Filtering Multicast on Cat4006

Is it possible on a Cat4006 running CatOS 7.6(13) to limit the multicast traffic on a port (using commands like
set port broadcast 3/1 20.00% multicast enable on cat6000) ?
Thamk in advance
Alessandro Asson

No. CAT OS bases Sups in 4k do not support broadcast/multicast suppression.

Similar Messages

WRT120N wireless nodes not routed to WAN, Multicast not working

Hi. Since a few weeks, I am experiencing strange and very annoying problems with my WRT120N. I have a DSL connection at home and the router connects to that via PPPoE. The LAN consists of one wired node and several wireless nodes. I have a G/N mixed setup because I also have G-only nodes (older laptop, mobile phone).
Every few minutes, my wireless nodes are not routed to the WAN anymore. Weird thing is: they can still connect to the wired node on the LAN so bridging seems to work fine. They can also connect to the router itself and the router says it is connected to the WAN. I can confirm this WAN connection because the wired node is being routed to the internet all the time. Restarting the router solves the problem. Actually, even if just disabling/enabling the wireless connection on my nodes solves it. However after a few minutes, sometimes seconds, routing stops working again (It happened twice during the writing of this email).
Another thing that is really bugging me is that multicast seems to get filtered. After a few minutes, no multicast message is being sent to the wireless nodes. Multicast packets sent by the wireless nodes do arrive at the wired node but any answer is being filtered on the router.
I have changed pretty much every possible setting that could be connected to the issue but no improvement (e.g. filtering multicast in the firewall). I used to be on 1.0.0.4 and hoped that upgrading to 1.0.0.5 would help but it didn't. I also checked this forum for solutions but found none that is working for me. This way, the router is pretty much useless for wireless clients as after an arbitrary but pretty short time interval they can only connect to the LAN and no Multicast service discovery/media streaming is possible. I really need help on these issues.

Hi Brickmonkey,
thanks a lot for your answer. I did the changes you advised. In fact, here's in detail what I did:
Router reset as described.
Changed the following configuration options:
PPPoE + Credentials
Local IP
MAC-IP Bindings for DHCP
Time Zone
DynDNS
Wireless Mode -> Mixed
SSID
Channel Width -> Auto
Wireless Security -> Enabled
Encryption AES
Passphrase
Port Forwarding for SSH,HTTPS
Router Password
Changed the options beacon interval, RTS threshold, fragmentation threshold and MTU as advised.
Router power cycled.
Routing and multicast are running since 5 minutes. Let's see if it lasts.
Answering your question: I do have one wired machine directly connected to the internal switch at the WRT120N. That's the one the ports are forwarded to. It has a static IP outside the DHCP range and is actually my DHCP,DNS etc server - however DHCP is disabled at the moment. All my other machines are wireless clients with G or N connectivity.
Can you explain the reason behind your proposed configuration changes?

Airport Extreme with AT&T Uverse Wireless Gateway

I have a first generation airport (i think, it is one of the rounded white ones) that i have used for quite some time as my main wireless internet connection. i also have an airport express that i use with the extreme. Recently, we upgraded our at&t internet service to uverse max. We had to be shipped a new "UVerse wireless gateway" that not only works as a modem but also as a wireless router. In the past, we had just connected our modem to our extreme. The issue is that the new wireless router can only have up to ten devices, while we have about 15 wireless devices in our house. also, i am having trouble connecting the airport express that i use with my xbox to the connection. I am wondering what would be the easiest way to just connect the gateway back to the extreme and use that as my wireless connection spot.

