12-IPv6 PIM Snooping配置
本章節下載: 12-IPv6 PIM Snooping配置 (216.95 KB)
目 錄
1 IPv6 PIM Snooping························································································································· 1-1
1.1 IPv6 PIM Snooping簡介·········································································································· 1-1
1.2 配置IPv6 PIM Snooping·········································································································· 1-3
1.3 IPv6 PIM Snooping顯示和維護································································································ 1-3
1.4 IPv6 PIM Snooping典型配置舉例····························································································· 1-4
1.5 常見配置錯誤舉例···················································································································· 1-7
1.5.1 交換機不能實現IPv6 PIM Snooping功能········································································· 1-7
1.5.2 部分下遊IPv6 PIM路由器無法收到IPv6組播數據····························································· 1-7
· 本文所涉及的路由器和路由器圖標,代表了一般意義下的路由器或路由交換機。
· 設備支持兩種運行模式:獨立運行模式和IRF模式,缺省情況下為獨立運行模式。有關IRF模式的介紹,請參見“IRF配置指導”中的“IRF”。
IPv6 PIM Snooping是IPv6 Protocol Independent Multicast Snooping(IPv6協議無關組播窺探)的簡稱,運行IPv6 PIM Snooping的二層設備通過對收到的IPv6 PIM協議報文進行分析,將有接收需求的端口添加到相應的IPv6組播轉發表項中,以實現IPv6組播報文的精確轉發。
圖1-1 二層設備運行IPv6 PIM Snooping前後的對比
如圖1-1所示,IPv6組播源Source 1和Source 2分別向IPv6組播組G1和G2發送IPv6組播數據,而Receiver 1和Receiver 2則分別是G1和G2的接收者,二層設備上連接各IPv6 PIM路由器的端口都屬於同一個VLAN:
· 當二層設備隻運行MLD Snooping時,它通過監聽IPv6 PIM路由器發出的IPv6 PIM Hello報文來維護路由器端口,並將所有IPv6 組播數據報文向VLAN內的所有路由器端口轉發;而對於其它類型的IPv6 PIM協議報文,則在VLAN內廣播。因此,無論IPv6 PIM路由器是否有接收需求,都會收到所有的IPv6 PIM協議報文和IPv6組播數據報文。
· 當二層設備同時運行了MLD Snooping和IPv6 PIM Snooping時,它通過監聽IPv6 PIM路由器發出的IPv6 PIM協議報文來了解其接收需求,從而將有接收需求的IPv6 PIM路由器所在的端口加入到相應的IPv6組播轉發表項中,使IPv6 PIM協議報文和IPv6組播數據報文能夠被精確轉發給有接收需求的IPv6 PIM路由器,從而節約了網絡帶寬。
· 有關MLD Snooping和路由器端口的詳細介紹,請參見“IP組播配置指導”中的“MLD Snooping”。
· 有關IPv6 PIM的詳細介紹,請參見“IP組播配置指導”中的“IPv6 PIM”。
在配置某VLAN內的IPv6 PIM Snooping時,需要在交換機上先全局使能MLD Snooping,然後在該VLAN內使能MLD Snooping和IPv6 PIM Snooping。
操作 |
命令 |
說明 |
進入係統視圖 |
system-view |
- |
全局使能MLD Snooping,並進入MLD-Snooping視圖 |
mld-snooping |
必選 缺省情況下,MLD Snooping處於關閉狀態 |
退回係統視圖 |
quit |
- |
進入VLAN視圖 |
vlan vlan-id |
- |
在VLAN內使能MLD Snooping |
mld-snooping enable |
必選 缺省情況下,VLAN內的MLD Snooping處於關閉狀態 |
在VLAN內使能IPv6 PIM Snooping |
pim-snooping ipv6 enable |
必選 缺省情況下,VLAN內的IPv6 PIM Snooping處於關閉狀態 |
· 有關mld-snooping和mld-snooping enable命令的詳細介紹,請參見“IP組播命令參考”中的“MLD Snooping”。
· 在VLAN內使能了IPv6 PIM Snooping之後,IPv6 PIM Snooping功能隻在屬於該VLAN的端口上生效。
