Table Of Contents
Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Prerequisites for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Restrictions for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Information About the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Intelligent Multicast Admission Control
Multicast Session Limit Support
Multicast Virtual Private Network
How to Configure the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Configuring a QoS Profile for a Multicast Group
Configuring Encryption for a Multicast Group
Configuring a Multicast QoS Group
Configuring a Default Multicast QoS Group for VRF
Verifying Configuration of the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Configuration Examples for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Configuring Group QoS and Group Encryption Profiles: Example
Configuring a QoS Group: Example
Feature Information for Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Revised: July 29, 2008, Cisco IOS Release 12.2(33)SCAFirst Published: February 14, 2008, Cisco IOS Release 12.2(33)SCA
The CMTS enhanced multicast new features are consistent with DOCSIS 3.0 specifications and include:
•
Enhanced multicast echo in which the Layer 3 multicast switching path uses a parallel express forwarding (PXF) multicast routing table.
•
Enhanced multicast quality of service (MQoS) framework that specifies a group configuration (GC) to define a session range of multicast addresses and rule priorities and its associated multicast VPN (MVPN).
•
Intelligent multicast admission control to include multicast service flows.
•
Enhanced multicast VPN feature to configure and support multicast traffic in a multiprotocol label switching (MPLS)-VPN environment.
Finding Feature Information in This Module
Your Cisco IOS software release may not support all of the features documented in this module. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the "Feature Information for Multicast VPN and DOCSIS 3.0 Multicast QoS Support" section.
Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Contents
•
Prerequisites for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
•
Restrictions for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
•
Information About the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
•
How to Configure the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
•
Configuration Examples for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
•
Feature Information for Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Prerequisites for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
DOCSIS 1.1 or 2.0 modems are required for multicast encryption. Table 1 shows the Cisco Cable Modem Termination System (CMTS) hardware compatibility prerequisites for this feature.
Restrictions for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
You can only configure type of service (ToS) for Cisco uBR7200 series universal broadband routers. This parameter is not recognized by the Cisco uBR10012 universal broadband router.
Information About the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
IP multicast—transmission of the same information to multiple cable network recipients—improves bandwidth efficiency and allows service providers to offer differentiated quality of service for different types of traffic. Enhanced multicast introduces multicast improvements as mandated by the introduction of DOCSIS 3.0 specifications.
Note
DOCSIS 3.0 standards retain backwards compatibility with the DOCSIS 2.0 multicast mode of operation.
The benefits of CMTS enhanced multicast are:
•
Improved multicast echo
•
Enhanced quality of service (QoS)
•
Intelligent multicast admission control
•
Multicast session limit support
•
Multicast virtual private network (VPN)
Improved Multicast Echo
In the enhanced multicast echo feature, the Layer 3 multicast switching path uses a parallel express forwarding (PXF) multicast routing table instead of the existing multicast echo path. Therefore, upstream packets are echoed using the Layer 3 switching path and all upstream data packets are treated similarly to the ingress packets from a WAN interface, in which they pass through existing classifiers and service flows.
The advantages of improved multicast echo are the following:
•
Each outgoing interface has its own DSJIB/DSBlaze header to satisfy baseline privacy interface plus (BPI+) and downstream session identifier (DSID) requirements.
•
The echoing decision is based on the PXF multicast routing table with packets forwarded only to interfaces that have existing clients.
•
There is independent control of echoing multicast traffic for a single cable interface within a defined cable bundle.
•
Bandwidth consumption is reduced because the upstream multicast data packets are not echoed to physical interfaces within the same cable bundle group that do not have an existing client.
•
The Internet Group Management Protocol (IGMP) control packets echo functionality is retained allowing the ability to selectively enable or disable multicast echo for IGMP reports and data.
•
Multicast QoS is supported because packets are following the same forwarding path as downstream multicast packets.