Thanks for the quick reply. I "turned off" DHCP on the Uverse RG by creating an address pool and assigning it to a MAC on a disabled NIC (ATT pushed a firmware update to RG's the removed the "disable DHCP" option).
I have a Win2K8 Domain server with DNS and DHCP that handles the entire network. I have also disabled the Uverese RG wifi service.
My RG goes to a Gb switch that then goes to each room in the house. The Set-Top Boxes are connected from the room ports, most of which have additional Gb switches to accommodate gaming systems and other computers with wired connections.
Up to here, I'm golden.
The issues start when I introduce wireless. If I use my recently-returned Cisco M20 Valet wireless N router I observe two things:
1. When I connect LAN port from Wifi to LAN port of home switch---I get a packet storm that consumes 100% of my wireless bandwidth and none of my wireless devices can connect when Uverse is in operation (watching TV/recording). --If no Uverse traffic is going on I can get on the wireless and do things like connect my iPhone to my apple TV via the remote app.
2: If I connect the home switch to the wifi WAN port, the packet storm goes away completely, but I cannot connect to my apple TV from my iPhone or any other wireless device.
My Home LAN is 10.10.10.0/24
My Wifi devices are 192.168.1.0/24 (when WAN port is used--otherwise DHCP is disabled when using LAN ports only)
I am hoping the AirPort Extreme is capable of either filtering multicast from the wireless traffic or allowing me to use my iPhone to control my Apple TV when my iPhone is on the wireless subnet (192.168.1.0/24) and my apple TV is connected to my wired 10.10.10.0/24 network via the WAN port.

Another Apple TV syncing/streaming fix

I've tried every fix in these forums during the past 5 months, and none of them worked. I have been having the same problems that other people have -- Apple TV disappearing in iTunes, sync errors, and streaming only working for a few minutes after a restart. Here is my set up...
iMac (wifi)
Macbook Pro (wifi)
Powerbook (wifi)
Apple TV (wifi)
Airport Extreme (b/g)
Here is what I did to fix the problem...
1. Changed my wifi channel number (I changed mine from 1 to 8)
2. Check whether you have multicasting turned on in your router. I heard Apple TV uses this to maintain connections with other computers on the network. I ensured mine was on and raised my setting from 2 to 5.5.
Everything has been working perfectly for 2 days! I can even click "Sync" in iTunes and it works! That has NEVER worked before.
As with the rest of the posts here, you may not find success with this one. I just wanted to throw my story into the mix with the hope that it can help a few others.

awesome! glad to hear you were able to find a remedy.
unfortunately the only multicast filtering my Linksys WRT54G-L does is filtering multicasts from the Internet port which is on a completely different subnet than the local net.
my problem may actually be more of a bug than a setting. last night while plugging and unplugging my ethernet cable the darned thing started working again. i tried to reproduce the results to no avail.
works fine if i go back to 2.0.
glad yours works though. there is hope!

Unregistered Multicast Filtering vs. NDP Protocol for IP V6 Ping SG300

Hi everybody,
we are running several switches of the SG 300 Series all with Firmware sx300_fw-14088.
We are having a setup that uses a lot of Multi Cast so we use the IGMP Feature of the Switch and enable unregistered multicast filtering.
However: if we enable unregistered multicast filtering, we cannot get a Ping V6 to work. We know, that the basis is the NDP protocol to resolve mac addresses to IP v6.
It seems as if the switch thinks that the multicast based NDP protocotol is unregistered multicast.
Any suggestions?
an example configuration configuration is attached to this mail:

There are strict rules to map L3 IPv6 Addresses and L3 IPv4 addresses to L2 Mac Addresses. At the end those Mac Addresses are Multicast addresses independent of their roots (IPv6 or IPv4). Of course you are able to keep them separate from each other (00-01-FF vs. 33-33-FF), but both have the I/G-Bit set to 1 and for a Switch those addresses are multicasts.
It might be that you are using the default Multicast properties: Forwarding Method for IPv6 and Forwarding Method for IPv4 equals MAC Group address. Therefore, the Switch should use the Multicast Mac addresses as an IGMP Snooping filter as well. The Multicast Mac Address which is used in ICMP Type 135 (Neighbor Solicitation) of course is not registered via IGMP and will get blocked. This is only a guess, but it should be worth the effort to Switch the forwarding method to IP Group address.
Cheers,
@gar

Catalyst 4006 with Supervisor Engine II Multicast Support?

Hi, I have a Catalyst 4006 with Supervisor Engine II. I would like to know if it is possible to enable multicast routing via CGMP or IGMP. I know it is possible with the Supervisor Engine III. Any advice would be appreciated.

