topic Multicast inside a single VLAN in FWSM. in Network Security

Multicast inside a single VLAN in FWSM.

krishnadas.R_2 — Mon, 11 Mar 2019 16:46:02 GMT

Hi,

I am trying to make the multicast working between few hosts inside a single vlan. Host are running mysql cluster and Multicast

is used to send master/slave status information to the IP 228.10.10.10 on port 45566.

The vlan is defined in FWSM and the host are connected via the core-switch(6513). (hosts-->core-sws--->fwsm)
I have tried searching the documentation, but couldn't find specific info to enable multicast between hosts residing in same vlan. FWSM is running code 3.1(4). since the hosts are residing in the same vlan, I am thinking of applying the <multicast-routing> just for that SVI in FWSM, Is this enough to make it working ?

Any advice is higly appreciated.

Thanks in Advance.
kris

Re: Multicast inside a single VLAN in FWSM.

Jon Marshall — Mon, 07 Dec 2009 10:30:37 GMT

krishnadas.R wrote:

Hi,

I am trying to make the multicast working between few hosts inside a single vlan. Host are running mysql cluster and Multicast

is used to send master/slave status information to the IP 228.10.10.10 on port 45566.

The vlan is defined in FWSM and the host are connected via the core-switch(6513). (hosts-->core-sws--->fwsm)
I have tried searching the documentation, but couldn't find specific info to enable multicast between hosts residing in same vlan. FWSM is running code 3.1(4). since the hosts are residing in the same vlan, I am thinking of applying the just for that SVI in FWSM, Is this enough to make it working ?

Any advice is higly appreciated.

Thanks in Advance.
kris

Kris

If the multicast is contained within a single vlan then you don't need to do anything to the SVI. What you will want to do is turn on the IGMP snooping querier function on the 6500 -

IGMP Snooping

Jon

Re: Multicast inside a single VLAN in FWSM.

krishnadas.R_2 — Mon, 07 Dec 2009 12:00:26 GMT

Hi Jon,

Many thanks for the Advice.

I have a question.

As per the Doc link, To enable the IGMP Snooping Querier, <ip igmp snooping querier> needs to

be applied on the inteface vlan and it needs to have a IP address. But in our scenario,

the SVI is created in the FWSM, not on the Core-Switch. So I am not able to apply the

command in core switch.

I have checked if the Querier option can be enabled globally, but seems like it is not possible,

CT-6513-CORE-I(config)#ip igmp snooping ?
l2-entry-limit limit on the l2 entry that can be installed by IGMP snooping
limit Configure IGMP Snooping limits
source-only-learning source-only gce entries

ICT-6513-CORE-I(config)#

so the only option I have is to create another svi in core-switch and assign an IP address to make it working ?

Waiting for your reply.

Thanks,

kris

Re: Multicast inside a single VLAN in FWSM.

Jon Marshall — Mon, 07 Dec 2009 14:30:48 GMT

krishnadas.R wrote:

Hi Jon,

Many thanks for the Advice.

I have a question.

As per the Doc link, To enable the IGMP Snooping Querier, <ip igmp snooping querier> needs to

be applied on the inteface vlan and it needs to have a IP address. But in our scenario,

the SVI is created in the FWSM, not on the Core-Switch. So I am not able to apply the

command in core switch.

I have checked if the Querier option can be enabled globally, but seems like it is not possible,

CT-6513-CORE-I(config)#ip igmp snooping ?
l2-entry-limit limit on the l2 entry that can be installed by IGMP snooping
limit Configure IGMP Snooping limits
source-only-learning source-only gce entries

ICT-6513-CORE-I(config)#

so the only option I have is to create another svi in core-switch and assign an IP address to make it working ?

Waiting for your reply.

Thanks,

kris

Kris

Very good point and deserves a rating

Apologies for that as i didn't think it through very well. You are right in what you say.

So in actual fact your orginal idea of enabling multicast-routing is the way to go. This will enable pim and igmp on all the FWSM interfaces but you can disable it per interface with

fwsm(config-ip)# no igmp

fwsm(config-ip)# no pim

Jon

Re: Multicast inside a single VLAN in FWSM.

krishnadas.R_2 — Tue, 08 Dec 2009 08:09:55 GMT

Thanks Jon.

I have enabled multicast-routing on the SVI, shall let you know the results after the app team tests it.

Lets hope it will work

Kris

Re: Multicast inside a single VLAN in FWSM.

krishnadas.R_2 — Sun, 13 Dec 2009 09:44:42 GMT

It seems to be working now...

I will go ahead and open a new thread for inter-vlan multicast.

Thanks.

Multicast inside a single VLAN in FWSM.

antonio.pezuela — Thu, 29 Sep 2011 14:49:03 GMT

I have the same problem, i but i didn't understand too good how to solve it.

Do we need configure igmp and pin in the firewall svi?