Re: Warning on ASA when multicast is enabled

msantiveri · ‎08-22-2017

I just activated multicast routing on a blank ASA and it warns with this message:

WARNING: Interfaces part of explicit zone will not participate in multicast-routing

Could somebody clarify why it appears and what cisco means with explicit zone?

Thanks,

Miquel

andres.sierra · ‎08-08-2018

I open a TAC case, and cisco responded that Multicast does not work on interfaces configured as part of a Traffic Zones. Since there is no written documentation of such restriction, I wanted to verify this and tried it on VIRL. As soon as I entered the "zone-member" command on the interface, then PIM was disabled on the interface. I have included show results before and after applying the zone to the interface.

I hope this clarifies the warning message.

VIRL-ASA(config-subif)# debug pim interface fl6

VIRL-ASA(config-subif)# sh run interface GigabitEthernet0/2.300
!
interface GigabitEthernet0/2.300
description fl6
vlan 300
nameif fl6
security-level 90
ip address 3.3.3.254 255.255.255.0

VIRL-ASA(config-subif)# sh pim interf

Address Interface PIM Nbr Hello DR DR
Count Intvl Prior

1.1.1.254 campus on 1 30 1 this system
10.10.100.180 inside on 1 30 1 this system
3.3.3.254 fl6 on 1 30 1 this system
2.2.2.254 fusion on 0 30 1 this system

VIRL-ASA(config-subif)# sh pim neigh

Neighbor Address Interface Uptime Expires DR pri Bidir

1.1.1.253 campus 00:24:18 00:01:20 1
10.10.100.80 inside 00:38:44 00:01:25 1
3.3.3.1 fl6 00:03:44 00:01:28 1

VIRL-ASA(config-subif)# zone-member fl6

!!!! debug showing that PIM was disabled for the interface.
VIRL-ASA(config-subif)# IPv4 PIM: Interface fl6 disabled

VIRL-ASA(config-subif)# sh run interface GigabitEthernet0/2.300
!
interface GigabitEthernet0/2.300
description fl6
vlan 300
nameif fl6
security-level 90
zone-member fl6
ip address 3.3.3.254 255.255.255.0

!!!! observe that now PIM is (off) in that interface
VIRL-ASA(config-subif)# sh pim interf

Address Interface PIM Nbr Hello DR DR
Count Intvl Prior

1.1.1.254 campus on 1 30 1 this system
10.10.100.180 inside on 1 30 1 this system
3.3.3.254 fl6 off 0 30 1 not elected
2.2.2.254 fusion on 0 30 1 this system
VIRL-ASA(config-subif)# sh pim neigh

Neighbor Address Interface Uptime Expires DR pri Bidir

1.1.1.253 campus 00:25:03 00:01:35 1
10.10.100.80 inside 00:39:29 00:01:39 1

VIRL-ASA(config-subif)# zone-member fl6
VIRL-ASA(config-subif)# IPv4 PIM: Interface fl6 disabled