Cat4006 wiht sup II runs a CatOS and it's stricly Layer 2 therefore it does not support any kind of routing (L3). It does support multicast services. Switches can use CGMP, IGMP filtering, or GMRP to dynamically configure switch ports so that IP multicast traffic is forwarded only to ports that are associated with IP multicast hosts.
Please refer to this link:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/8_3/configur/multi.htm#wp1019880
Please rate all posts.

Enabling VM Guest NLB w/Multicast IGMP on 2012 Hyper-V host w/ converged SCVMM fabric switch

What a mouthful.
As short as possible:
WHAT I'M ATTEMPTING:
I'm trying to build a new NLB cluster for a 2008 R2 SP1 Remote Desktop Services farm. And I'm trying to do it the right way, with multicast igmp, not unicast.
The two guest VMs with NLB install converge fine. VIP gets this:
IP: 192.168.100.157
MAC: 01-00-5e-7f-64-9d
NLB NIC is on the same VLAN & "Converged switch" in VMM as our mgmt/server traffic (That is to say it's on production VLAN, not on a separate vlan)
PROBLEM:
Can't ping 100.157. From VM guest itself, from host, or from Cisco 6509 switch.
Cisco show mac address lookup does not see that MAC anywhere
show ip igmp groups shows not igmp traffic at all. Clearing counters show sno multicast increment.
FURTHERMORE:
Host is setup thusly:
- Dell R810
- 8x1GbE Broadcom 5709c in a Server 2012 LACP/HASH team built via VMM powershell cmdlets
- On the physical switch side, those 8 nics are in a Cisco port-channel, trunked, all VLANs allowed
- Host has no "physical" nics per se, as in a 2008 R2 hyper-v host. Instead Host has these:
Set-VMNetworkAdapter -ManagementOS -Name "Live Migrate" -MinimumBandwidthWeight 35
Set-VMNetworkAdapter -ManagementOS -Name "MGMT" -MinimumBandwidthWeight 25
Set-VMNetworkAdapter -ManagementOS -Name "CSV" -MinimumBandwidthWeight 40
Set-VMNetworkAdapter -ManagementOS -Name "iSCSI #1" -MinimumBandwidthWeight 0
Set-VMNetworkAdapter -ManagementOS -Name "iSCSI #2" -MinimumBandwidthWeight 0
Set-VMNetworkAdapter -ManagementOS -Name "Aux" -MinimumBandwidthWeight 0
Get-VMSwitch outputs this on the converged v-switch:
ComputerName : My-host
Name : My awesome switch
Id : e2377ce3-12b4-4243-9f51-e14a21f91844
Notes :
SwitchType : External
AllowManagementOS : True
NetAdapterInterfaceDescription : Microsoft Network Adapter Multiplexor
Driver
AvailableVMQueues : 0
NumberVmqAllocated : 0
IovEnabled : False
IovVirtualFunctionCount : 0
IovVirtualFunctionsInUse : 0
IovQueuePairCount : 0
IovQueuePairsInUse : 0
AvailableIPSecSA : 0
NumberIPSecSAAllocated : 0
BandwidthPercentage : 0
BandwidthReservationMode : Weight
DefaultFlowMinimumBandwidthAbsolute : 0
DefaultFlowMinimumBandwidthWeight : 1
Extensions : {Microsoft NDIS Capture, Microsoft
Windows Filtering Platform, Microsoft
VMM DHCPv4 Server Switch Extension}
IovSupport : False
IovSupportReasons : {This network adapter does not support
SR-IOV.}
IsDeleted : False
Question:
Aside from a few of my favorite MS MVPs (shout out to
WorkingHardInIt for having this same question), I can't find much documentation on employing 2008 R2 NLB on guest VM within a fabric-oriented, VMM-built 2012 Hyper-Visor converged switch (no network virtualization...yet).
Yes I know all about VMM NLB but 1) I'm trying to wedge NLB in after building these VMs without a service template (NLB is the audible, essentially) and 2) MS NLB is configured in providers & I've created requisite VIP templates.
Even so, I ought to be able to create an NLB cluster without VMM's assistance in this scenario correct? Suboptimal, I know but possible, yes? Essentially I've put to synthetic NICs on each VM, set IPs manually, and assigned them to the same vlan. I can ping
each synthetic NIC, but not the cluster IP.
And yes: these particular vNICs have Mac Address Spoofing enabled.
Cisco:
I have a TAC case open with Cisco, but they can't quite figure it out either. IGMP Snooping enabled across the switch. And they insist that the old static arp entry to resolve this problem is no longer necessary, that Microsoft now complies with relevant
RFCs
Possible SOlution:
Only thing I can think of is flipping MulticastForwarding param below from disabled to enabled. Anybody ever tried it on a converged virtual switch on the Hyper visor? Is my virtual converged switch protecting
me from multicast igmp packets?
PS C:\utilities> Get-NetIPv4Protocol
DefaultHopLimit : 128
NeighborCacheLimit(Entries) : 1024
RouteCacheLimit(Entries) : 128
ReassemblyLimit(Bytes) : 1560173184
IcmpRedirects : Enabled
SourceRoutingBehavior : DontForward
DhcpMediaSense : Enabled
MediaSenseEventLog : Disabled
IGMPLevel : All
IGMPVersion : Version3
MulticastForwarding : Disabled
GroupForwardedFragments : Disabled
RandomizeIdentifiers : Enabled
AddressMaskReply : Disabled
Thanks for any thoughts.
Robert

