IPV6 static RP address for specific group

Hi mates

how can i configure ipv6 pim rp address for a specific multicast group?

i try following configuration because as i said Objective is that RP should only work for multicast group FF08::7

ipv6 access-list GROUP1
permit ipv6 any host FF08::7

Router(config)#ipv6 pim rp-address 2001::1 GROUP1

and i get the following errore:

%Error: Group prefix must be less than 128, skipping FF08::7/128

awaiting for your reply

thanks in advance

Comments

  • try this see if it works for you:

    ipv6 access-list ACL1
     permit ipv6 any FF08::/64

    ipv6 pim rp-address 2001::1 ACL1

    R4(config-if)#do sh ipv6 mroute
    (*, FF08::7), 00:00:03/never, RP 2001::1, flags: SCJ

      Incoming interface: FastEthernet0/0
      RPF nbr: FE80::C003:22FF:FE74:0

    R4#ping FF08::7
    Output Interface: FastEthernet0/0
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to FF08::7, timeout is 2 seconds:

    Packet sent with a source address of 2001::4

    Reply to request 0 received from 2001::1, 96 ms
    Reply to request 1 received from 2001::1, 48 ms
    Reply to request 2 received from 2001::1, 100 ms
    Reply to request 3 received from 2001::1, 52 ms

    Reply to request 4 received from 2001::1, 36 ms
    Success rate is 100 percent (5/5), round-trip min/avg/max = 36/66/100 ms
    5 multicast replies and 0 errors.


    R3#sh ipv6 interface f0/0
    FastEthernet0/0 is up, line protocol is up

      IPv6 is enabled, link-local address is FE80::C003:22FF:FE74:0
      No Virtual link-local address(es):
      Global unicast address(es):
        2001::1, subnet is 2001::/64
      Joined group address(es):
        FF02::1

        FF02::2
        FF02::D
        FF02::16
        FF02::1:FF00:1
        FF02::1:FF74:0
        FF08::7





    On Wed, Mar 24, 2010 at 3:03 PM, shayan <[email protected]> wrote:

    Hi mates

    how can i configure ipv6 pim rp address for a specific multicast group?

    i try following configuration because as i said Objective is that RP should only work for multicast group FF08::7

    ipv6 access-list ACL1
    permit ipv6 any host FF08::7

    Router(config)#ipv6 pim rp-address 2001::1 ACL1

    and i get the following errore:

    %Error: Group prefix must be less than 128, skipping FF08::10/128

    awaiting for your reply

    thanks in advance




    Internetwork Expert - The Industry Leader in CCIE Preparation

    http://www.internetworkexpert.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx


  • THANKS for your quick response

    it work but my objective is that RP should only work for a spicifiec multicast group which is FF08::7  no all groups under ff08::/64.

    Registration should not be allowed if any device / host try sending registration request for any other groups.

  • i agree, and after my quick response, i got to looking closer at your requirement...

    and searched around and try to think like the router in binary with access-list, but i do not see how it can be done?


    to match all 128 bits to match ff08::7, so i must be missing the point also of what the requirement is...

    i am hoping to hear from some else on this topic...





    On Wed, Mar 24, 2010 at 4:40 PM, shayan <[email protected]> wrote:

    THANKS for your quick response

    it work but my objective is that RP should only work for a spicifiec multicast group which is FF08::7  no all groups under ff08::/64.

    Registration should not be allowed if any device / host try sending registration request for any other groups.




    Internetwork Expert - The Industry Leader in CCIE Preparation

    http://www.internetworkexpert.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx


  • Thanks mate

     i am ooking to hear from somebody too :)

    --- On Wed, 3/24/10, bakergarry <[email protected]> wrote:

    From: bakergarry <[email protected]>
    Subject: Re: [CCIE R&S] IPV6 static RP address for specific group
    To: [email protected]
    Date: Wednesday, March 24, 2010, 8:10 AM





    i agree, and after my quick response, i got to looking closer at your requirement...

    and searched around and try to think like the router in binary with access-list, but i do not see how it can be done?

    to match all 128 bits to match ff08::7, so i must be missing the point also of what the requirement is...

    i am hoping to hear from some else on this topic...





