topic Ask the Expert: Installing, Configuring and Troubleshooting Cisc in Routing and SD-WAN

Ask the Expert: Understanding, Configuring and Troubleshooting IP Multicast and MVPN

ciscomoderator — Tue, 05 Mar 2019 03:57:19 GMT

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about IP Multicast and Multicast VPN with Cisco expert Pulikkal Sekharan Raju. With Multicast VPN Cisco provides a practical solution to solve the challenge of manual configuration. MVPN architecture introduces an additional set of protocols and procedures that help enable a service provider to support multicast traffic in a VPN.

Pulikkal Sekharan Raju is a customer support engineer in the High Touch Technical Support group for Cisco. He has over 13 years of experience in electronics and communications. His technical expertise is Border Gateway Protocol, Open Shortest Path First protocol, MPLS, Multicast, Multicast Virtual Private Network Layer 3 Virtual Private Network (MVPN L3VPN), and Layer 2 Virtual Private Network (L2VPN). He has also served as a network engineer for CMC Ltd and a team lead for Remote Management Services. He holds a bachelor of technology degree in electronics and communications from M G University and holds CCIE certification (#25000).

Remember to use the rating system to let Pulikkal know if you have received an adequate response. Pulikkal might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the WAN, Routing and Switching community sub-community in Network Infrastructure shortly after the event.

This event lasts through Friday May 31, 2013.

Visit this forum often to view responses to your questions and the questions of other community members.

Re: Ask the Expert: Understanding, Configuring and Troubleshooti

Bilal Nawaz — Mon, 20 May 2013 18:45:34 GMT

Hello Pulikkal,

Thank you for taking to the CSC for multicast etc...

I need some help please,

So at the moment things look like this in terms of multicast. There is an MSDP peering with the SQP ASR's forming a redundant RP. Its in a sparse mode environment. The plan is to implement a solution whereby each site can have its own RP (MSDP peering) with anycast. And then I want to lock down which set of RP's can be the RP for particular groups. (easy - ip pim rp-address x.x.x.x 1) 1 being the access list permitting the group address.

Having said this, we also require that any multicast traffic generated in ET or any other sites, if users, lets say... XX, YY and I was to be interested in the multicast traffic from another site like SQP, we want to ensure that only one stream is sent across the WAN and then split locally at the site. OSPF is the routing protocol here with point-to-point links. How should I be implementing this?

Thank you.

Please rate useful posts & remember to mark any solved questions as answered. Thank you

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Tue, 21 May 2013 14:35:44 GMT

Hi Bilal

Thank you for yout query

1. Is your requirement to have both anycast RPs in each site to have external MSDP peering with the 2 anycast RPs in SQP. Also you don't want to run BGP between them and want to use OSPF as the protocol between them?

2. Can you clarify the below statement

"we want to ensure that only one stream is sent across the WAN and then split locally at the site"

Does that mean that you don't want to receive the mutlicast packet on both RPs in the same site?

3. What is the code you are running on the ASRs which is used as RP?

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Bilal Nawaz — Tue, 21 May 2013 18:43:04 GMT

Hello Raju

Thank you for your reply.

1) This is not a requirement, although I don't know if this is actually needed or not? I have only created MSDP peering for Anycast between the SQP ASR's only for redundancy. OSPF is already the routing protocol, BGP is not used unfortunately. But the Plan is to create MSDP peering's for anycast

SQPASR01 -- SQPASR02 (Anycast RP for x.x.x.x)

ETASR01 -- ETASR02 (Anycast RP for y.y.y.y)

IHASR01 -- IHASR02 (Anycast RP for z.z.z.z)

2) We want to make sure that when multicast source traffic is generated (lets say in SQP IPTV is streaming Channel 1 (x.x.x.x) ) - If myself and other users within another building (lets say ET or IH) were to be interested in this Channel 1 traffic, how can I ensure that only one single multicast stream is sent across the WAN link (or two of the links - because of the secondary WAN link and equal paths in OSPF) instead of unicast for each and every user - I don't want to be saturating a 1GB WAN link. Is this the way it would work already with PIM-SM?

The RP's for each multicast stream should be local to the site from which its generated (makes sense to do that right?)

This should be the same for any source at any other site.

SQP ASRs:

asr1000rp1-adventerprisek9.03.06.00.S.152-2.S.bin

IH ASRs:

asr1001-universalk9.03.06.00.S.152-2.S.bin

ET ASRs:

asr1001-universalk9.03.07.00b.S.152-4.S0b.bin

What kind of configuration and design will be required for this?

Thank you

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

Re:Ask the Expert: Installing, Configuring and Troubleshooting C

Simon Brooks — Wed, 22 May 2013 06:37:18 GMT

Hi bilal

Im no expert but msdp peering across wan between rps should not saturate link. This is how pim-sm works. If no subscribers on remote site then no traffic! just a source active in the msdp table of the remote router so it knows how to get to the remote rp of the source.

You are correct that rp for source should be local to site and msdp for redundancy is good. However adding acl for specific groups kind of eradicates the need for redundancy. Why have redundancy if you only allowing (*, g) for certain groups on each rp?

Design sounds good otherwise.

Sent from Cisco Technical Support Android App

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Bilal Nawaz — Wed, 22 May 2013 18:32:20 GMT

Hello, thanks for your input - much appreciated! So are we saying that I should create MSDP peerings across the WAN? If we have the source as active in an 'msdp table' am i correct in saying that this will be only using one stream across the links?