· 在IPv6組播VLAN的子VLAN內使能IPv6 PIM Snooping無效。有關IPv6組播VLAN的詳細介紹,請參見“IP組播配置指導”中的“IPv6組播VLAN”。
在完成上述配置後,在任意視圖下執行display命令可以顯示配置後IPv6 PIM Snooping的運行情況,通過查看顯示信息驗證配置的效果。
在用戶視圖下執行reset命令可以清除IPv6 PIM Snooping的統計信息。
表1-2 IPv6 PIM Snooping顯示和維護
命令 |
|
查看IPv6 PIM Snooping的鄰居信息(獨立運行模式) |
display pim-snooping ipv6 neighbor [ vlan vlan-id ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] |
查看IPv6 PIM Snooping的鄰居信息(IRF模式) |
display pim-snooping ipv6 neighbor [ vlan vlan-id ] [ chassis chassis-number slot slot-number ] [ | { begin | exclude | include } regular-expression ] |
查看IPv6 PIM Snooping的路由信息(獨立運行模式) |
display pim-snooping ipv6 routing-table [ vlan vlan-id ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] |
查看IPv6 PIM Snooping的路由信息(IRF模式) |
display pim-snooping ipv6 routing-table [ vlan vlan-id ] [ chassis chassis-number slot slot-number ] [ | { begin | exclude | include } regular-expression ] |
查看IPv6 PIM Snooping監聽到的PIM報文的統計信息 |
display pim-snooping ipv6 statistics [ | { begin | exclude | include } regular-expression ] |
清除IPv6 PIM Snooping監聽到的PIM報文的統計信息 |
reset pim-snooping ipv6 statistics |
· 如圖1-2所示,Router A和Router B各自的GigabitEthernet3/0/1接口分別連接IPv6組播源Source 1和Source 2;Router C和Router D各自的GigabitEthernet3/0/1接口分別連接接收者Receiver 1和Receiver 2;Router A、Router B、Router C和Router D各自的GigabitEthernet3/0/2接口都通過Switch A互連。
· Source 1和Source 2分別通過IPv6組播組FF1E::101和FF2E::101發送IPv6組播數據,Receiver 1和Receiver 2則分別接收來自IPv6組播組FF1E::101和FF2E::101的IPv6組播數據;Router C和Router D各自的GigabitEthernet3/0/1接口上都運行MLD,Router A、Router B、Router C和Router D上都運行IPv6 PIM-SM,並由Router A的GigabitEthernet3/0/2接口充當C-BSR和C-RP。
· 通過在Switch A上配置MLD Snooping和IPv6 PIM Snooping,使Switch A將IPv6 PIM協議報文和IPv6組播數據報文隻轉發給有接收需求的路由器。
圖1-2 IPv6 PIM Snooping典型配置組網圖
使能IPv6轉發功能,並配置IPv6地址
使能各設備的IPv6轉發功能,並按照圖1-2配置各接口的IPv6地址和前綴長度,具體配置過程略。
配置Router A
# 使能IPv6組播路由,在各接口上使能IPv6 PIM-SM,並將接口GigabitEthernet3/0/2配置為C-BSR和C-RP。
<RouterA> system-view
[RouterA] multicast ipv6 routing-enable
[RouterA] interface GigabitEthernet 3/0/1
[RouterA-GigabitEthernet3/0/1] pim ipv6 sm
[RouterA-GigabitEthernet3/0/1] quit
[RouterA] interface GigabitEthernet 3/0/2
[RouterA-GigabitEthernet3/0/2] pim ipv6 sm
[RouterA-GigabitEthernet3/0/2] quit
[RouterA] pim ipv6
[RouterA-pim6] c-bsr 1001::1
[RouterA-pim6] c-rp 1001::1
配置Router B
# 使能IPv6組播路由,在各接口上使能IPv6 PIM-SM。
<RouterB> system-view
[RouterB] multicast ipv6 routing-enable
[RouterB] interface GigabitEthernet 3/0/1
[RouterB-GigabitEthernet3/0/1] pim ipv6 sm
[RouterB-GigabitEthernet3/0/1] quit
[RouterB] interface GigabitEthernet 3/0/2
[RouterB-GigabitEthernet3/0/2] pim ipv6 sm
配置Router C
# 使能IPv6組播路由,在各接口上使能IPv6 PIM-SM,並在接口GigabitEthernet3/0/1上使能MLD。
<RouterC> system-view
