- Release 15.5SY Supervisor Engine 6T Software Configuration Guide
- Preface
- Product Overview
- Command-Line Interfaces
- Smart Port Macros
- Virtual Switching Systems (VSS)
- Enhanced Fast Software Upgrade (eFSU)
- Fast Software Upgrades
- Stateful Switchover (SSO)
- Non-Stop Forwarding (NSF)
- RPR Supervisor Engine Redundancy
- Interface Configuration
- UniDirectional Link Detection (UDLD)
- Instant Access
- EnergyWise
- Power Management
- Environmental Monitoring
- Online Diagnostics
- Onboard Failure Logging (OBFL)
- Switch Fabric Functionality
- Cisco IP Phone Support
- Power over Ethernet
- Layer 2 LAN Port Configuration
- Flex Links
- EtherChannels
- IEEE 802.1ak MVRP and MRP
- VLAN Trunking Protocol (VTP)
- VLANs
- Private VLANs (PVLANs)
- Private Hosts
- IEEE 802.1Q Tunneling
- Layer 2 Protocol Tunneling
- Spanning Tree Protocols (STP, MST)
- Optional STP Features
- IP Unicast Layer 3 Switching
- Policy Based Routing (PBR)
- Layer 3 Interface Configuration
- Unidirectional Ethernet (UDE) and unidirectional link routing (UDLR)
- Multiprotocol Label Switching (MPLS)
- MPLS VPN Support
- Ethernet over MPLS (EoMPLS)
- Virtual Private LAN Services (VPLS)
- L2VPN Advanced VPLS (A-VPLS)
- Ethernet Virtual Connections (EVC)
- Layer 2 over Multipoint GRE (L2omGRE)
- Campus Fabric
- IPv4 Multicast Layer 3 Features
- IPv4 Multicast IGMP Snooping
- IPv4 PIM Snooping
- IPv4 Multicast VLAN Registration (MVR)
- IPv4 IGMP Filtering
- IPv4 Router Guard
- IPv4 Multicast VPN Support
- IPv6 Multicast Layer 3 Features
- IPv6 MLD Snooping
- NetFlow Hardware Support
- System Event Archive (SEA)
- Backplane Platform Monitoring
- Local SPAN, RSPAN, and ERSPAN
- SNMP IfIndex Persistence
- Top-N Reports
- Layer 2 Traceroute Utility
- Mini Protocol Analyzer
- PFC QoS Guidelines and Restrictions
- PFC QoS Overview
- PFC QoS Classification, Marking, and Policing
- PFC QoS Policy Based Queueing
- PFC QoS Global and Interface Options
- AutoQoS
- MPLS QoS
- PFC QoS Statistics Data Export
- Cisco IOS ACL Support
- Cisco TrustSec (CTS)
- AutoSecure
- MAC Address-Based Traffic Blocking
- Port ACLs (PACLs)
- VLAN ACLs (VACLs)
- Policy-Based Forwarding (PBF)
- Denial of Service (DoS) Protection
- Control Plane Policing (CoPP)
- Dynamic Host Configuration Protocol (DHCP) Snooping
- Configuring IGMP Proxy
- IP Source Guard
- Dynamic ARP Inspection (DAI)
- Traffic Storm Control
- Unknown Unicast and Multicast Flood Control
- IEEE 802.1X Port-Based Authentication
- Configuring Web-Based Authentication
- Port Security
- Lawful Intercept
- Online Diagnostic Tests
- Prerequisites for IPv4 Multicast Layer3 Features
- Restrictions for IPv4 Multicast Layer3 Features
- Information About IPv4 Multicast Layer3 Features
- IPv4 Multicast Layer3 Features Overview
- Distributed MRIB and MFIB Infrastructure
- Multicast Layer3 Hardware Features Entries
- Layer3-Switched Multicast Statistics
- Layer3-Switched Multicast Packet Rewrite
- Replication Modes
- Local Egress Replication Mode
- PIM-SM hardware register support
- PIM-SM hardware SPT-switchover support
- Control Plane Policing (CoPP)
- Non-RPF Traffic Processing
- Multicast Boundary
- IPv4 Bidirectional PIM
- Supported Multicast Features
- Hardware-Supported IPv4 Layer 3 Features
- Unsupported IPv4 Layer 3 Features
- Hardware-Supported IPv6 Layer 3 Multicast Features
- Partially Hardware-Supported IPv6 Layer 3 Multicast Features
- Software-Supported IPv6 Layer 3 Multicast Features
- Unsupported IPv6 Layer 3 Multicast Features
- Hardware-Supported Layer 2 Common Multicast Features
- Unsupported Layer 2 Common Multicast Features
- Hardware-Supported Layer 2 Enterprise Multicast Features
- Unsupported Layer 2 Enterprise Multicast Features
- Hardware-Supported Layer 2 Metro Multicast Features
- Unsupported Layer 2 Metro Multicast Features
- Unsupported MPLS Multicast Features
- Hardware-Supported Security Multicast Features
- Software-Supported Security Multicast Features
- Unsupported Security Multicast Features
- Enabling IPv4 Multicast Routing Globally
- Enabling IPv4 PIM on Layer3 Interfaces
- Enabling IP Multicast Layer3 Switching on Layer3 Interfaces
- Enabling IP MFIB forwarding on Layer3 Interfaces
- Configuring the Replication Mode
- Configuring Multicast Boundary
- Verifying Local Egress Replication
- Displaying IPv4 Multicast PIM-SM register tunnel information
- Displaying the IPv4 Multicast Routing Table
- Displaying IPv4 MRIB Information
- Displaying IPv4 MFIB Information
- Viewing Directly Connected Entries
