HP VPN Firewall Appliances Network Management Configuration Guide

669
Source 1 sends multicast data to multicast groups 225.1.1.0/30 and 226.1.1.0/30, and Source 2 sends
multicast data to multicast group 227.1.1.0/30.
Configure SA message filtering rules so that receivers Host A and Host B can receive only the multicast
data addressed to multicast groups 225.1.1.0/30 and 226.1.1.0/30, and Host can receive only the
multicast data addressed to multicast groups 226.1.1.0/30 and 227.1.1.0/30.
Figure 356 Network diagram
Table 73 Interface and IP address assignment
Device Interface IP address
Device Interface IP address
Source 1 — 10.110.3.100/24 Router C Eth1/1 10.110.4.1/24
Source 2 — 10.110.6.100/24 Router C Eth1/2 10.110.5.1/24
Router A Eth1/1 10.110.1.1/24 Router C POS5/1 192.168.1.2/24
Router A S2/1 10.110.2.1/24 Router C POS5/2 192.168.2.2/24
Router A POS5/1 192.168.1.1/24 Router C Loop0 2.2.2.2/32
Router A Loop0 1.1.1.1/32 Firewall GE0/1 10.110.6.1/24
Router B Eth1/1 10.110.3.1/24 Firewall GE0/2 10.110.7.1/24
Router B S2/1 10.110.2.2/24 Firewall GE0/3 10.110.5.2/24
Router B POS5/1 192.168.2.1/24 Firewall Loop0 3.3.3.3/32
Configuration procedure
1. Assign IP addresses and configure unicast routing:
a. Assign the IP address and subnet mask to each interface according to Figure 356. (Details no
t
shown.)
b. Configure OSPF on the routers in the PIM-SM domains to make sure the routers are
interoperable at the network layer and they can dynamically update routing information.
(Details not shown.)
2. Enable IP multicast routing, IGMP, and PIM-SM, and configure a PIM domain border:
MSDP peers
PIM-SM 1 PIM-SM 2 PIM-SM 3
Loop0
Loop0
Source 1
Source 2
Receiver
Host B
Receiver
Host C
Receiver
Host A
Eth1/1
Eth1/1
Eth1/1 GE0/2
S2/1
S2/1
P
O
S
5
/
1
P
O
S
5
/
1
P
OS
5
/
1
P
O
S
5
/
2
Eth1/2
GE0/3
GE0/1
Router A
Router C
Firewall
Router B