HP VPN Firewall Appliances Network Management Configuration Guide

594
b. Configure OSPF on the routers in the PIM-SM domain to make sure they are interoperable at
the network layer and they can dynamically update their routing information. (Details not
shown.)
c. Enable IP multicast routing, enable PIM-SM on each interface, and enable IGMP and IGMP
SSM mapping on the host-side interface:
# On the firewall, enable IP multicast routing globally, enable IGMPv3 and IGMP SSM
mapping on GigabitEthernet 0/1, and enable PIM-SM on each interface.
<Firewall> system-view
[Firewall] multicast routing-enable
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] igmp enable
[Firewall-GigabitEthernet0/1] igmp version 3
[Firewall-GigabitEthernet0/1] igmp ssm-mapping enable
[Firewall-GigabitEthernet0/1] pim sm
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] pim sm
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/3
[Firewall-GigabitEthernet0/3] pim sm
[Firewall-GigabitEthernet0/3] quit
# On Router A, enable IP multicast routing globally, and enable PIM-SM on each interface.
<RouterA> system-view
[RouterA] multicast routing-enable
[RouterA] interface ethernet 1/1
[RouterA-Ethernet1/1] pim sm
[RouterA-Ethernet1/1] quit
[RouterA] interface ethernet 1/2
[RouterA-Ethernet1/2] pim sm
[RouterA-Ethernet1/2] quit
[RouterA] interface ethernet 1/3
[RouterA-Ethernet1/3] pim sm
[RouterA-Ethernet1/3] quit
# Enable IP multicast routing and PIM-SM on Router B and Router C in the same way. (Details
not shown.)
d. Configure C-BSR and C-RP interfaces on the firewall.
[Firewall] pim
[Firewall-pim] c-bsr gigabitethernet 0/3
[Firewall-pim] c-rp gigabitethernet 0/3
[Firewall-pim] quit
e. Configure the SSM group range:
# Configure the SSM group range 232.1.1.0/24 on the firewall.
[Firewall] acl number 2000
[Firewall-acl-basic-2000] rule permit source 232.1.1.0 0.0.0.255
[Firewall-acl-basic-2000] quit
[Firewall] pim
[Firewall-pim] ssm-policy 2000