cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3271
Views
10
Helpful
8
Replies

bridging pim-dm to pim-sm

jschweng
Level 1
Level 1

I have some checkpoint firewalls which are receving multicast from a WAN.

The Firewalls are configured with pim dm on the interface to the inside network.

and the interface is setup with static-groups whcih forward the packets to the inside network.

The inside network is configued for pim-sm with an RP which is not known by the firewall.

I cannot run pim dm on the inside network.

Will the inside pim-sm switches receive the multicast and setup the S,G states so i can route that to the rest of the inside network?

2 Accepted Solutions

Accepted Solutions

Hello Martin,

Check the following output taken from

For IP PIM multicast, Cisco recommends Sparse-Mode over Dense-Mode. In the midst of our network migration, we have a new network operating in Sparse-Mode with Anycast rendezvous point (RP) but our existing network is still operating in Dense-Mode. To bridge two different modes across both PIM domains, we should use the

ip pim dense-mode proxy-register

command on the interface leading toward the bordering dense mode region. This configuration will enable the border router to register traffic from the dense mode region (which has no concept of registration) with the RP in the sparse mode domain.

I think that should solve the registration problem

Let me know what you think

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Hello Martin,

Hey man.. My pleasure.

Glad to know that I could help,

Remember to rate all of the helpful posts ( Hit the 5 star option at the left of the messages) and mark the question as answered so future users can learn from this,

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

8 Replies 8

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

They are 2 different routing protocols, both of them for Multicast traffic. They way they work is different so to make this network work as it should you then will need to set only routing protocol...

Running Sparse mode the routers should first register with the RP.. In this scenario the firewall will never register with the inside RP then not allowing the communication

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

how can you bridge a dense mode routing domain to a sparse mode doman

and send multicast from one to the other then >

jschweng
Level 1
Level 1

If the Firewall is forwarding packets to the next hop on the inside network.

and that router is configured with pim sm  AND its the RP

then wouldnt it be considered the first hop router

and by the RFC send register messages to itself and build the S,G state?

how do sources register if they are  directly connected to the RP?

Wouldnt this be the same thing.

Hello Martin,

Check the following output taken from

For IP PIM multicast, Cisco recommends Sparse-Mode over Dense-Mode. In the midst of our network migration, we have a new network operating in Sparse-Mode with Anycast rendezvous point (RP) but our existing network is still operating in Dense-Mode. To bridge two different modes across both PIM domains, we should use the

ip pim dense-mode proxy-register

command on the interface leading toward the bordering dense mode region. This configuration will enable the border router to register traffic from the dense mode region (which has no concept of registration) with the RP in the sparse mode domain.

I think that should solve the registration problem

Let me know what you think

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

awesome  - thank you sir

Hello Martin,

Hey man.. My pleasure.

Glad to know that I could help,

Remember to rate all of the helpful posts ( Hit the 5 star option at the left of the messages) and mark the question as answered so future users can learn from this,

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi Julio, Nice information. I am working on a quiet similar design. The WAN uses DM and the firewall only uses SM, the internal network also uses DM.

The current network is configured with only one PIM DM domain. The problem is that the firewall does not support DM but only SM.

Is it possible to bridge the same PIM domain the same way using the neighbor routers with the proxy register command?

Review Cisco Networking for a $25 gift card