Enhanced Quality of Service
In the new multicast QoS (MQoS) framework, you can specify a group configuration (GC) that defines a session range of multicast addresses and rule priorities and its associated multicast VPN (MVPN). For every GC, there is attached a group QoS configuration (GQC) and a group encryption rule.
Based on the session range, rule priority, and MVPN, a multicast service flow is admitted into a GC and the associated GQC and group encryption rule are applied to the flow. In MQoS implementation, the source address of the multicast session is not checked because the current implementation for cable-specific multicast supports IGMP Version 2 but not IGMP Version 3. The downstream service flow, service identifier (SID), and MAC-rewrite string are created at the time of a new IGMP join (or static multicast group CLI on the interface) and MQoS is applied to the new multicast group join.
The benefits of enhanced QoS are the following:
•
Group classifiers can be applied at cable interface level and also at bundle interface level.
•
Group service flow (GSF) definition is based on service class names. The GSF is similar to individual service flows and commonly includes the minimum rate and maximum rate parameters for the service class. GSF is shared by all cable modems on a particular downstream channel set (DCS) that is matched to the same group classifier rule (GCR). A default service flow is used for multicast flows that do not match to any GCR. A GSF is always in the active state.
•
CMTS replicates multicast packets and then classifies them.
•
Single-stage replication and two-stage replication are supported.
•
Enhanced QoS is compatible and integrated with DOCSIS Set-Top Gateway (DSG).
Intelligent Multicast Admission Control
Admission control allows you to categorize service flows into buckets. Examples of categories are the service class name used to create the service flow, service flow priority, or the service flow type such as unsolicited grant service (UGS). Bandwidth limits for each bucket can also be defined. For example, you can define bucket 1 for high priority packet cable service flows and specify that bucket 1 is allowed a minimum of 30 percent and a maximum of 50 percent of the link bandwidth.
Intelligent multicast admission control includes additional features such as the inclusion of multicast service flows using the GSF concept. GSFs are created based on the rules as defined in the GQC table. The rules link the multicast streams to a GSF through the session range. The service class name in the rule defines the QoS for that GSF. Additionally, another attribute is added to the rules and the group configuration table to specify the application type to which each GSF belongs. In this way, the QoS associated with each GSF is independent of the bucket category for the GSF.
The benefits of intelligent multicast admission control are the following:
•
There is explicit acknowledgment of the establishment of each multicast session.
•
Admission control does not consume additional bandwidth for multicast flows once the first flow is established.
•
Service flows are cleaned up as the multicast session is torn down.
Multicast Session Limit Support
In a multicast video environment, you can limit the number of multicast sessions admitted onto a particular service flow. The multicast session limit feature—which adds functionality on top of the multicast QoS infrastructure—enables you to specify the number of multicast sessions to be admitted on a particular service flow. If the current number of sessions has reached the defined limit, new sessions will be forwarded but they will make use of the default multicast service flow until a session ends to free up a slot for new sessions.
Multicast Virtual Private Network
The new multicast VPN (MVPN) feature allows you to configure and support multicast traffic in a multiprotocol label switching (MPLS)-VPN environment. This feature supports routing and forwarding of multicast packets for each individual VPN virtual routing and forwarding (VRF) instance, and also provides a mechanism to transport VPN multicast packets across the service provider backbone.
MVPN allows you to connect multiple remote sites or devices over either a Layer 3 or Layer 2 VPN. A Layer 3 VPN enables the routing of traffic inside the VPN. A Layer 2 VPN provides a bridging transport mechanism for traffic between remote sites belonging to a customer. To support multicast over Layer 3 VPNs, each VPN receives a separate multicast domain with an associated MVPN routing and forwarding (mVRF) table maintained by the provider edge (PE) router. In a cable environment, the PE router is a routing CMTS. The provider network builds a default multicast distribution tree (default-MDT) for each VPN between all the associated mVRF-enabled PE routers. This tree is used to distribute multicast traffic to all PE routers.