- Displaying IPv4 Hardware Switching Information
- Displaying IPv4 CoPP Information
- Source-Specific Multicast with IGMPv3, IGMP v3lite, and URD
- Configuring IPv4 Bidirectional PIM
- Enabling IPv4 Bidirectional PIM Globally
- Configuring the Rendezvous Point for IPv4 Bidirectional PIM Groups
- Displaying IPv4 Bidirectional PIM Information
- Using IPv4 Debug Commands
- Redundancy for Multicast Traffic
IPv4 Multicast Layer 3 Features
- Prerequisites for IPv4 Multicast Layer 3 Features
- Restrictions for IPv4 Multicast Layer 3 Features
- Information About IPv4 Multicast Layer 3 Features
- Default Settings for IPv4 Multicast Layer 3 Features
- How to Configure IPv4 Multicast Layer 3 Features
Note ● For complete syntax and usage information for the commands used in this chapter, see these publications:
http://www.cisco.com/en/US/products/ps11846/prod_command_reference_list.html
- Cisco IOS Release 15.4SY supports only Ethernet interfaces. Cisco IOS Release 15.4SY does not support any WAN features or commands.
http://www.cisco.com/en/US/products/hw/switches/ps708/tsd_products_support_series_home.html
Participate in the Technical Documentation Ideas forum
Prerequisites for IPv4 Multicast Layer 3 Features
Restrictions for IPv4 Multicast Layer 3 Features
IP multicast Layer 3 switching is not provided for an IP multicast flow in the following situations:
- For IP multicast groups that fall into the range 224.0.0.* (where * is in the range 0 to 255), which is used by routing protocols. Layer 3 switching is supported for groups 225.0.0.* through 239.0.0.* and 224.128.0.* through 239.128.0.*.
Note Groups in the 224.0.0.* range are reserved for routing control packets and must be flooded to all forwarding ports of the VLAN. These addresses map to the multicast MAC address range 01-00-5E-00-00-xx, where xx is in the range 0–0xFF.
- For PIM auto-RP multicast groups (IP multicast group addresses 224.0.1.39 and 224.0.1.40).
- For packets with IP options. However, packets in the flow that do not specify IP options are hardware switched.
- If a (S,G) entry for sparse mode does not have the SPT-bit, RPT-bit, or Pruned flag set.
- A (*,G) entry is not hardware switched if at least one (S,G) entry has an RPF different from the (*,G) entry’s RPF and the (S,G) is not hardware switched.
- If the ingress interface of a (S,G) or (*,G) entry is null, except if the (*,G) entry is a IPv4 bidirectional PIM entry and the switch is the RP for the group.
- If you enable IP multicast Layer 3 switching, IP accounting for Layer 3 interfaces does not report accurate values. The show ip accounting command is not supported.
Information About IPv4 Multicast Layer 3 Features
- IPv4 Multicast Layer 3 Features Overview
- Distributed MRIB and MFIB Infrastructure
- Multicast Layer 3 Hardware Features Entries
- Layer 3-Switched Multicast Statistics
- Layer 3-Switched Multicast Packet Rewrite
- Replication Modes
- Local Egress Replication Mode
- PIM-SM hardware register support
- PIM-SM hardware SPT-switchover support
- Control Plane Policing (CoPP)
- Non-RPF Traffic Processing
- Multicast Boundary
- IPv4 Bidirectional PIM
- Supported Multicast Features
IPv4 Multicast Layer 3 Features Overview
Multicast Layer 3 switching on a Supervisor Engine 6T uses application-specific integrated circuits (ASICs) to provide hardware-supported forwarding for IP multicast data packet flows between IP subnets, which offloads processor-intensive multicast forwarding and replication from the route processor.
The Policy Feature Card (PFC) and Distributed Forwarding Cards (DFCs) use the forwarding information base (FIB) and adjacency table to switch IP Multicast flows in hardware. The FIB table provides support for different entry and mask values; for example, (S/32, G/32) and (*/0, G/32). The RPF RAM is used to identify packets arriving on a directly connected subnet.
The result of a FIB lookup is an adjacency, which provides the replication list for the entry. Different from earlier supervisor engines, the Supervisor Engine 6T performs packet rewrite after replication, which provides enhanced sharing capabilities for outgoing interfaces.
Also different from earlier supervisor engines, the Supervisor Engine 6T performs Layer 2 and Layer 3 forwarding decisions separately. For a routed interface, the final LTL for a packet is determined based only on Layer 3 information. For VLAN interfaces, the LTL for the packet is determined based only on the Layer 2 lookup.
