch A. Router A acts as the MLD querier. • Switch A’s Ethernet 1/0/1 belongs to VLAN 10, E

101 [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 10, assign Ethernet 1/0/1 to VLAN 10, and enable MLD snooping in this VLAN. [Sw

3 Figure 3 Multicast transmission In Figure 3, Host B, Host D and Host E are receivers of the information. They must join the multicast group. The r

102 Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):10. Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router

103 Index C D I M T C Configuring an IGMP snooping policy,27 Configuring an MLD snooping policy,73 Configuring basic functions of IGMP snooping,18 C

4 For a better understanding of the multicast concept, you can compare multicast transmission with the transmission of TV programs. Table 1 An analog

5 Multicast models Multicast models—any-source multicast (ASM), source-filtered multicast (SFM), and source-specific multicast (SSM)—determines how th

6 4. Multicast applications—A software system that supports multicast applications, such as video conferencing, must be installed on multicast sources

7 Address Description 224.0.0.6 OSPF designated routers/backup designated routers 224.0.0.7 Shared Tree (ST) routers 224.0.0.8 ST hosts 224.0.0.9

8 Bit Description T • When set to 0, it indicates that this address is an IPv6 multicast address permanently-assigned by IANA. • When set to 1, it i

9 The most-significant four bits of a multicast IPv4 address are 1110, which indicates that this address is a multicast address. Only 23 bits of the r

10 Figure 8 Positions of Layer 3 multicast protocols 1. Multicast group management protocols Typically, the internet group management protocol (I

11 Figure 9 Positions of Layer 2 multicast protocols SourceReceiver Receiver IPv4/IPv6 multicast packetsIGMP Snooping/MLD SnoopingMulticast VLAN/IPv6

Copyright © 2011, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmitted i

12 IGMP snooping configuration This chapter includes these sections: • IGMP snooping overview • IGMP snooping configuration task list • Displaying

13 • Reducing Layer 2 broadcast packets, saving network bandwidth • Enhancing the security of multicast traffic • Facilitating the implementation

14 Aging timers for dynamic ports in IGMP snooping and related messages and actions Table 6 Aging timers for dynamic ports in IGMP snooping and relat

15 • If no entry in the forwarding table exists for the reported group, the switch creates an entry, adds the port as a dynamic member port to the o

16 The switch removes the port from the outgoing port list of the entry in the forwarding table for that multicast group when the aging timer expires

17 IGMP message Actions Report When receiving a report for a multicast group, the proxy looks up the multicast forwarding table for the entry for th

18 Task Remarks Configuring the function of dropping unknown multicast data Optional Configuring IGMP report suppression Optional Configuring maxi

19 NOTE: • Enable IGMP snooping globally before enable it in a VLAN. • When you enable IGMP snooping in a specified VLAN, this function takes e

20 Configuring a static multicast MAC address entry in interface view Follow these steps to configure static multicast MAC address entries in interfa

21 If multicast group memberships change frequently, set a relatively small value for the dynamic member port aging timer, and vice versa. Configuri

Preface The H3C S3100V2 documentation set includes 9 configuration guides, which describe the software features for the S3100V2 Switch Series and guid

22 To do... Use the command... Remarks Configure the port(s) as static router port(s) igmp-snooping static-router-port vlan vlan-id Required No s

23 Configuring fast leave processing The fast leave processing feature allows the switch to process IGMP leave messages in a fast way. With the fast

24 To solve these problems, disable that switch port from changing into a dynamic router port upon receiving an IGMP general query or a PIM Hello mes

25 Follow these steps to enable IGMP snooping querier: To do... Use the command... Remarks Enter system view system-view — Enter VLAN view vlan

26 Configuring IGMP queries and responses in a VLAN Follow these steps to configure IGMP queries and responses in a VLAN: To do... Use the command.

