From: Padhu (LFG) (padhu@xxxxxxxxxxxx)
Date: Sun Aug 05 2001 - 02:26:41 GMT-3
How many interfaces do you have on R3 ? Can you try extended ping from all
interfaces except the outbound interface towards 224.8.8.4 ? Pings should
fail atleast for those. Try on a router behind r3 to ping r4's igmp group.
That also should fail. Now only thing would be find out why its allowing the
pings from the outbound interface alone even with multicast boundary set.
I'll try some more tests if i have some time early next week.
Extended ACL would work great here.
Cheers,Padhu
-----Original Message-----
From: Piperw222@aol.com
To: ccielab@groupstudy.com
Sent: 8/4/01 11:45 PM
Subject: Muticast boundry filtering
I have placed a multicast boundary filter going out of r3. r4 is the hub
on
frame relay and r3,r5,r6 are spokes. The vlans on each router are
joining
group 224.8.8.4,224.8.8.5, 224.8.8.6, 224.8.8.3 respectively. I am
trying to
filter so that r3 can ping all groups except r4. I have placed a
boundary
filter on s0 denying 224.8.8.4 and permitting all others. the debug
output on
r3 shows that packets were denied from 224.8.8.4 however when I ping the
group I do get a reply.
Below is the output from various debug and show commands on r3
----------------
00:25:02: %SEC-6-IPACCESSLOGS: list 10 permitted 224.0.1.40 1 packet
00:25:14: %SEC-6-IPACCESSLOGS: list 10 permitted 224.8.8.6 1 packet
00:25:18: %SEC-6-IPACCESSLOGS: list 10 permitted 224.8.8.3 1 packet
00:30:02: %SEC-6-IPACCESSLOGS: list 10 denied 224.8.8.4 5 packets
r3#ping 224.8.8.4
Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.8.8.4, timeout is 2 seconds:
Reply to request 0 from 170.150.150.4, 64 ms
--------------------
Standard IP access list 10
deny 224.8.8.4 log
permit any log
--------------------
r3#sh ip pim rp
Group: 224.0.1.40
Group: 224.8.8.3, RP: 170.150.6.1, v2, uptime 00:02:57, expires never
Group: 224.8.8.4, RP: 170.150.6.1, v2, uptime 00:02:50, expires 00:00:09
Group: 224.8.8.6, RP: 170.150.4.1, v2, uptime 00:02:05, expires never
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:45 GMT-3