H3C Technologies H3C SecPath F1000-E - Manual (Page 623)

598
Configure the IP address and subnet mask of each interface as per Figure 334 . (Details not
shown.)
Enable OSPF on firewalls on the PIM-SM network to make sure the network-layer on the PIM-SM
network is interoperable and the routing information among the firewalls can be dynamically
updated. (Details not shown.)
2. Enable IP multicast routing, enable PIM-SM on each interface, and enable IGMP and IGMP SSM
mapping on the host-side interface:
# Enable IP multicast routing on SecPath D, enable PIM-SM on each interface and enable IGMPv3
and IGMP SSM mapping on GigabitEthernet 0/1.
system-view
[SecPathD] multicast routing-enable
[SecPathD] interface GigabitEthernet 0/1
[SecPathD-GigabitEthernet0/1] igmp enable
[SecPathD-GigabitEthernet0/1] igmp version 3
[SecPathD-GigabitEthernet0/1] igmp ssm-mapping enable
[SecPathD-GigabitEthernet0/1] pim sm
[SecPathD-GigabitEthernet0/1] quit
[SecPathD] interface GigabitEthernet 0/2
[SecPathD-GigabitEthernet0/2] pim sm
[SecPathD-GigabitEthernet0/2] quit
[SecPathD] interface GigabitEthernet 0/3
[SecPathD-GigabitEthernet0/3] pim sm
[SecPathD-GigabitEthernet0/3] quit
# Enable IP multicast routing on SecPath A, and enable PIM-SM on each interface.
system-view
[SecPathA] multicast routing-enable
[SecPathA] interface GigabitEthernet 0/1
[SecPathA-GigabitEthernet0/1] pim sm
[SecPathA-GigabitEthernet0/1] quit
[SecPathA] interface GigabitEthernet 0/2
[SecPathA-GigabitEthernet0/2] pim sm
[SecPathA-GigabitEthernet0/2] quit
[SecPathA] interface GigabitEthernet 0/3
[SecPathA-GigabitEthernet0/3] pim sm
[SecPathA-GigabitEthernet0/3] quit
The configuration on SecPath B and SecPath C is similar to that on SecPath A.
3. Configure a C-BSR and a C-RP:
# Configure C-BSR and C-RP interfaces on SecPath D.
[SecPathD] pim
[SecPathD-pim] c-bsr GigabitEthernet 0/3
[SecPathD-pim] c-rp GigabitEthernet 0/3
[SecPathD-pim] quit
4. Configure the SSM group range:
# Configure the SSM group range 232.1.1.0/24 on SecPath D.
[SecPathD] acl number 2000
[SecPathD-acl-basic-2000] rule permit source 232.1.1.0 0.0.0.255
[SecPathD-acl-basic-2000] quit