    On Wed, Mar 24, 2010 at 4:40 PM, shayan <[email protected]> wrote:

    THANKS for your quick response

    it work but my objective is that RP should only work for a spicifiec multicast group which is FF08::7  no all groups under ff08::/64.

    Registration should not be allowed if any device / host try sending registration request for any other groups.




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx

  • i got this response off another mailing list and it "works" not sure what else it might break in a scenario though???

    "The only way I've found to accomplish this is to use the
    "ipv6 multicast group-range" command:

    ipv6 multicast group-range
    RP
    !
    ipv6 access-list RP

     permit ipv6 any host
    FF08::7

    The multicast group-range command enables/disables
    multicast forwarding for only the specified groups."





    On Wed, Mar 24, 2010 at 6:13 PM, bakergarry <[email protected]> wrote:

    i agree, and after my quick response, i got to looking closer at your requirement...

    and searched around and try to think like the router in binary with access-list, but i do not see how it can be done?


    to match all 128 bits to match ff08::7, so i must be missing the point also of what the requirement is...

    i am hoping to hear from some else on this topic...





    On Wed, Mar 24, 2010 at 4:40 PM, shayan <[email protected]> wrote:

    THANKS for your quick response

    it work but my objective is that RP should only work for a spicifiec multicast group which is FF08::7  no all groups under ff08::/64.

    Registration should not be allowed if any device / host try sending registration request for any other groups.




    Internetwork Expert - The Industry Leader in CCIE Preparation


    http://www.internetworkexpert.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx






    Internetwork Expert - The Industry Leader in CCIE Preparation

    http://www.internetworkexpert.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx


  • So is this the solution? Because I too am looking for a way to only allow an RP for a single multicast group......????


  • Ah I thought I had it licked then.... no-one on the intarwebs seems to know this.

     

    Anyone tried using the "ipv6 pim accept-register" command? For whatever reason the rp-address command only allows as specific as a /127 - hence the minimum you can have is two /128 groups registered at the RP. However theoretically the accept-register command can be applied at the RP and used to filter sources AND destinations at the registration level. I thought this would do the trick - we could simply tell the RP not to accept any registers from sources going to anywhere except our /128 group.

    However I couldn't get it to work - although I think the theory still stands up. I tried creating an ACL permitting ANY to host x/128 and denying all else - but it seemed to just ignore the whole thing. I am wondering if this functionality is restricted to just limiting the source at the moment? Food for thought.

  • Your solution is correct.

    You just have to test on 3 hops away routers, otherwise the embedded RP will take place and you won't be able to test your result.

     

     

  • Bump

    Can an INE instructor answer this original thread?  This is really important as this is not covered in any of INE's material.  I REALLY REALLY WANT TO KNOW. :)

  • Can some expert from INE please come forward to suggest what can be about this issue. I am also not getting idea about this.

    Thanks!

  • For clarification the ipv multicast group-range command needs to be applied to each router in the path that is also configured with the static RP.

     

    ipv6 multicast group-range RP

    !

    ipv6 access-list RP

     permit ipv6 any host FF08::7

     

    ipv6 pim rp-address FC01:A82:24:A:21C:F6FF:FE85:FB39

  • how about setting up accepting register along with the acl matching up the group address on RP.

     

    HTH...

    Deepak Arora

    http://deepakarora1984.blogspot.com

     

  • I believe that the global ipv6 multicast group-list command would work.

    This is straight from doc-cd.

    no Protocol Independent Multicast (PIM)
    joins are forwarded), and drops data traffic on all interfaces in the
    system, thus disabling multicast for denied groups or channels.

    Therefore if you apply this command in the path between the source and multicast group, you would effectively permit/deny any group addresses from joining the RP.  I would think that it is not necessary to apply this on every ipv6 multicast enabled device in the path, but on any one device in the path.  I guess you could do this for every router from the source to the multicast group just to be safe.

  • Just a theoritical question but say you configured it with teh /128 address and that turned out to be correct after the fact.  Why would it be correct?

Sign In or Register to comment.