O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

20.12. PIM and High Availability

Problem

You want to run PIM on a NetScreen Redundancy Protocol (NSRP) cluster with dual upstream and downstream routers.

Solution

Getting NSRP and PIM to work well together requires proper NSRP configuration, as well as PIM configuration on Virtual Security Interfaces (VSIs). To maintain router redundancy, configure BGP. First, set up NSRP:

	FIREWALL-A-> set nsrp cluster id 1
	FIREWALL-A(M)-> unset nsrp vsd-group id 0
	FIREWALL-A(M)-> set nsrp vsd-group id 1 priority 1
	FIREWALL-A(M)-> set nsrp vsd-group id 1 preempt hold-down 10

	FIREWALL-A(M)-> set int e0/0:1 ip 10.6.6.5/24
	FIREWALL-A(M)-> set int bgroup0:1 ip 10.5.5.5/24
	FIREWALL-A(M)-> set nsrp rto-mirror sync
	FIREWALL-A(M)-> set nsrp monitor interface eth0/0
	FIREWALL-A(M)-> set nsrp monitor interface bgroup0

	FIREWALL-B-> set nsrp cluster id 1
	FIREWALL-B(B)-> unset nsrp vsd-group id 0
	FIREWALL-B(M)-> set nsrp monitor interface eth0/0
	FIREWALL-B(M)->set nsrp monitor interface bgroup0

Next, enable PIM in the VR, as well as on the interfaces. Use static RP (in this case) so that after a failover, FIREWALL-B doesn't have to wait for a new bootstrap message to populate its RP table. When configuring PIM with NSRP, it is recommended that you enable the protocol on the VSI to avoid the RPF issues discussed in Recipe 20.11.

	FIREWALL-A(M)-> set vrouter trust-vr
	FIREWALL-A(trust-vr)(M)-> set protocol pim
	FIREWALL-A(trust-vr/pim)(M)-> set enable
	FIREWALL-A(trust-vr/pim)(M)-> exit
	FIREWALL-A(trust-vr)(M)-> exit

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required