Distributed MRIB and MFIB Infrastructure
The Supervisor Engine 6T uses an MRIB- and MFIB-based software model for IPv4 multicast traffic. The MRIB/MFIB infrastructure supports multiple Layer 3 multicast protocols (for example, PIM Sparse-mode, SSM, and bidirectional PIM) for both IPv4 and IPv6 flows and provides consistent CLI for both IPv4 and IPv6 addresses.
The Multicast Routing Information Base (MRIB) is a collection of multicast entries keyed on source, group, and group mask. The multicast control plane programs the entries. An entry can have one or more associated interfaces with different flags indicating the role of the interface in the forwarding plane. On the Supervisor Engine 6T, the PFC and each DFC has an instance of the Multicast Forwarding Information Base (MFIB), which registers as a client of the MRIB. The MFIB registers its interest with the MRIB for the entries and associated flags, and maintains a local database keyed on source, group, and group mask based on MRIB updates.
Without hardware support, the MFIB would forward the multicast traffic. On the Supervisor Engine 6T, in addition to any required software forwarding, the MFIB also sends multicast route updates for the Layer 3 switching hardware tables. The communication between the MRIB, MFIB, and the Layer 3 switching hardware tables is based on the following:
Note With other supervisor engines, some flows are switched partially in hardware and partially in software. With a Supervisor Engine 6T, multicast flows are switched either in software or in hardware.
Examples of mroute, MRIB, and MFIB information:
Multicast Layer 3 Hardware Features Entries
This section describes how the PFC and the DFCs maintain Layer 3 switching information in hardware tables.
The PFC and DFC populate the (S,G) or (*,G) flows in the hardware FIB table with the appropriate masks; for example, (S/32, G/32) and (*/0, G/32). The RPF interface and the adjacency pointer information is also stored in each entry. The adjacency table contains the rewrite and a pointer to the replication entries. If a flow matches a FIB entry, the RPF check compares the incoming interface/VLAN with the entry. A mismatch is an RPF failure, which can be rate limited if this feature is enabled. In the event of a forwarding information database (FIB) fatal error, the default error action is for the system to reset and the FIB to reload.
The PFC and any DFCs run an MFIB client, which registers as a client to the MRIB on the RP. The hardware tables are programmed based on MFIB updates to install or delete entries for a traffic flow, or the addition and deletion of outgoing interfaces to an existing hardware entry.
These commands affect the Layer 3 switching entries:
- When you clear the multicast routing table using the clear ip mroute command, all multicast Layer 3 switching cache entries are cleared.
- When you disable IP multicast routing on the RP using the no ip multicast-routing command, all multicast Layer 3 switching cache entries on the PFC are purged.
- When you disable hardware-supported multicast Layer 3 switching on an interface with the no platform multicast forwarding ip interface mode command, flows that use the interface as the RPF interface are routed only by the RP in software.
- When you disable MFIB forwarding on an individual interface basis using the no ip mfib forwarding ip command, flows that use this interface as the RPF interface will not be forwarded in hardware or by MFIB.
Layer 3-Switched Multicast Statistics
While a flow is being switched in hardware, the entry is kept alive in software on the basis of the packet forwarding statistics for the flow. The MFIB entry on the PFC periodically pulls and aggregates the entry statistics from the PFC and every DFC. The statistics increment the hardware forwarding counters for an entry. A software or hardware forwarding counter increment resets the expiration timer for that multicast route.
Note A (*,G) state is created on the PIM-RP or for PIM-dense mode but is not used for forwarding the flows, and Layer 3 switching entries are not created for these flows.
Layer 3-Switched Multicast Packet Rewrite
When a multicast packet is Layer 3 switched from a multicast source to a destination multicast group, the PFC and the DFCs perform a packet rewrite that is based on information learned from the RP and stored in the adjacency table.
For example, Server A sends a multicast packet addressed to IP multicast group G1. If there are members of group G1 on VLANs other than the source VLAN, the PFC must perform a packet rewrite when it replicates the traffic to the other VLANs (the switch also bridges the packet in the source VLAN).
When the PFC receives the multicast packet, it is (conceptually) formatted as follows:
|
|
|
|
||||
---|---|---|---|---|---|---|---|
Note In this example, Destination B is a member of Group G1. |
The PFC rewrites the packet as follows:
- Changes the source MAC address in the Layer 2 frame header from the MAC address of the host to the MAC address of the RP (This is the burned-in MAC address of the system. This MAC address will be the same for all outgoing interfaces and cannot be modified. This MAC address can be displayed using the show platform multicast statistics command.)
- Decrements the IP header Time to Live (TTL) by one and recalculates the IP header checksum
The result is a rewritten IP multicast packet that appears to have been routed. The PFC replicates the rewritten packet onto the appropriate destination VLANs, where it is forwarded to members of IP multicast group G1.
After the PFC performs the packet rewrite, the packet is (conceptually) formatted as follows:
|
|
|
|
||||
---|---|---|---|---|---|---|---|
Replication Modes
The Supervisor Engine 6T supports these replication modes:
- Ingress mode—The ingress module performs the replication for the egress interfaces on all modules.
- Egress mode (default)—Ingress multicast traffic is distributed over the fabric to the egress modules. The egress modules perform the replication for the egress interfaces.