To enable maximum security and data privacy in a VPN environment, the CMTS distinguishes between multicast sessions on the same downstream interface that belong to different VPNs. To differentiate multicast traffic between different VPNs, the CMTS implements a per-VRF subinterface multicast security association identifier (MSAID) allocation feature that is BPI+ enabled. The MSAID is allocated for each cable bundle group for each subinterface. A multicast group has a specific MSAID for each VRF instance.
How to Configure the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
This section contains the following procedures:
•
Configuring a QoS Profile for a Multicast Group
•
Configuring Encryption for a Multicast Group
•
Configuring a Multicast QoS Group
•
Configuring a Default Multicast QoS Group for VRF
•
Verifying Configuration of the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
Configuring a QoS Profile for a Multicast Group
To configure a QoS profile that can be applied to a QoS group configuration, use the cable multicast group-qos command. You must configure a QoS profile before you can add a QoS profile to a QoS multicast group.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
cable multicast group-qos number scn service-class-name control {single | aggregate [limit max-sessions]}
DETAILED STEPS
Configuring Encryption for a Multicast Group
To configure and enable an encryption profile that can be applied to a QoS group configuration (GC), use the cable multicast group-encryption command. You must configure an encryption profile before you can add an encryption profile to a QoS multicast group.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
cable multicast group-encryption number algorithm 56bit-des
DETAILED STEPS
Configuring a Multicast QoS Group
You can specify a group configuration (GC) that defines a session range of multicast addresses and rule priorities and its associated multicast VPN (MVPN). For every GC, there is attached a group QoS configuration and a group encryption rule.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
cable multicast group-encrytpion number algorithm 56bit-des
4.
cable multicast group-qos number scn service-class-name control {single | aggregate [limit max-sessions]}
5.
cable multicast qos group id priority value [global]
6.
session-range ip-address ip-mask
7.
tos low-byte high-byte mask
8.
vrf name
9.
application-id number
DETAILED STEPS
Command or Action PurposeStep 1
enable
Example:Router> enable
Enables privileged EXEC mode.
•
Enter your password if prompted.
Step 2
configure terminal
Example:Router# configure terminal
Enters global configuration mode.
Step 3
cable multicast group-encryption number algorithm 56bit-des
Example:Router(config-mqos)# cable multicast group-encryption 12 algorithm 56bit-des
(Optional) Specifies an encryption number and encryption type of a specific cable multicast QoS group encryption profile.
•
number—Enables encryption and specifies the encryption number that can be applied to a specific cable multicast QoS group. The valid range is 1-255.
•
algorithm 56bit-des—Specifies that the data encryption standard (DES) is 56 bits.
Step 4
cable multicast group-qos number scn service-class-name control {single | aggregate [limit max-sessions]}
Example:Router(config-mqos)# cable multicast group-qos 5 scn name1 control single
(Optional) Configures a QoS profile that can be applied to a multicast QoS group.
•
number—Specifies the QoS profile number that can be applied to a multicast QoS group. The valid range is 1-255.
Note
If a number is not specified, a default QoS profile is applied. The default group qos configuration creates a default multicast service flow for each cable interface that is used when a multicast session does not match any classifiers of a GC on the interface.
•
scn service-class-name—Specifies the service class name for the QoS profile service class.
•
control—Specifies the type of control to the service flow:
–
single-Specifies that a separate service flow is created for each session.
–
aggregate-Specifies that service flows are grouped for sessions in the same MQoS group.
•
limit max-sessions—(Optional) Specifies the Internet Group Management Protocol (IGMP) session limit for aggregate service flows. The valid range is 1-255.
Step 5
cable multicast qos group id priority value [global]
Example:Router(config)# cable multicast qos group 2 priority 6
Configures a multicast QoS group and enters multicast QoS configuration mode.
•
id—The number of the cable multicast QoS group. The valid range is 1-255.