Sorry for the poor follow-up Steven. We are using Server 2012 Hyper-V, not VMWare, on the hosts. You can close this but for the benefit of anyone who comes across it:
After working with Cisco, we decided not to implement multicast IGMP. Cisco says you still need to create a static ARP entry on the physical switch, though my cluster IP address & Microsoft NLB 2008 R2 were set up with igmp multicast, not multicast or
unicast. Here was his email:
Yes, we will need the static mapping for the NLB server in this case because the NLB mac address is multicast and the IP address is unicast. I was under the impression that even the server would be using IGMP but that’s not
the case. We won’t need to do the mapping for the nodes though if they use IGMP. To this end, following is the configuration that should make this work.rp 192.168.100.157
0100.5e7f.649d arpa
<u5:p></u5:p>
mac address-table static 0000.0000.649d vlan <> interface <> disable-snooping
ßThis is the switch interface where the NLB server is located<u5:p></u5:p>
interface vlan<>
<u5:p></u5:p>
ip pim sparse-dense-mode <- This is needed for the switch to elicit IGMP joins from the nodes<u5:p></u5:p>
end<u5:p></u5:p>
I don't think it got through to him that there was a virtual Layer 2/3 Hyper-V switch on top of 8 teamed GbE interfaces in LACP/hash. "Where the NLB server is located" = 1)a Cisco port-channel bound to one of six physical hosts; the NLB VM itself could be
on any of those port channels at any given time (We have a six node Hyper-V cluster).
Once I enabled pim I did see activity; but we killed this later as we realized we'd have to implement the same on 40+ managed routers globally
Anyway we further would have had to implement this across managed routers at 40 sites globally according to Cisco.
Robert

Switch and Broadcast filtering

I read this article in the cisco curriculum, but I did not understand it well :
" Occasionally, a device will malfunction and continually send out broadcast frames, which are copied around the network. This is called a broadcast storm and it can significantly reduce network performance.
A switch that can filter broadcast frames makes a broadcast storm less harmful.
Today, switches are also able to filter according to the network-layer protocol. This blurs the demarcation between switches and routers. A router operates on the network layer using a routing protocol to direct traffic around the network. A switch that implements advanced filtering techniques is usually called a brouter. Brouters filter by looking at network layer information but they do not use a routing protocol ".
Can the switch filter the broadcast ? Yes, it can,,,,as Cisco says :"This filtering is achieved through the implementation of virtual local-area networks or VLANs ".,,,,,Is there any other type of filtering ?
What is the main difference between router and brouter

hi
if u would like to control the broadcast and multicast storms you can refer the link for configuring the storm control for both broadcast and multicast.
you can define up the values and shut the port if it exceeds the threshold limit..
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hif_r/int_s4h.htm#wp1229258
About the difference between a router and a Brouter afaik BROUTER u use in most of the SP network where you got customers in either DSL or Metro ethernet network where you will have the aggregation of the whole network traffic and from where it will be forwarded to upstream.
It depends on the ios code too which is available to serve the purpose for the same..
you got to have something like 7200 or 7300 in place to serve your purpose of brouter.
regds

Does Aironet AP1121G support multicast?

