H3C Technologies H3C SecPath F1000-E User Manual
Page 672
647
[SecPathA-GigabitEthernet0/1] quit
[SecPathA] interface GigabitEthernet 0/2
[SecPathA-GigabitEthernet0/2] pim sm
[SecPathA-GigabitEthernet0/2] quit
[SecPathA] interface GigabitEthernet 0/3
[SecPathA-GigabitEthernet0/3] pim sm
[SecPathA-GigabitEthernet0/3] quit
The configuration on Router A and Router B is similar to that on SecPath A. The configuration on
SecPath B and SecPath C is also similar to that on SecPath A except that it is not necessary to
enable IGMP on the corresponding interfaces on these two routers.
3.
Configure the SSM group range:
# Configure the SSM group range to be 232.1.1.0/24 on SecPath A.
[SecPathA] acl number 2000
[SecPathA-acl-basic-2000] rule permit source 232.1.1.0 0.0.0.255
[SecPathA-acl-basic-2000] quit
[SecPathA] pim
[SecPathA-pim] ssm-policy 2000
[SecPathA-pim] quit
The configuration on Router A, Router B, SecPath B and SecPath C is similar to that on SecPath A.
4.
Verify the configuration:
Use the display pim interface command to display PIM information on each interface of firewalls.
For example:
# Display PIM configuration information on SecPath A.
[SecPathA] display pim interface
Interface NbrCnt HelloInt DR-Pri DR-Address
GE0/1 0 30 1 10.110.1.1 (local)
GE0/2 1 30 1 192.168.1.2
GE0/3 1 30 1 192.168.9.2
Assume that Host A needs to receive the information a specific multicast source S
(10.110.5.100/24) sends to multicast group G (232.1.1.1). SecPath A builds an SPT toward the
multicast source. Firewalls on the SPT path (SecPath A and SecPath B) have generated (S, G) entry,
but SecPath C, which is not on the SPT path, does not have multicast routing entries. You can use
the display pim routing-table command to display PIM routing table information on each firewall.
For example:
# Display PIM routing table information on SecPath A.
[SecPathA] display pim routing-table
Total 0 (*, G) entry; 1 (S, G) entry
(10.110.5.100, 232.1.1.1)
Protocol: pim-ssm, Flag:
UpTime: 00:13:25
Upstream interface: GigabitEthernet0/3
Upstream neighbor: 192.168.1.2
RPF prime neighbor: 192.168.1.2
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet0/1
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer