HP VPN Firewall Appliances Network Management Configuration Guide

903
<Firewall> system-view
[Firewall] multicast ipv6 routing-enable
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] mld enable
[Firewall-GigabitEthernet0/1] mld version 2
[Firewall-GigabitEthernet0/1] pim ipv6 sm
[Firewall-GigabitEthernet0/1] quit
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] pim ipv6 sm
[Firewall-GigabitEthernet0/2] quit
[Firewall] interface gigabitethernet 0/3
[Firewall-GigabitEthernet0/3] pim ipv6 sm
[Firewall-GigabitEthernet0/3] quit
# Enable IPv6 multicast routing, MLD and IPv6 PIM-SM on Router A and Router B in the same way.
(Details not shown.)
# Enable IPv6 multicast routing and IPv6 PIM-SM on Router C and Router D in the same way.
(Details not shown.)
3. Configure the IPv6 SSM group range to be FF3E::/64 on the firewall.
[Firewall] acl ipv6 number 2000
[Firewall-acl6-basic-2000] rule permit source ff3e:: 64
[Firewall-acl6-basic-2000] quit
[Firewall] pim ipv6
[Firewall-pim6] ssm-policy 2000
[Firewall-pim6] quit
The configuration on Router A, Router B, Router C, and Router D is similar to that on Router A.
Verifying the configuration
# Display IPv6 PIM information on the firewall.
[Firewall] display pim ipv6 interface
Interface NbrCnt HelloInt DR-Pri DR-Address
GE0/1 0 30 1 1001::1
(local)
GE0/2 1 30 1 1002::2
GE0/3 1 30 1 1003::2
Assume that Host A needs to receive the information a specific IPv6 multicast source S 4001::100/64
sends to multicast group G FF3E::101. The firewall builds an SPT toward the multicast source. The firewall
and Router C on the SPT path have generated an (S, G) entry, but Router D, which is not on the SPT path,
does not have multicast routing entries. You can use the display pim ipv6 routing-table command to
display PIM routing table information on each router. For example:
# Display IPv6 PIM multicast routing table information on the firewall.
[Firewall] display pim ipv6 routing-table
Total 0 (*, G) entry; 1 (S, G) entry
(4001::100, FF3E::101)
Protocol: pim-ssm, Flag:
UpTime: 00:00:11
Upstream interface: GigabitEthernet0/2