The Supervisor Engine 6T performs egress-mode replication for ingress-only legacy switching modules, so that the presence of an ingress-only legacy switching module does not force a replication mode change.
Note Intranet and extranet MVPN are supported in egress and ingress replication mode.
Local Egress Replication Mode
DFC-equipped modules with dual switch-fabric connections host two packet replication engines, one per fabric connection. Each replication engine is responsible for forwarding packets to and from the interfaces associated with the switch-fabric connections. The interfaces that are associated with a switch-fabric connection are considered to be “local” from the perspective of the packet replication engine. Without local egress replication mode, both replication engines have the complete outgoing interface list for all modules, and the replication engines process and then drop traffic for nonlocal interfaces. The Supervisor Engine 6T provides local egress replication for CFC-equipped switching modules.
Local egress replication mode limits the outgoing interface list to only the local interfaces that each replication engine supports, which prevents unnecessary processing of multicast traffic.
In Cisco IOS Release 15.4SY, local egress replication mode is enabled by default.
PIM-SM hardware register support
The PIM-SM protocol requires the first-hop router for a multicast source to send a register packet to the Rendezvous Point (RP) when the source starts sending packets. On the Supervisor Engine 6T, the PIM control-plane uses the MFIB infrastructure to represent the PIM register tunnel as an interface and adds it to the outgoing interface list when PIM register packets are sent. When a new PIM RP is configured or learned, a PIM register tunnel interface is created and used for PIM register packets. The interface is deleted when a register-stop packet is received. On the RP, an additional interface is created and used to decapsulate the PIM register packet when it is received.
The Supervisor Engine 6T supports PIM register packet transmission and reception in hardware. PIM register packets are sent to the RP for the PIM registration process. CoPP can rate limit the PIM register packets sent to the RP for the PIM registration process.
PIM-SM hardware SPT-switchover support
SPT-switchover occurs in a PIM-SM network when the shortest path to the source diverges from the shortest path to the RP for a multicast group. During the transition from the shortest path tree to a source based tree, packets are received on both the shared and source tree and the multicast entry must be programmed to accept packets from two interfaces.
Hardware support is implemented with a multicast FIB dual-RPF mode. When a multicast FIB entry is programmed with a dual-RPF, packets received on the RPF towards the RP are forwarded and packets received on the RPF towards the source are sent to be processed in software for the PIM protocol to complete the SPT-switchover. After switching to the source tree, the multicast entry transitions back to a single RPF interface. To avoid excessive CPU utilization during the switchover process, you can configure CoPP to rate limit multicast packets sent to the RP during SPT-switchover.
Control Plane Policing (CoPP)
You can configure CoPP to protect the CPU from unnecessary or DoS traffic. With Cisco IOS Release 15.4SY, CoPP is configured and enabled by default. CoPP provides hardware rate limiting for the packets sent to the CPU for processing in software. Although multicast rate-limiters are still supported, CoPP is more efficient.
Note For any particular type of traffic, configure CoPP or a rate limiter, not both.
Non-RPF Traffic Processing
In a redundant configuration where multiple routers connect to the same LAN segment, only one router forwards the multicast traffic from the source to the receivers on the outgoing interfaces (see Figure 6-1). In this kind of topology, only the PIM designated router (PIM DR) forwards the data in the common VLAN, but the non-PIM DR receives the forwarded multicast traffic. The redundant router (non-PIM DR) must drop this traffic because it has arrived on the wrong interface and fails the RPF check. Traffic that fails the RPF check is called non-RPF traffic.
Figure 6-1 Redundant Multicast Router Configuration in a Stub Network
Non-RPF protection, which is enabled by default, keeps the CPU from being overwhelmed with non-RPF traffic while still allowing some packets to reach the CPU to support correct multicast routing protocol operation. The non-RPF protection feature uses a leak and drop mechanism: a non-RPF packet is leaked to the CPU, and subsequent non-RPF packets are dropped. The sequence repeats periodically.
Multicast RPF-fail packets that conform to the configured CoPP policy reach the CPU. Nonconforming packets are dropped. Rate limiting is configured in the CoPP policy.
Multicast Boundary
The multicast boundary feature allows you to configure an administrative boundary for multicast group addresses. By restricting the flow of multicast data packets, you can reuse the same multicast group address in different administrative domains.
You configure the multicast boundary on an interface. A multicast data packet is blocked from flowing across the interface if the packet’s multicast group address matches the access control list (ACL) associated with the multicast boundary feature.
Multicast boundary ACLs can be processed in hardware by the Policy Feature Card (PFC), a Distributed Forwarding Card (DFC), or in software by the RP. The multicast boundary ACLs are programmed to match the destination address of the packet. These ACLs are applied to traffic on the interface in both directions (input and output).
To support multicast boundary ACLs in hardware, the switch creates new ACL TCAM entries or modifies existing ACL TCAM entries (if other ACL-based features are active on the interface). To verify TCAM resource utilization, enter the show tcam counts ip command.
If you configure the filter-autorp keyword, the administrative boundary also examines auto-RP discovery and announcement messages and removes any auto-RP group range announcements from the auto-RP packets that are denied by the boundary ACL.