27 • Determine the source IP address for the IGMP reports sent by the proxy • Determine the source IP address for the IGMP leave messages sent by t

28 Configuring a multicast group filter On an IGMP snooping–enabled switch, a multicast group filter enables the service provider to define restricti

29 Configuring multicast source port filtering globally Follow these steps to configure multicast source port filtering globally: To do... Use the

30 are attached to the Layer 2 device, the Layer 3 device directly connected with it will receive duplicate IGMP reports from these members. With th

31 Configuring multicast group replacement For various reasons, the number of multicast groups that can be joined on the current switch or a port mig

Convention Description &<1-n> The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times

32 Configuring 802.1p precedence for IGMP messages globally Follow these steps to configure 802.1p precedence for IGMP messages globally: To do... U

33 To do... Use the command... Remarks Return to system view quit — Enable the created user profile user-profile profile-name enable Required D

34 IGMP snooping configuration examples Group policy and simulated joining configuration example Network requirements • As shown in Figure 13, Route

35 [RouterA-Ethernet1/0/2] quit 3. Configure Switch A # Enable IGMP snooping and the function of dropping unknown multicast traffic globally. <S

36 Attribute: Host Port Host port(s):total 2 port. Eth1/0/3 (D) ( 00:03:23 ) Eth1/0/4

37 Figure 14 Network diagram for static port configuration Source1.1.1.1/24Router AIGMP querierEth1/0/110.1.1.1/24Switch ASwitch BSwitch CEth1/0/1Et

38 # Configure Ethernet 1/0/3 to be a static router port. [SwitchA] interface ethernet 1/0/3 [SwitchA-Ethernet1/0/3] igmp-snooping static-router-por

39 Router port(s):total 2 port. Eth1/0/1 (D) ( 00:01:30 ) Eth1/0/3 (S) IP group(s):the

40 IGMP snooping querier configuration example Network requirements • As shown in Figure 15, in a Layer 2–only network environment, two multicast so

41 # Set the source IP address of IGMP general queries and group-specific queries to 192.168.1.1 in VLAN 100. [SwitchA-vlan100] igmp-snooping genera

[Technical Support & Documents > Technical Documents] – Provides hardware installation, software upgrading, and software feature configuration

42 Configure IGMP snooping proxying on Switch A, enabling the switch to forward IGMP reports and leave messages on behalf of attached hosts and to re

43 [SwitchA-vlan100] quit 4. Verify the configuration After the configuration is completed, Host A and Host B send IGMP join messages for group 224.

44 Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port Subvlan flags: R

45 Figure 17 Network diagram for multicast source/user control policy configuration Switch BReceiverHost AHost B2.1.1.1/24Eth1/0/2Eth1/0/3Eth1/0/1Sou

46 [SwitchA] interface vlan-interface 104 [SwitchA-Vlan-interface104] pim dm [SwitchA-Vlan-interface104] igmp enable [SwitchA-Vlan-interface104] quit

47 [SwitchA-isp-domian1] authentication lan-access radius-scheme scheme1 [SwitchA-isp-domian1] authorization lan-access radius-scheme scheme1 [Switch

48 [SwitchB] domain domain2 [SwitchB-isp-domian2] authentication lan-access radius-scheme scheme2 [SwitchB-isp-domian2] authorization lan-access radi

49 The output shows that Ethernet 1/0/3 on Switch B has joined 224.1.1.1 but not 224.1.1.2. Assume that Source 2 starts sending multicast traffic to

50 Analysis • The ACL rule is incorrectly configured. • The multicast group policy is not correctly applied. • The function of dropping unknown

51 Multicast VLAN configuration This chapter includes these sections: • Introduction to multicast VLAN • Multicast VLAN configuration task list •

i Contents Multicast overview ························································································································

52 Figure 19 Port-based multicast VLAN After the configuration, upon receiving an IGMP message on a user port, Switch A tags the message with the m

53 Configuration prerequisites Before you configure port-based multicast VLAN, complete the following tasks: • Create VLANs as required • Enable I

54 To do... Use the command... Remarks Enter system view system-view — Configure the specified VLAN as a multicast VLAN and enter multicast VLAN v

55 Multicast VLAN configuration examples Port-based multicast VLAN configuration Network requirements • As shown in Figure 20, Router A connects to

56 <RouterA> system-view [RouterA] multicast routing-enable [RouterA] interface ethernet 1/0/1 [RouterA-Ethernet1/0/1] pim dm [RouterA-Ethernet

57 [SwitchA] display multicast-vlan Total 1 multicast-vlan(s) Multicast vlan 10 port list: Eth1/0/2 Eth1/0/3

58 MLD snooping configuration(available only on the S3100V2-EI) This chapter includes these sections: • MLD snooping overview • MLD snooping config

59 MLD snooping forwards multicast data to only the receivers that require it at Layer 2. It brings the following advantages: • Reducing Layer 2 bro

60 Aging timers for dynamic ports in MLD snooping Table 8 Aging timers for dynamic ports in MLD snooping and related messages and actions Timer Desc