Hello everybody.Can the two wireless client under the same AP1121G support the multicast forwarding?What do I config on the AP1121G?
Thanks a lots.

Hi,
What is the IOS version of your AP?
Refer to the following url on how to configure filter to allow multicast forwarding.
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a0080341cc4.html
*Look under 'Configuring and Enabling IP Filters'
Hope it helps.
Rgds,
AK

Cisco AP541 Issues.... (DHCP, Multicast, etc...)

RegardsHello everyone,
I bought the AP541 since I thought I might just as well take the plunge and get a "real" AP rather than the Netgear 102's that I had in the past
( and been working perfectly fine I might add ).
First issue is DHCP - I just cant get an IP from my W2K3 server and or router... so I call Cisco and Cisco tells me to call my wendor and my wendor
tells me to call Cisco...
Eventually I find out that if you do a registry hack on W2K3 and disable the multcast/bradcast limit in the AP I actually get an IP.
Weeey - Happiness.... for a while... but whenever I use my IP TV (which uses broadcast) I loose connectivety to the AP *bummer*
Oh well... I will soon get a Cisco Switch where I can manage the broadcasts so no biggie....
Well - turns out the IP TV wants the IP from my router/modem and not from my server which means I'm back to square one.
AP wont "pass through" DHCP requests and it will "die" on excessive multicasts/broadcasts.
Ironic how a $70 AP does just fine and a $500 Cisco AP makes you want to throw the thing out the window.
Thoughts / ideas ?
Regards,
//Magnus

What firmware version are you running? I recently installed one of these and upgraded to 2.0.0 firmware and I don't have the DHCP problem. I don't have Multicast in the network so I can't comment on this issue.
However I do have a strange problem with a network printer that I use on the network though. I can't print when I'm using the wireless network (enabled by the AP) but I can ping the printer from a wired device.
Also, pings to the printer don't work from wireless but they work from a wired connection. But I can access the web management console of the printer! Very strange. It's almost as if the AP is filtering in some way. I have the WAP connected to an ESW500 switch and I suspect it may have something to do with the smart port setting on the ESW500 when the AP is connected. I can't find a way to force the port settings to anything other than AP through CCA (ver. 3.0(1)). I don't have the ping issue when the AP is connected through another switch but I still can't print to the printer when on wireless through the AP. I didn't have this problem with a regular linksys AP/Router. I'll have to do some more investigating to isolate whether the problem is the AP or the switch or both.
How is your AP connected to the rest of the network? Are you also using a switch with Smartport configurations?
TJ
Message was edited by: Tarquin Joseph
Update:
I logged into my ESW500 switch and forced the port that the printer is plugged into as a printer role (this is not available from CCA). I still could not ping the printer. I then configured the port the AP is plugged into, as a switch port and not AP. Voila! I can ping the printer. I had to remove and re-add the printer to be able to print though. So the problem seems to be with the Smart port definitions for APs. CCA now alerts me that I have an error in my configuration because the smartport definition is incorrect for the port the AP is connected to.
If you have configured smartports on your switch for your AP, try forcing the switch role and see if that solves the problems you are having.
TJ

