HP VPN Firewall Appliances Network Management Configuration Guide

637
2. Configuration procedure
a. Assign an IP address and subnet mask to each interface according to Figure 351. (Details not
shown.)
b. Configure OSPF on the routers in the PIM-SM domain to make su
re they are interoperable at
the network layer. (Details not shown.)
c. Enable IP multicast routing and administrative scoping, enable IGMP and PIM-SM:
# On Router A, enable IP multicast routing and administrative scoping, enable IGMP on the
host-side interface Ethernet 1/1, and enable PIM-SM on each interface.
<RouterA> system-view
[RouterA] multicast routing-enable
[RouterA] pim
[RouterA-pim] c-bsr admin-scope
[RouterA-pim] quit
[RouterA] interface ethernet 1/1
[RouterA-Ethernet1/1] igmp enable
[RouterA-Ethernet1/1] pim sm
[RouterA-Ethernet1/1] quit
[RouterA] interface ethernet 1/2
[RouterA-Ethernet1/2] pim sm
[RouterA-Ethernet1/2] quit
# Enable IP multicast routing and administrative scoping, enable IGMP and PIM-SM on Router
B and Router H in the same way. (Details not shown.)
# On the firewall, enable IP multicast routing and administrative scoping, and enable PIM-SM
on each interface.
<Firewall> system-view
[Firewall] multicast routing-enable
[Firewall] pim
[Firewall-pim] c-bsr admin-scope
[Firewall-pim] quit
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] pim sm
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] pim sm
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/3
[Firewall-GigabitEthernet0/3] pim sm
[Firewall-GigabitEthernet0/3] quit
[Firewall] interface gigabitethernet 0/4
[Firewall-GigabitEthernet0/4] pim sm
[Firewall-GigabitEthernet0/4] quit
# Enable IP multicast routing and administrative scoping, and enable PIM-SM on Router B,
Router C, Router E, Router F, and Router G in the same way. (Details not shown.)
d. Configure an admin-scoped zone boundary:
# On the firewall, configure GigabitEthernet 0/3 and GigabitEthernet 0/4 as the boundary of
admin-scoped zone 1.
[Firewall] interface gigabitethernet 0/3