O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

20.10. Connect Two PIM Domains with Proxy RP

Problem

You need to connect two PIM domains together, and you can't run MSDP on your routers.

Solution

Use the firewall as a proxy RP:

	FIREWALL-A-> set vr trust-vr
	FIREWALL-A(trust-vr)-> set access-list 10 permit ip 224.0.0.0/4 10
	FIREWALL-A (trust-vr)-> set protocol pim
	FIREWALL-A (trust-vr/pim)-> set enable
	FIREWALL-A (trust-vr/pim)-> end
	FIREWALL-A-> set interface eth0/0 protocol pim
	FIREWALL-A-> set interface eth0/0 protocol pim enable
	FIREWALL-A-> set interface bgroup0 protocol pim
	FIREWALL-A-> set interface bgroup0 protocol pim enable
	FIREWALL-A-> set vr trust-vr
	FIREWALL-A (trust-vr)-> set protocol pim
	FIREWALL-A(trust-vr/pim)-> set zone "Untrust" rp candidate interface
	    ethernet0/0
	FIREWALL-A(trust-vr/pim)-> set zone "Untrust" rp proxy
	FIREWALL-A (trust-vr/pim)-> end
	FIREWALL-A->set multicast-group-policy from trust mgroup-list 10 to
	    untrust pim-message bsr-static-rp join-prune bi-directional

Discussion

Proxy RP is a ScreenOS proprietary method of connecting multicast domains. Conceptually, it is relatively simple (as far as PIM goes in general) and is analogous to the concept of VRs in ScreenOS. In fact, proxy RP is often used between VRs. By using a proxy RP, the firewall can act to completely separate PIM domains. In this recipe, a single VR is used, but conceptually, there is little difference, as the PIM control plane is controlled by the multicast group policy, as seen in Recipe 20.2. To run, you need to set the proxy keyword ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required