[RouterC] multicast ipv6 routing-enable
[RouterC] interface GigabitEthernet 3/0/1
[RouterC-GigabitEthernet3/0/1] pim ipv6 sm
[RouterC-GigabitEthernet3/0/1] mld enable
[RouterC-GigabitEthernet3/0/1] quit
[RouterC] interface GigabitEthernet 3/0/2
[RouterC-GigabitEthernet3/0/2] pim ipv6 sm
配置Router D
Router D的配置與Router C相似,配置過程略。
配置Switch A
# 全局使能MLD Snooping。
<SwitchA> system-view
[SwitchA] mld-snooping
[SwitchA-mld-snooping] quit
# 創建VLAN 100,把端口GigabitEthernet3/0/1到GigabitEthernet3/0/4添加到該VLAN中;在該VLAN內使能MLD Snooping和IPv6 PIM Snooping。
[SwitchA] vlan 100
[SwitchA-vlan100] port GigabitEthernet 3/0/1 to GigabitEthernet 3/0/4
[SwitchA-vlan100] mld-snooping enable
[SwitchA-vlan100] pim-snooping ipv6 enable
[SwitchA-vlan100] quit
檢驗配置效果
# 查看Switch A上VLAN 100內IPv6 PIM Snooping的鄰居信息。
[SwitchA] display pim-snooping ipv6 neighbor vlan 100
Total number of neighbors: 4
VLAN ID: 100
Total number of neighbors: 4
Neighbor Port Expires Option Flags
FE80::1 GE3/0/1 02:02:23 LAN Prune Delay
FE80::2 GE3/0/2 03:00:05 LAN Prune Delay
FE80::3 GE3/0/3 02:22:13 LAN Prune Delay
FE80::4 GE3/0/4 03:07:22 LAN Prune Delay
由此可見,Router A、Router B、Router C和Router D之間都建立起了IPv6 PIM Snooping鄰居關係。
# 查看Switch A上VLAN 100內IPv6 PIM Snooping的路由信息。
[SwitchA] display pim-snooping ipv6 routing-table vlan 100
Total 2 entry(ies)
FSM Flag: NI-no info, J-join, PP-prune pending
VLAN ID: 100
Total 2 entry(ies)
(*, FF1E::101)
Upstream neighbor: FE80::1
Total number of downstream ports: 1
1: GE3/0/3
(*, FF2E::101)
Upstream neighbor: FE80::1
Total number of downstream ports: 1
1: GE3/0/4
由此可見,Switch A將向Router C轉發IPv6組播組FF1E::101的IPv6組播數據,向Router D轉發IPv6組播組FF2E::101的IPv6組播數據。
交換機不能實現IPv6 PIM Snooping功能。
MLD Snooping或IPv6 PIM Snooping沒有使能。
使用display current-configuration命令查看MLD Snooping和IPv6 PIM Snooping的運行狀態。
如果沒有使能MLD Snooping,請先在係統視圖下使用mld-snooping命令全局使能MLD Snooping,然後在VLAN視圖下分別使用mld-snooping enable和pim-snooping ipv6 enable命令使能VLAN內的MLD Snooping和IPv6 PIM Snooping。
如果沒有使能IPv6 PIM Snooping,請在VLAN視圖下使用pim-snooping ipv6 enable命令使能VLAN內的IPv6 PIM Snooping。
在有分片加入/剪枝報文的網絡中,部分下遊IPv6 PIM路由器無法收到IPv6組播數據。
IPv6 PIM Snooping不能對分片報文進行重組,因此無法維護分片加入/剪枝報文中攜帶的下遊狀態。為了保證係統功能正常,隻能將分片加入/剪枝報文在VLAN內廣播,因此需要在VLAN內連接IPv6 PIM Snooping交換機的所有IPv6 PIM路由器上都禁止加入報文抑製能力,以保證加入報文不被廣播的分片加入/剪枝報文所抑製。假如存在未禁止該能力的IPv6 PIM路由器,被廣播的分片加入/剪枝報文就會影響其它IPv6 PIM路由器的加入狀態:如果某IPv6 PIM路由器有IPv6組播接收需求,但其發送的加入報文被抑製,那麼該路由器將無法收到IPv6組播數據。
在IPv6 PIM路由器連接IPv6 PIM Snooping交換機的接口上使用pim ipv6 hello-option neighbor-tracking命令使能鄰居跟蹤功能。
如果存在不能夠使能鄰居跟蹤功能的IPv6 PIM路由器,則需關閉IPv6 PIM Snooping交換機上的IPv6 PIM Snooping功能。
不同款型規格的資料略有差異, 詳細信息請向具體銷售和400谘詢。H3C保留在沒有任何通知或提示的情況下對資料內容進行修改的權利!