IPv4 Bidirectional PIM
The PFC and DFCs support hardware forwarding of IPv4 bidirectional PIM groups. To support IPv4 bidirectional PIM groups, the PFC and DFCs support the designated forwarder (DF) mode. The designated forwarder is the router elected to forward packets to and from a segment for a IPv4 bidirectional PIM group. In DF mode, the switch accepts packets from the RPF and from the DF interfaces.
When the switch is forwarding IPv4 bidirectional PIM groups, the RPF interface is always included in the outgoing interface list of (*,G) entry, and the DF interfaces are included depending on IGMP/PIM joins.
If the route to the RP becomes unavailable, the group is changed to dense mode. Should the RPF link to the RP become unavailable, the IPv4 bidirectional PIM flow is removed from the hardware FIB.
For information on configuring IPv4 bidirectional PIM, see the “Configuring IPv4 Bidirectional PIM” section.
Supported Multicast Features
- Hardware-Supported IPv4 Layer 3 Features
- Unsupported IPv4 Layer 3 Features
- Hardware-Supported IPv6 Layer 3 Multicast Features
- Partially Hardware-Supported IPv6 Layer 3 Multicast Features
- Software-Supported IPv6 Layer 3 Multicast Features
- Unsupported IPv6 Layer 3 Multicast Features
- Hardware-Supported Layer 2 Common Multicast Features
- Unsupported Layer 2 Common Multicast Features
- Hardware-Supported Layer 2 Enterprise Multicast Features
- Unsupported Layer 2 Enterprise Multicast Features
- Hardware-Supported Layer 2 Metro Multicast Features
- Unsupported Layer 2 Metro Multicast Features
- Unsupported MPLS Multicast Features
- Hardware-Supported Security Multicast Features
- Software-Supported Security Multicast Features
- Unsupported Security Multicast Features
Hardware-Supported IPv4 Layer 3 Features
- Control plane policing (CoPP)
- Egress forced replication mode
- Egress replication local
- Egress replication mode
- HW assisted SPT switchover
- Input ACL logging
- Input and output ACL filtering
- IPv4 multicast over multipoint IPv4 GRE tunnel
- IPv4 multicast over P2P IPv4 GRE tunnel
- IPv4 multicast over P2P IPv4 GRE tunnel with tunnel endpoints in VRF
- IPv4 multicast over P2P IPv4 VRF GRE tunnel
- Load-Balancing of multicast packets on port-channels
- Multicast boundary
- Multicast Layer 3 forwarding on routed ports
- Multicast Layer 3 forwarding on subinterfaces
- Multicast Layer 3 forwarding on SVI
- Multicast load-splitting across parallel links
- Multicast VPN for IPv4 extranet support
- Multicast VPN for IPv4 intranet support
- Multicast VRF-lite
- MVPN over P2P IPv4 GRE tunnel
- Netflow accounting
- Non-RPF protection
- PIM Register decapsulation over IPv4
- PIM Register encapsulation over IPv4
- PIM-SM (S,G) and (*,G) forwarding
- PIM-SSM
- QoS policing for ingress mode
- Rate limiters
- Statistics
- UDLR - unidirectional link routing
- URD - URL rendezvous directory
- Partially Hardware-Supported IPv4 Layer 3 Features
- Egress replication mode and QoS marking
- QoS marking for ingress mode
- Software-Supported IPv4 Layer 3 Features
- IGMPv3/v2/v1
- MET sharing
- MRM/mrinfo/mmon
- MSDP/MBGP
- Mtrace/Mping
- PGM router assist
- PGM router assist in VRF
- Platform Dependent MIB support
- Platform Independent MIB support
- SSM Mapping
- SSO/NSF
Unsupported IPv4 Layer 3 Features
- 6PE IPv6 over IPv4 infrastructure (using MDT tunnels)
- Destination IP NAT multicast
- MTR multicast ToS-based lookup
- Multicast stub (Supported in 12.2SX)
- Partial shortcut (Supported in 12.2SX)
- Service reflect
- Source IP NAT multicast
- Egress replication mode and QoS policing
- Output ACL logging
- QoS ingress or egress shaping
- QoS marking for multicast bridged frames undergoing routing
- DVMRP interoperability (supported in Release 12.2SX)
- ISSU/MDR
- MFIB consistency checker
- MFIB to HW consistency checker
- MTR multicast: separate RPF table for group range
- MTR multicast: separate URIB RPF table
- Multicast helper map (supported in Release12.2SX)
- RPF change tracking
- PIM-DM (S,G) forwarding
- The ip multicast rate-limit command (supported in Release 12.2SX)
- The ip multicast ttl-threshold command (supported in Release 12.2SX)
Hardware-Supported IPv6 Layer 3 Multicast Features
- Control plane policing (CoPP)