61 • If no forwarding table entry exists for the reported IPv6 multicast group, the switch creates an entry, adds the port as a dynamic member port

ii Configuring 802.1p precedence for IGMP messages ······················································································ 31 Configuri

62 NOTE: Even though an MLD snooping proxy is a host from the perspective of its upstream device, the MLD membership report suppression mechanism

63 Protocols and standards • RFC 4541, Considerations for Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) Snooping

64 NOTE: • In MLD-snooping view, the configuration is effective for all VLANs. In VLAN view, the configuration is effective on only the ports that

65 Configuring the version of MLD snooping By configuring the MLD snooping version, you actually configure the version of MLD messages that MLD snoop

66 To do... Use the command... Remarks Enter Ethernet interface/Layer 2 aggregate interface view or port group view interface interface-type interf

67 Configuring aging timers for dynamic ports globally Follow these steps to configure aging timers for dynamic ports globally: To do... Use the co

68 NOTE: • An IPv6 static (S, G) join takes effect only if a valid IPv6 multicast source address is specified and MLDsnooping version 2 is current

69 Configuring fast leave processing The fast leave processing feature enables the switch to process MLD done messages quickly. When the fast leave p

70 To solve these problems, disable that switch port from changing into a dynamic router port upon receiving an MLD general query or IPv6 PIM Hello m

71 To do... Use the command... Remarks Enter VLAN view vlan vlan-id — Enable the MLD snooping querier mld-snooping querier Required Disabled by

iii Configuring an IPv6 multicast group filter ·······································································································

72 To do... Use the command... Remarks Configure MLD query interval mld-snooping query-interval interval Optional 125 seconds by default Configur

73 Enabling MLD snooping proxying The MLD snooping proxying function works on a per-VLAN basis. After you enable the function in a VLAN, the device w

74 Configuring an IPv6 multicast group filter On a MLD snooping-enabled switch, the configuration of an IPv6 multicast group filter enables the servi

75 Follow these steps to enable dropping unknown IPv6 multicast data globally: To do... Use the command... Remarks Enter system view system-view

76 NOTE: • When the number of IPv6 multicast groups that can be joined on a port reaches the maximum numberconfigured, the system deletes all the

77 CAUTION: Be sure to configure the maximum number of IPv6 multicast groups allowed on a port before enabling IPv6multicast group replacement. Othe

78 Follow these steps to configure a multicast user control policy To do... Use the command... Remarks Enter system view system-view — Create a u

79 NOTE: • The reset mld-snooping group command works on only an MLD snooping–enabled VLAN, but cannotwork on a VLAN with MLD enabled on its VLAN

80 2. Configure Router A # Enable IPv6 multicast routing, enable IPv6 PIM-DM on each interface, and enable MLDv1 on Ethernet 1/0/1. <RouterA>

81 Port flags: D-Dynamic port, S-Static port, C-Copy port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s). To

1 Multicast overview NOTE: This document focuses on the IP multicast technology and device operations. Unless otherwise stated, theterm multicast i

82 Figure 25 Network diagram for static port configuration Source1::1/64Router AMLD querierEth1/0/12001::1/64Switch ASwitch BSwitch CEth1/0/1Eth1/0/

83 [SwitchA-vlan100] quit # Configure Ethernet 1/0/3 to be a static router port. [SwitchA] interface ethernet 1/0/3 [SwitchA-Ethernet1/0/3] mld-snoo

84 Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 2 port(s). Eth1/0/1

85 MLD snooping querier configuration example Network requirements • As shown in Figure 26, in a Layer-2-only network environment, two multicast sou

86 2. Configure Switch B # Enable IPv6 forwarding and enable MLD snooping and the function of dropping unknown IPv6 multicast data packets globally

87 Figure 27 Network diagram for MLD snooping proxying configuration SourceRouter AMLD querierReceiverReceiverHost AHost BHost C1::1/64Eth1/0/4Eth1/0

88 4. Verify the configuration After the configuration is completed, Host A and Host B send MLD join messages addressed to group FF1E::101. When rec

89 Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port Subvlan flags: R

90 Figure 28 Network diagram for IPv6 multicast source/user control policy configuration Configuration procedures 1. Configure IP addresses for in

91 [SwitchA] interface vlan-interface 104 [SwitchA-Vlan-interface104] pim ipv6 dm [SwitchA-Vlan-interface104] mld enable [SwitchA-Vlan-interface104]