F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

859
RPF prime neighbor: NULL
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet0/1
Protocol: igmp, UpTime: 00:04:25, Expires: never
(1001::100, FF1E::101)
Protocol: pim-dm, Flag: ACT
UpTime: 00:06:14
Upstream interface: Tunnel0
Upstream neighbor: 5001::1
RPF prime neighbor: 5001::1
Downstream interface(s) information:
Total number of downstreams: 1
1: GigabitEthernet0/1
Protocol: pim-dm, UpTime: 00:04:25, Expires: never
The output shows that Router A is the RPF neighbor of the firewall and the IPv6 multicast data from Router
A is delivered over a GRE tunnel to the firewall.
326B
Troubleshooting abnormal termination of IPv6
multicast data
1788BSymptom
• A host sends an MLD report announcing its joining an IPv6 multicast group (G). However, no
member information about the IPv6 multicast group (G) exists on the intermediate router. The
intermediate router can receive IPv6 multicast packets successfully, but the packets cannot reach the
stub network.
• The interface of the intermediate router receives the IPv6 multicast packets, but no corresponding (S,
G) entry exists in the IPv6 PIM routing table.
1789BAnalysis
• The multicast ipv6 boundary command filters IPv6 multicast packets received on an interface. If an
IPv6 multicast packet fails to match the IPv6 ACL rule of this command, IPv6 PIM creates no routing
entry.
• In addition, the source-policy command in IPv6 PIM filters received IPv6 multicast packets. If an IPv6
multicast packet fails to match the IPv6 ACL rule of this command, IPv6 PIM does not create a
routing entry.
1790BSolution
1. Use the display current-configuration command to display the IPv6 ACL rule configured on the
multicast forwarding boundary. Change the IPv6 ACL rule used in the multicast ipv6 boundary
command so that the source address of the IPv6 multicast packets and the IPv6 multicast group
address can both match the IPv6 ACL rule.
2. Use the display current-configuration command to verify the configuration of the IPv6 multicast
filter, and change the IPv6 ACL rule used in the source-policy command so that the source address
of the IPv6 multicast packets and the IPv6 multicast group address can both match the IPv6 ACL
rule.