- Egress forced replication mode
- Egress replication local
- Egress replication mode
- HW assisted SPT switchover
- Input ACL logging
- Input and output ACL filtering
- IPv6 Multicast over P2P IPv4 GRE/IP-in-IP tunnel (6over4)
- Load-Balancing of multicast packets on port-channels
- Multicast Layer 3 forwarding on routed ports
- Multicast Layer 3 forwarding on subinterfaces
- Multicast Layer 3 forwarding on SVI
- Multicast load-splitting across parallel links
- Netflow accounting
- Non-RPF protection
- PIM register decapsulation over IPv6
- PIM register encapsulation over IPv6
- PIM-SM (S,G) and (*,G) forwarding
- PIM-SSM
- QoS ingress mode marking
- QoS ingress mode policing
- Rate limiters
- Scope checking
- Statistics
Partially Hardware-Supported IPv6 Layer 3 Multicast Features
Software-Supported IPv6 Layer 3 Multicast Features
Unsupported IPv6 Layer 3 Multicast Features
- BIDIR PIM over P2P GRE tunnel
- Destination IP NAT multicast
- IPv4 multicast over P2P IPv6 GRE tunnel (4over6)
- IPv6 multicast over multipoint IPv4 GRE tunnel (6over4 mGRE)
- IPv6 multicast over multipoint IPv6 GRE tunnel
- IPv6 multicast over P2P IPv6 GRE tunnel
- IPv6 multicast over P2P IPv6 GRE tunnel with tunnel endpoints in VRF
- IPv6 multicast over P2P IPv6 VRF GRE tunnel
- MTR multicast: TOS based lookup
- Multicast VPN for IPv6 extranet support
- Multicast VPN for IPv6 intranet support
- Multicast VRF-lite
- MVPN over P2P IPv6 GRE tunnel
- PIM-DM (S,G) forwarding
- Source IP NAT multicast
- Egress replication mode and QoS policing
- QoS ingress and egress: shaping support
- MIB support
- Multicast boundary
- Multicast helper map
- Output ACL logging
- PGM router assist
- PGM router assist in VRF
- PIM-BIDIR
- QoS Marking for multicast bridged frames undergoing routing
Hardware-Supported Layer 2 Common Multicast Features
Unsupported Layer 2 Common Multicast Features
Hardware-Supported Layer 2 Enterprise Multicast Features
- IGMPv2/v1 snooping - IP based constrain
- IGMPv2/v1 snooping - MAC based constrain
- IGMPv3 snooping with S,G constrain
- MLD v1 snooping - IP based constrain
- MLD v1 snooping - MAC based constrain
- MLD v2 snooping - IP based constrain
- MLD v2 snooping - MAC based constrain
- Multicast support for PVLAN over BD
- Optimized flooding for unknown IP multicast frames
- PIM snooping - IP based constrain
- PIM snooping - MAC based constrain
- IGMP snooping querier
- IGMPv3 snooping Explicit tracking
- MLD snooping querier
- PIM snooping - DR flooding
Unsupported Layer 2 Enterprise Multicast Features
Hardware-Supported Layer 2 Metro Multicast Features
Unsupported Layer 2 Metro Multicast Features
Unsupported MPLS Multicast Features
- Inter-AS IPv4 Multicast VPN using mLDP
- Inter-AS IPv6 Multicast VPN using mLDP
- IPv4 Multicast Traffic at the Edge (via Global routing table) using mLDP
- IPv4 Multicast Traffic at the Edge (via Global routing table) over a P2MP RSVP TE LSP
- IPv4 Multicast Traffic in a VRF over a P2MP RSVP TE LSP
- IPv4 Multicast Traffic in a VRF using mLDP
- IPv6 Multicast Traffic at the Edge (via Global routing table) using mLDP
- IPv6 Multicast Traffic at the edge (via Global routing table) over a P2MP RSVP TE LSP
- IPv6 Multicast Traffic in a VRF over a P2MP RSVP TE LSP
- IPv6 Multicast Traffic in a VRF using mLDP
- ISSU Support
- Link protection for P2MP TE LSPs (500 msec)
- Node protection for P2MP TE LSPs (500 msec)
- SSO/NSF Support
- Carrier Supporting Carrier (CSC) for IPv4 Multicast VPN using mLDP
- Carrier Supporting Carrier (CSC) for IPv6 Multicast VPN using mLDP
- Extranet support for IPv4 Multicast VPN for Label Switched Multicast
- Extranet support for IPv6 Multicast VPN for Label Switched Multicast
- Link protection for mLDP trees (500 msec)
- Node protection for mLDP trees (500 msec)
- MIB support
Hardware-Supported Security Multicast Features
Software-Supported Security Multicast Features
Unsupported Security Multicast Features
Default Settings for IPv4 Multicast Layer 3 Features
- Multicast routing: disabled globally.
- PIM routing: disabled on all interfaces.
- IP multicast Layer 3 switching: enabled when multicast routing is enabled and PIM is enabled on the interface.
- IP MFIB forwarding: enabled when PIM is enabled on the interface.