Mobility groups with multicast - 7.4.100.60

Hello all,
I am not sure if this is a bug, but here we go. I configured 2 controllers in a mobility group using multicast signalling.
I expect that from the moment i enable multicast, the controller joins this group AND STAYS IN THIS GROUP so he will get messages from all other controllers.
On the first hop router, i can see the join:
#sh ip igmp mem 239.194.248.10
Flags: A - aggregate, T - tracked
       L - Local, S - static, V - virtual, R - Reported through v3
       I - v3lite, U - Urd, M - SSM (S,G) channel
       1,2,3 - The version of IGMP, the group is in
Channel/Group-Flags:
       / - Filtering entry (Exclude mode (S,G), Include mode (G))
Reporter:
       <mac-or-ip-address> - last reporter if group is not explicitly tracked
       <n>/<m>      - <n> reporter in include mode, <m> reporter in exclude
Channel/Group                  Reporter        Uptime   Exp. Flags Interface
*,239.194.248.10               10.102.78.98    00:00:05 02:54 2A     Vl350
However, this entry does not get refreshed. I have the impression that the controller does not reply to the IGMP general queries:
IGMP(0): Send v2 general Query on Vlan350 -> no replies
#sh ip igmp mem 239.194.248.10
Flags: A - aggregate, T - tracked
       L - Local, S - static, V - virtual, R - Reported through v3
       I - v3lite, U - Urd, M - SSM (S,G) channel
       1,2,3 - The version of IGMP, the group is in
Channel/Group-Flags:
       / - Filtering entry (Exclude mode (S,G), Include mode (G))
Reporter:
       <mac-or-ip-address> - last reporter if group is not explicitly tracked
       <n>/<m>      - <n> reporter in include mode, <m> reporter in exclude
Channel/Group                  Reporter        Uptime   Exp. Flags Interface
*,239.194.248.10               10.102.78.98    00:02:35 00:24 2A     Vl350
>> 20 seconds from expiry.
#sh ip igmp mem 239.194.248.10
Flags: A - aggregate, T - tracked
       L - Local, S - static, V - virtual, R - Reported through v3
       I - v3lite, U - Urd, M - SSM (S,G) channel
       1,2,3 - The version of IGMP, the group is in
Channel/Group-Flags:
       / - Filtering entry (Exclude mode (S,G), Include mode (G))
Reporter:
       <mac-or-ip-address> - last reporter if group is not explicitly tracked
       <n>/<m>      - <n> reporter in include mode, <m> reporter in exclude
Channel/Group                  Reporter        Uptime   Exp. Flags Interface
>> 20 seconds later, gone
>> At this moment the controller doesn't receive any messages anymore from remote controllers:
>>sh ip mroute 239.194.248.10
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
       L - Local, P - Pruned, R - RP-bit set, F - Register flag,
       T - SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,
       X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
       U - URD, I - Received Source Specific Host Report,
       Z - Multicast Tunnel, z - MDT-data group sender,
       Y - Joined MDT-data group, y - Sending to MDT-data group
       V - RD & Vector, v - Vector
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode
(*, 239.194.248.10), 00:05:38/00:00:21, RP 10.102.90.20, flags: SP
Incoming interface: Port-channel30, RPF nbr 10.102.78.13, RPF-MFD
Outgoing interface list: Null
This is seen on 8500 platform running 7.4.100.60
We have also WISMs running at 7.0.230.0, and there it can be seen that the entry refreshes every minute (like it should be)
IGMP(0): Received v2 Report on Vlan950 from 10.96.9.67 for 239.194.240.1
IGMP(0): Received Group record for group 239.194.240.1, mode 2 from 10.96.9.67 for 0 sources
IGMP(0): Updating EXCLUDE group timer for 239.194.240.1
IGMP(0): MRT Add/Update Vlan950 for (*,239.194.240.1) by 0
Shouldn't the controller at all times stay joined in its mobiility group ?