•
priority value—The priority of the cable multicast QoS group. The valid range is 1-255.
•
global—(Optional) Specifies that the multicast QoS group configuration is applied to all cable interfaces.
Step 6
session-range ip-address ip-mask
Example:Router(config-mqos)# session-range 224.10.10.10 255.255.255.224
Specifies the session range IP address and IP mask of the multicast QoS group. You can configure multiple session ranges.
Step 7
tos low-byte high-byte mask
Example:Router(config-mqos)# tos 1 6 15
(Optional) Specifies the minimum type of service (ToS) data bytes, maximum ToS data bytes, and mask for a multicast QoS group. The valid range for each is 0-255.
Step 8
vrf name
Example:Router(config-mqos)# vrf name1
(Optional) Specifies the name for the virtual routing and forwarding (VRF) instance.
Note
If a multicast QoS (MQoS) group is not defined for this VRF, you will see an error message. You must either define a specific MQoS group for each VRF, or define a default MQoS group that can be assigned in those situations where no matching MQoS group is found. See the "Configuring a Default Multicast QoS Group for VRF" section.
Step 9
application-id number
Example:Router(config-mqos)# application-id 25
(Optional) Specifies the application identification number of the multicast QoS group. This value is configured to enable admission control to the multicast QoS group. The valid range is 1-65535.
Configuring a Default Multicast QoS Group for VRF
Each virtual routing and forwarding (VRF) instance that is defined must match a defined MQoS group to avoid multicast stream crosstalk between VRFs. To avoid potential crosstalk, define a default MQoS group that is assigned to the VRF whenever the multicast traffic in the VRF does not match an existing MQoS group.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
cable multicast group-encryption number algorithm 56bit-des
4.
cable multicast group-qos number scn service-class-name control {single | aggregate [limit max-sessions]}
5.
cable multicast qos group id priority 255 global
6.
session-range 224.0.0.0 224.0.0.0
7.
tos low-byte high-byte mask
8.
vrf name
9.
application-id number
DETAILED STEPS
Verifying Configuration of the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
To verify the configuration of the Multicast VPN and DOCSIS 3.0 Multicast QoS Support feature, use the show commands described below.
•
To show the configuration parameters for multicast sessions on a specific bundle, use the show interface bundle number multicast-sessions command as shown in the following example:
Router# show interface bundle 1 multicast-sessionsMulticast Sessions on Bundle1Group Interface GC SAID SFID GQC GEn RefCount GC-Interface State234.1.1.45 Bundle1.1 1 8193 --- 1 5 1 Bundle1 ACTIVE234.1.1.46 Bundle1.1 1 8193 --- 1 5 1 Bundle1 ACTIVE234.1.1.47 Bundle1.1 1 8193 --- 1 5 1 Bundle1 ACTIVEAggregate Multicast Sessions on Bundle1Aggregate Sessions for SAID 8193 GQC 1 CurrSess 3Group Interface GC SAID SFID AggGQC GEn RefCount GC-Interface234.1.1.45 Bundle1.1 1 8193 --- 1 5 1 Bundle1234.1.1.46 Bundle1.1 1 8193 --- 1 5 1 Bundle1234.1.1.47 Bundle1.1 1 8193 --- 1 5 1 Bundle1•
To show the configuration parameters for multicast sessions on a specific cable, use the show interface cable ip-addr multicast-sessions command as shown in the following example:
Router# show interface cable 7/0/0 multicast-sessionsDefault Multicast Service Flow 3 on Cable7/0/0Multicast Sessions on Cable7/0/0Group Interface GC SAID SFID GQC GEn RefCount GC-Interface State234.1.1.45 Bundle1.1 1 8193 24 1 5 1 Bundle1 ACTIVE234.1.1.46 Bundle1.1 1 8193 24 1 5 1 Bundle1 ACTIVE234.1.1.47 Bundle1.1 1 8193 24 1 5 1 Bundle1 ACTIVEAggregate Multicast Sessions on Cable7/0/0Aggregate Sessions for SAID 8193 SFID 24 GQC 1 CurrSess 3Group Interface GC SAID SFID AggGQC GEn RefCount GC-Interface234.1.1.45 Bundle1.1 1 8193 24 1 5 1 Bundle1234.1.1.46 Bundle1.1 1 8193 24 1 5 1 Bundle1234.1.1.47 Bundle1.1 1 8193 24 1 5 1 Bundle1•