Internet Group Management Protocol (IGMP) snooping is enabled by default on all VLAN interfaces. If you disable IGMP snooping on an interface, multicast Layer 3 flows are still switched by the hardware. Bridging of the flow on an interface with IGMP snooping disabled causes flooding to all forwarding interfaces of the VLAN. For details on configuring IGMP snooping, see Chapter7, “IGMP Snooping for IPv4 Multicast Traffic”
How to Configure IPv4 Multicast Layer 3 Features
- Enabling IPv4 Multicast Routing Globally
- Enabling IPv4 PIM on Layer 3 Interfaces
- Enabling IP Multicast Layer 3 Switching on Layer 3 Interfaces
- Enabling IP MFIB forwarding on Layer 3 Interfaces
- Configuring the Replication Mode
- Configuring Multicast Boundary
- Verifying Local Egress Replication
- Displaying IPv4 Multicast PIM-SM register tunnel information
- Displaying the IPv4 Multicast Routing Table
- Displaying IPv4 MRIB Information
- Displaying IPv4 MFIB Information
- Viewing Directly Connected Entries
- Displaying IPv4 Hardware Switching Information
- Displaying IPv4 CoPP Information
- Source-Specific Multicast with IGMPv3, IGMP v3lite, and URD
- Configuring IPv4 Bidirectional PIM
- Enabling IPv4 Bidirectional PIM Globally
- Configuring the Rendezvous Point for IPv4 Bidirectional PIM Groups
- Displaying IPv4 Bidirectional PIM Information
- Using IPv4 Debug Commands
- Redundancy for Multicast Traffic
Enabling IPv4 Multicast Routing Globally
You must enable IP multicast routing globally before you can enable IP multicast Layer 3 switching on Layer 3 interfaces.
To enable IP multicast routing globally, perform this task:
|
|
---|---|
This example shows how to enable multicast routing globally:
Enabling IPv4 PIM on Layer 3 Interfaces
You must enable PIM on the Layer 3 interfaces before IP multicast Layer 3 switching functions on those interfaces.
To enable IP PIM on a Layer 3 interface, perform this task:
|
|
|
---|---|---|
Router(config)# interface {{ vlan vlan_ID } | { type slot/port }} |
||
Router(config-if)# ip pim { dense-mode | sparse-mode | sparse-dense-mode } |
This example shows how to enable PIM on an interface using the default mode (sparse-dense-mode):
This example shows how to enable PIM sparse mode on an interface:
Note ● You must enable PIM on all participating Layer 3 interfaces before IP multicast Layer 3 switching will function. For information on configuring PIM on Layer 3 interfaces, see the “Enabling IPv4 PIM on Layer 3 Interfaces” section.
Enabling IP Multicast Layer 3 Switching on Layer 3 Interfaces
IP multicast Layer 3 switching is enabled by default on the Layer 3 interface when you enable PIM on the interface. Perform this task only if you disabled IP multicast Layer 3 switching on the interface and you want to reenable it.
To enable IP multicast Layer 3 switching on a Layer 3 interface, perform this task:
This example shows how to enable IP multicast Layer 3 switching on a Layer 3 interface:
Enabling IP MFIB forwarding on Layer 3 Interfaces
Disabling MFIB forwarding on the interface is another way to disable IP multicast Layer 3 switching for an interface. By default MFIB forwarding in and out are enabled by when PIM is enabled on the interface. To enable MFIB forwarding on a Layer 3 interface, perform this task:
|
|
|
Router(config)# interface {{vlan vlan_ID} | {type slot/port}} |
||
(Optional) Enables display of multicast related syslog messages on console. |
This example shows how to enable MFIB forwarding on a Layer 3 interface:
Configuring the Replication Mode
The default for Cisco IOS Release 15.4SY is egress replication mode. Egress replication mode is always supported because the Supervisor Engine 6T provides egress replication for ingress-only legacy switching modules. Modules installed or added do not constrain the replication mode. You can change the configured replication mode.
To configure the replication mode, perform this task:
|
|
---|---|
Router(config)# [ no ] platform ip multicast routing replication egress |
This example shows how to configure ingress replication mode:
This example shows how to display the replication mode:
Configuring Multicast Boundary
To configure a multicast boundary, perform this task:
Note If you configure the filter-autorp keyword, the administrative boundary examines auto-RP discovery and announcement messages and removes any auto-RP group range announcements from the auto-RP packets that are denied by the boundary ACL. An auto-RP group range announcement is permitted and passed by the boundary only if all addresses in the auto-RP group range are permitted by the boundary ACL. If any address is not permitted, the entire group range is filtered and removed from the auto-RP message before the auto-RP message is forwarded.
The following example sets up a multicast boundary for all administratively scoped addresses:
Router (config)#
access-list 1 deny 239.0.0.0 0.255.255.255
Router (config)#
access-list 1 permit 224.0.0.0 15.255.255.255
Router (config)#
interface gigabitethernet 5/2
Router (config-if)#
ip multicast boundary 1
Verifying Local Egress Replication
DFC-equipped modules with dual switch-fabric connections host two packet replication engines, one per fabric connection. Each replication engine is responsible for forwarding packets to and from the interfaces associated with the switch-fabric connections. The interfaces that are associated with a switch-fabric connection are considered to be “local” from the perspective of the packet replication engine. When local egress replication mode is not enabled, both replication engines have the complete outgoing interface list for all modules, and the replication engines process and then drop traffic for nonlocal interfaces.
Local egress replication mode limits the outgoing interface list to only the local interfaces that each replication engine supports, which prevents unnecessary processing of multicast traffic.