ok, some more debugging.
I loaded up 7.4.100.60 on a 5500 controller and got the same result.
NOTE: my global multicast settings are:
Controller->General: AP Multicast Mode: UNICAST
Controller->Multicast->Global Multicast is NOT enabled
Controller->Mobility->Multicast Messaging: enabled and group is 239.194.240.3
With this config, the IGMP entry is not retained, and i see on the controller the message (debug bcast all):
>>processEthernetIGMPpacket Received IGMP Pkt from DS when either igmp snooping or global multicast is disabled.
So, i then enabled Global Multicast (Controller->Multicast->Global Multicast to enable), and then the IGMP entry is refreshed:
bcastReceiveTask: Sep 05 13:11:17.734: IGMP packet received over vlanid = 102 from DS side
*bcastReceiveTask: Sep 05 13:11:17.734: received an IGMP query for multicast vlan = 102 address 0.0.0.0 intfnum = 3
*bcastReceiveTask: Sep 05 13:11:17.734: IGMP report scheduled for grp=0xefc2f003, vlan=102, intf=3, slot=70, maxRespTime=100
>>sh ip igmp membership 239.194.240.3
004586: Sep 5 15:11:50.710 CEST: IGMP(0): Send v2 general Query on Vlan101
Flags: A - aggregate, T - tracked
       L - Local, S - static, V - virtual, R - Reported through v3
       I - v3lite, U - Urd, M - SSM (S,G) channel
       1,2,3 - The version of IGMP, the group is in
Channel/Group-Flags:
       / - Filtering entry (Exclude mode (S,G), Include mode (G))
Reporter:
       - last reporter if group is not explicitly tracked
       /      - reporter in include mode, reporter in exclude
Channel/Group                  Reporter        Uptime   Exp. Flags Interface
*,239.194.240.3                10.102.180.218 00:38:51 02:28 2A     Vl102
Now, on the 5500 controller i can enable global multicast, while AP multicast mode is in UNICAST.
However, on the 8500 controller, running the same firmware (7.4.100.60), when i try to enable "Global Multicast", i get:
"Multicast-Unicast mode does not support IGMP/MLD snooping. Config mode to multicast-multicast first". I did not get this message on the 5500.
So when switching to Multicast->Multicast mode, and then enabled "Global Multicast", then it works.
This means that in order to have mobility messaging working on 8500 in multicast, you MUST put the AP Multicast Mode to Multicast AND you must enabled "Global Multicast", otherwise it won't work.

Changing the multicast Address and Port giving error

I am using Coherence 3.3.1 jar files (Coherence.jar and tangosol.jar) in my local application. But when I try to change the multicast Address and Port in tangosole-coherence.xml(in Coherence.jar) then it is giving this error -
"This member could not join the cluster because of an incompatibility between the cluster protocol used by this member and the one being used by the rest of the cluster. This is most likely caused by a Coherence version mismatch, or by mismatched protocol filters (e.g. compression, or encryption)"
If i am using unique IP and Port then how can it be in a Cluster as this error stating. Please reply ASAP.

Hi,
There is a good chance that there is already the IP and port is being used by another cluster (which uses different versions of jars or configurations) and hence, when you are starting your cluster, throwing the error.
Can you double check if another cluster is already using it or not ?
Thanks,
Amit

MAC Address Filtering and SPI set up

Hi,
I just purchased a WRT54GS V 6 wireless router. I updated the firmware to the latest (May 30) and the set up seems to be OK. Using the security recommendations in the manual as a guide, I implemented them - the turn off SSID, and the others.
IF I try to filter the MAC addresses (accept only those on the list) for my wife's Sony VAIO VGN - S260 laptop, it can see the network but will not connect. When I turn off the MAC filtering, it is fine. I used the WPA2 personal encryption, and input the passphrase into both router and computer.
My other issue is the firewall Statefull Packet Inspection (SPI). On the Security set up screen, firewall tab - I have the four radio button settings that I am supposed to (Block WAN request, filter Multicast, Filter NAT, & Filter IDENT), however, I do NOT have the option to turn on the firewall (SPI) above the 4 radio buttons - that setting is totally missing from the set up screen. Reference Page 28 of the manual.
I would appreciate any help or suggestions, as I could not find any ideas searching the forum. Thanks for your help

you can try and change a few wireless settings ....in the routers wireless section....go to the advanced wireless settings.....here you can reduce the beacon interval to 50...also reduce the RTS and Fragmentation by 40 each.....