Adding ACL's was just for control purposes on which RP's can be the RP for certain groups. Not so much for redundancy.

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Thu, 23 May 2013 04:26:08 GMT

Hi Bilal

This should be ok. I will test this and provide you a detailed reply. Expect bit of delay

Thank you

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Giuseppe Larosa — Sun, 26 May 2013 10:04:52 GMT

Hello Pulikkal,

it is nice that you are the expert for an event!

I would like to ask questions about feature road maps in Multicast VPN.

In the past I have configured successfully multicast VPN Draft Rosen where customer multicast traffic is encapsulated in a mGRE tunnel using Service Provider multicast addresses (MDT and data).

Later I have worked on NG Multicast VPN with Juniper implementation using MP BGP special address families and RSVP TE p-2.mp LSPs in the forwarding plane.

What is the state of Cisco implementation for NG MVPN? I have seen a solution using P2MP LDP LSPs but in a context of L2VPN /VPLS (OSI L2) that cannot interoperate with Juniper implementation that is still a L3 VPN

I see support of NG MVPN in ASR 9K

http://www.cisco.com/en/US/partner/docs/routers/asr9000/software/asr9k_r4.3/general/release/notes/reln_430a9k.html#concept_6E729038F2174697B94AA2F2DE3CA583

http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.3/general/release/notes/reln_430a9k.html#concept_6E729038F2174697B94AA2F2DE3CA583

Is there a roadmap to support this also on ASR 1000 platform and/or C7600?

Thanks for your attention

Best Regards

Giuseppe

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Sun, 26 May 2013 23:57:54 GMT

Hi Giuseppe

I will check this and come back to you

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Tue, 28 May 2013 16:16:29 GMT

Hi Giuseppe

I can see that BGP Auto-discovery and BGP C-multicast Routing support added on 15.2(2)S

http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_mvpn/configuration/15-s/imc_vpn_bgp_croute.html

These features should be availble on ASR1K

7600 Hardware I am still checking if this is supported on it. Will update you back

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Tue, 28 May 2013 16:24:42 GMT

Also for transport, Juniper supports RSVP TE. But ASR1k does not support this but supports mLDP

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Bilal Nawaz — Wed, 29 May 2013 08:57:24 GMT

Thanks Raju - really appreciate it, look forward to your response.

By the way, this topic is on multicast, why does it say about CUCM??

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Wed, 29 May 2013 09:49:05 GMT

Hi Bilal

Me to noticed the same that it is showing as CUCM. I have contacted the cocnerned team regarding this and waiting for them to correct it

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

James Leinweber — Wed, 29 May 2013 14:35:01 GMT

I'm struggling with multicast support on ASA 5520 firewalls. Recently I upgraded some running a rather archaic 8.2(2) firmware to 9.0(2), in preparation for deployment of some new 5525-x's we bought. In the old configuration I had

multicast-routing

interface Gi0/1

...

igmp forward interface outside

and an access-lists on the outside interface which allowed inbound UDP traffic with the relevant multicast destinations, particularly 239.0.0.0/24.

When I upgraded to 9.0(2), I threw in "no pim", and it broke. However, allowing pim still is broken, as I'm winning the DR election with my upstream router (run by the UW-Madison), when I need to be losing. The real PIM is taking place between the campus router and the campus RP; all I want to do is stub forwarding of IGMP v2 join messages from one LAN vlan through my firewall to the upstream router.

What does a working multicast configuration look like on ASA 9.0? I have hideous memories of months of TAC cases back in the 7.0 days; in 8.2 it was comparatively easy.

-- Jim Leinweber, Wisconsin State Lab of Hygiene

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

ldesmasures — Wed, 29 May 2013 20:07:31 GMT

Hello Pulikkal,

We're using VRF-lite on catalyst 6500 with SUP2T IOS 15.1(1)SY1 on a campus network.

We also import/export unicast prefixes using route-target and BGP for IPv4 and IPv6.

The other information is that we're using only one 6500 core switch (no external peering).

We want to use multicast (for video streaming) on our architecture using PIM and also export multicast prefixes from one VRF to another.

Is it possible ?

I saw the functionnality "Multicast VPN Extranet Support" but it seems that it's working only on MPLS (so no VRF-Lite).

Thanks.

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Thu, 30 May 2013 03:41:48 GMT

Hi Giuseppe

BGP AD and BGP c-Mc sig are not offcially supported on 7600

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Bilal Nawaz — Thu, 30 May 2013 10:57:09 GMT

Hello Raju, this event closes tomorrow unfortunately, and im really keen on your response to my questions. Is there a means for you to post the suggestion and answers after the event?

Thank you

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Thu, 30 May 2013 13:01:34 GMT

Hi Bilal

I will be answering to your query even if the event closes

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Thu, 30 May 2013 15:36:48 GMT

I don't think you can acheive this without configuring MDT which is not possible in pure VRF-lite

Thanks

Raju

Ask the Expert: Installing, Configuring and Troubleshooting Cisc

Raju Sekharan — Thu, 30 May 2013 16:28:10 GMT

Do you have any PIM RP-addres configuration on the ASA?

can you send me the following outputs from ASA

1. Show igmp groups

2. Show ip mroute

Thanks

Raju