HP VPN Firewall Appliances Network Management Configuration Guide

631
Table 67 Interface and IP address assignment
Device Interface IP address
Device Interface IP address
Router A Eth1/1 10.110.1.1/24 Firewall GE0/1 10.110.5.1/24
Router A Eth1/2 192.168.1.1/24 Firewall GE0/2 192.168.1.2/24
Router A POS5/0 192.168.9.1/24 Firewall GE0/3 192.168.4.2/24
Router B Eth1/1 10.110.2.1/24 Router D POS5/0 192.168.3.2/24
Router B POS5/0 192.168.2.1/24 Router D POS5/1 192.168.2.2/24
Router C Eth1/1 10.110.2.2/24 Router D POS5/2 192.168.9.2/24
Router C POS5/0 192.168.3.1/24 Router D Eth1/1 192.168.4.1/24
2. Configuration procedure
a. Assign an IP address and subnet mask to each interface according to Figure 350. (Details not
shown.)
b. Configure OSPF on the routers in the PIM-SM domain to make su
re they are interoperable at
the network layer. (Details not shown.)
c. Enable IP multicast routing, IGMP, and PIM-SM:
# On Router A, enable IP multicast routing globally, enable IGMP on Ethernet 1/1, and enable
PIM-SM on each interface.
<RouterA> system-view
[RouterA] multicast routing-enable
[RouterA] interface ethernet 1/1
[RouterA-Ethernet1/1] igmp enable
[RouterA-Ethernet1/1] pim sm
[RouterA-Ethernet1/1] quit
[RouterA] interface ethernet 1/2
[RouterA-Ethernet1/2] pim sm
[RouterA-Ethernet1/2] quit
[RouterA] interface pos 5/0
[RouterA-Pos5/0] pim sm
[RouterA-Pos5/0] quit
# Enable IP multicast routing, IGMP, and PIM-SM on Router B and Router C in the same way.
(Details not shown.)
# Enable IP multicast routing and PIM-SM on Router D and the firewall in the same way.
(Details not shown.)
d. Configure a C-BSR and a C-RP:
# On the firewall, configure the service scope of RP advertisements, specify a C-BSR and a
C-RP, and set the hash mask length to 32 and the priority of the C-BSR to 10.
<Firewall> system-view
[Firewall] acl number 2005
[Firewall-acl-basic-2005] rule permit source 225.1.1.0 0.0.0.255
[Firewall-acl-basic-2005] quit
[Firewall] pim
[Firewall-pim] c-bsr gigabitethernet 0/3 32 10