RSPAN does not put IPv6 multicast traffic into port

Hi.
There is two switches in the equation:
WS-C2960-24TT-L 12.2(55)SE5 C2960-LANBASEK9-M
and stack of
Switch Ports Model SW Version SW Image
1 12 WS-C3750G-12S 12.2(55)SE8 C3750-IPSERVICESK9-M
2 12 WS-C3750G-12S 12.2(55)SE8 C3750-IPSERVICESK9-M
* 3 24 WS-C3750G-24T 12.2(55)SE8 C3750-IPSERVICESK9-M
3 is a master
There is VTP domain with pruning off and RSPAN VLAN 1001
core#sho vlan remote-span
Remote SPAN VLANs
1001
there is RSPAN session on first:
#sho monitor session 1
Session 1
Type : Remote Source Session
Source Ports :
Both : Fa0/11
Dest RSPAN VLAN : 1001
Port Fa0/11 is in access mode, VLAN 303
and on second:
core#sho monitor session 1
Session 1
Type : Remote Destination Session
Source RSPAN VLAN : 1001
Destination Ports : Gi3/0/2
Encapsulation : Native
Ingress : Disabled
Problem is that i can't see any IPv6 multicast traffic (like ICMPv6 RA or such) on Gi3/0/2 which is absolutely sure there, because if i remove monitoring session on core switch and put Gi3/0/2 into trunk mode, i can see packets i need in vlan 1001:
# tcpdump -s0 -nnvei eth1 vlan 1001 and ip6
tcpdump: WARNING: eth1: no IPv4 address assigned
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
14:17:37.059045 50:57:a8:f0:72:1b > 33:33:ff:00:00:01, ethertype 802.1Q (0x8100), length 90: vlan 1001, p 0, ethertype IPv6, (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 32) 2abc:abc:1:600b::2 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2abc:abc:1:600b::1
source link-address option (1), length 8 (1): 50:57:a8:f0:72:1b
14:17:38.083266 50:57:a8:f0:72:1b > 33:33:ff:00:00:01, ethertype 802.1Q (0x8100), length 90: vlan 1001, p 0, ethertype IPv6, (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 32) 2abc:abc:1:600b::2 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2abc:abc:1:600b::1
source link-address option (1), length 8 (1): 50:57:a8:f0:72:1b
14:17:39.107068 50:57:a8:f0:72:1b > 33:33:ff:00:00:01, ethertype 802.1Q (0x8100), length 90: vlan 1001, p 0, ethertype IPv6, (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 32) 2abc:abc:1:600b::2 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2abc:abc:1:600b::1
source link-address option (1), length 8 (1): 50:57:a8:f0:72:1b
There is no such problem with usual unicast and broadcast traffic.
Any suggestions?

Interestingly, i've found bug CSCsr64007 which i stubmbled upon on one of my switches during troubleshooting. The effect of this bug was that RSPAN took IPv6 multicast packets from unrelated VLANs and forwarded them into monitor port.
Looks like they have "fixed" it filtering IPv6 multicast completely.

IPv4 multicast broken in EA6900-v1.1 ? (IGMP report suppression)

After upgrading from EA6900-v1.0 to v1.1 (both with same SW=1.1.42.161129),
we observed that IPv4 multicast starts to fail (group membership expires).
Does anybody know about the internal architecture in these Routers (e.g. any unmanaged internal switches)?
It works fine if everything is wired.
However if host1 is connected to wired and host2 is connected to 2.4G wireless,
we see that Bonjour multicast gets forwarded but PTP multicast only in one direction.
We believe this could be related to a IGMP feature called "IGMP Report Suppression", where a host not will send "IGMP Report" (aka Join mcast group), if it receives an "IGMP Report" for the same group "recently". In that case it believes a peer within same hub already has subscribed.
Our theory is that in this mixed wired/wireless setup the Router might not forward PTP multicast traffic between wired and wireless when nobody send Report "on the other side".
However in that case we don't understand why it still seems to forward "IGMP Report" to "the other side"...
Bonjour uses 224.0.0.251 (within "Local Network Control Block") and PTP uses 224.0.1.129 (outside that block).
Routers might have different forwarding rules for these two ranges, see below.
http://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml
"Local Network Control Block (224.0.0.0 - 224.0.0.255 (224.0.0/24))"
http://www.ietf.org/proceedings/50/I-D/idmr-snoop-00.txt
"It is suggested that all multicast packets in the range 224.0.0.1 through 224.0.0.255 are forwarded on all ports."
/Mads

Internally AFAIK the WLAN and LAN ports are bridged and packets shouldn't be filtered. 2.4Ghz and 5Ghz are isolated from each other unfortuately on the EA6900. WAN to LAN\WLAN is different. I think in that case IGMP won't work because IGMP Proxy module would have to be installed.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Filtering Multicast on Cat4006

Similar Messages

Maybe you are looking for