To show the MSAID multicast group subinterface mapping, use the show interface cable address modem command as shown in the following example:
Router# show interface cable 6/1/0 modemSID Priv Type State IP address method MAC address Dualbits IP9 11 modem online(pt) 101.1.0.6 dhcp 0006.28f9.8c79 N9 11 host unknown 111.1.1.45 dhcp 0018.1952.a859 N10 10 modem online(pt) 101.1.0.5 dhcp 0006.5305.ac19 N10 10 host unknown 111.1.0.3 dhcp 0018.1952.a85a N13 10 modem online(pt) 101.1.0.3 dhcp 0014.f8c1.fd1c N8195 10 multicast unknown 224.1.1.51 static 0000.0000.0000 N8195 10 multicast unknown 224.1.1.49 static 0000.0000.0000 N8195 10 multicast unknown 224.1.1.50 static 0000.0000.0000 NConfiguration Examples for the Multicast VPN and DOCSIS 3.0 Multicast QoS Support Feature
This section provides the following configuration examples:
•
Configuring Group QoS and Group Encryption Profiles: Example
•
Configuring a QoS Group: Example
Configuring Group QoS and Group Encryption Profiles: Example
Note
To add group QoS and group encryption profiles to a QoS group, you must configure each profile first before configuring the QoS group.
In the following example, QoS profile 3 and encryption profile 35 are configured.
configure terminalcable multicast group-qos 3 scn name1 control singlecable multicast group-encryption 35 algorithm 56bit-desConfiguring a QoS Group: Example
In the following example, QoS group 2 is configured with a priority of 6 and global application. To QoS group 2, QoS profile 3 and encryption profile 35 are applied. Other parameters are configured for QoS group 2 including application type, session range, ToS, and VRF.
cable multicast qos group 2 priority 6 globalgroup-encryption 35group-qos 3session-range 224.10.10.01 255.255.255.254tos 1 6 15vrf vrf-name1application-id 44Where to Go Next
For further information on the commands required to configure, maintain, and troubleshoot Cicso uBR7200 series universal broadband routers, Cisco uBR10012 series universal broadband routers, and Cisco cable modems, see the Cisco IOS CMTS Cable Command Reference at http://www.cisco.com/en/US/docs/ios/cable/command/reference/cmts_cable_cref_wrapper.html
Additional References
The following sections provide references related to the Multicast VPN and DOCSIS 3.0 Multicast QoS Support feature.
Related Documents
Related Topic Document TitleCMTS cable commands
Cisco IOS CMTS Cable Command Reference
http://www.cisco.com/en/US/docs/ios/cable/command/reference/cmts_cable_cref_wrapper.html
DOCSIS 1.1 as it relates to Cisco CMTS
Cisco IOS CMTS Cable Software Configuration Guide
http://www.cisco.com/en/US/docs/ios/cable/configuration/guide/12_2sc/cbl_12_2sc_book.html
Standards
Standard TitleNo new or modified standards are supported by this feature, and support for existing standards has not been modified by this feature.
—
MIBs
RFCs
Technical Assistance
Feature Information for Multicast VPN and DOCSIS 3.0 Multicast QoS Support
Table 2 lists the release history for this feature.
Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.
Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Note
Table 2 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release. Unless noted otherwise, subsequent releases of that Cisco IOS software release also support that feature.
CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0807R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2008 Cisco Systems, Inc. All rights reserved.