Local egress replication is supported with the following software configuration and hardware:
- Egress replication mode.
- Dual fabric-connection DFC-equipped modules.
- CFC-equipped modules (functionality provided by the Supervisor Engine 6T).
- Members of Layer 3 EtherChannels and VLAN interfaces.
This example shows how to verify the replication engine selected for local egress replication:
Displaying IPv4 Multicast PIM-SM register tunnel information
To view the register tunnel interfaces associated with a PIM RP, enter the show ip pim tunnel command.
|
|
---|---|
Displays PIM register encapsulation tunnel information on all routers. Displays additional PIM register decapsulation tunnel on the RP. |
This example shows how to display the PIM register tunnel information:
Displaying the IPv4 Multicast Routing Table
To view a mroute entry, enter the show ip mroute command.
|
|
|
This example shows how to display the IP multicast routing table:
Displaying IPv4 MRIB Information
The show ip mrib command displays detailed information about IP MRIB. To display detailed MRIB information, perform one of these tasks:
|
|
Router# show ip mrib route [ hostname | group_number | summary | reserved ] |
To view the MRIB clients, enter the show ip mrib client command. MFIB running on the PFC and each DFC must present as clients of the MRIB. This example shows how to display the MRIB clients:
This example shows how to display the MRIB table:
Displaying IPv4 MFIB Information
The show ip mfib command displays detailed information about IP MFIB. To display detailed MFIB information, perform one of these tasks:
|
|
Router# show ip mfib [ hostname | group_number | global | verbose ] |
|
This example shows how to display the MFIB interface information:
This example shows how to display the MFIB table:
This example shows how to display the MFIB summary:
This example shows how to display the MFIB status:
This example shows how to display the MFIB count:
Viewing Directly Connected Entries
This example shows how to display the directly connected subnet entries:
Displaying IPv4 Hardware Switching Information
The show platform hardware multicast routing ip command displays detailed information about IP multicast Layer 3 switching. To display detailed IP multicast Layer 3 switching information, perform one of these tasks:
This example shows how to display the Layer 3 IP multicast control entries:
This example shows how to display the Layer 3 IP multicast switching information:
This example shows how to display the Layer 3 IP multicast switching summary:
Displaying IPv4 CoPP Information
The following commands can be used to check the multicast CoPP information:
|
|
Router# show policy-map control-plane input class class_name |
Displays class-map information for the control-plane policy. |
This example shows how to display CoPP information:
Source-Specific Multicast with IGMPv3, IGMP v3lite, and URD
For complete information and procedures about source-specific multicast (SSM) with IGMPv3, IGMP v3lite, and URL Rendezvous Directory (URD), see this URL:
http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_igmp/configuration/15-sy/imc-igmp-15-sy-book.html
Configuring IPv4 Bidirectional PIM
Enabling IPv4 Bidirectional PIM Globally
To enable IPv4 bidirectional PIM, perform this task:
|
|
---|---|
This example shows how to enable IPv4 bidirectional PIM on the switch:
Configuring the Rendezvous Point for IPv4 Bidirectional PIM Groups
To statically configure the rendezvous point for an IPv4 bidirectional PIM group, perform this task:
This example shows how to configure a static rendezvous point for an IPv4 bidirectional PIM group:
Displaying IPv4 Bidirectional PIM Information
To display IPv4 bidirectional PIM information, perform one of these tasks:
|
|
---|---|
Displays mappings between PIM groups and rendezvous points and shows learned rendezvous points in use. |
|
Displays information about the DF indices and DF masks allocated. |
|
This example shows how to display information about the PIM group and rendezvous point mappings:
This example shows how to display information in the IP multicast routing table that is related to IPv4 bidirectional PIM:
This example shows how to display the MFIB table related to IPv4 bidirectional PIM:
This example shows how to display the hardware-switching table related to IPv4 bidirectional PIM:
This example shows how to display the DF-index and DF mask information related to IPv4 bidirectional PIM:
Using IPv4 Debug Commands
Table 6-1 describes IPv4 multicast Layer 3 switching debug commands that you can use to troubleshoot IP multicast Layer 3 switching problems.
Redundancy for Multicast Traffic
Redundancy for multicast traffic requires the following conditions:
PIM uses RPF checks on the unicast routing table to determine the proper paths for multicast data to traverse. If a unicast routing path changes, PIM relies upon the unicast routing protocol (OSPF) to properly converge, so that the RPF checks used by PIM continue to work and show valid unicast paths to and from the source IP address of the server sourcing the multicast stream.
The unicast routing table is used to do path selection for PIM. PIM uses RPF checks to ultimately determine the shortest path tree (SPT) between the client (receiver VLAN) and the source (multicast VLAN). Therefore, the objective of PIM is to find the shortest unicast path between the receiver subnet and the source subnet. You do not need to configure anything else for multicast when the unicast routing protocol is working as expected and PIM is configured on all the Layer 3 links associated with the unicast routing protocol.
http://www.cisco.com/en/US/products/hw/switches/ps708/tsd_products_support_series_home.html
Participate in the Technical Documentation Ideas forum