R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module

481

482

483

484

485

486

487

488

489

490

477

• The SSM group range is 232.1.1.0/24.

• IGMPv3 is to run between Firewall A and N1, and between Firewall B/Firewall C and N2.

Network diagram

Figure 229 Network diagram for PIM-SSM configuration

Device Interface IP address

Device

Interface

IP address

Firewall A GE0/0 10.110.1.1/24 Firewall D GE0/0 10.110.5.1/24

GE0/1 192.168.1.1/24

GE0/1

192.168.1.2/24

GE0/2 192.168.9.1/24

GE0/2

192.168.4.2/24

Firewall B GE0/0 10.110.2.1/24 Firewall E GE0/1 192.168.3.2/24

GE0/1 192.168.2.1/24

GE0/2

192.168.2.2/24

Firewall C GE0/0 10.110.2.2/24

GE0/3

192.168.9.2/24

GE0/1 192.168.3.1/24 GE0/4 192.168.4.1/24

Configuration procedure

1. Configure IP addresses and unicast routing

Configure the IP address and subnet mask for each interface as per Figure 229.

Detailed configuration

steps are omitted here.

Configure the OSPF protocol for interoperation among the devices in the PIM-SM domain. Ensure the

network-layer interoperation in the PIM-SM domain and enable dynamic update of routing information

among the devices through a unicast routing protocol. Detailed configuration steps are omitted here.

2. Enable IP multicast routing, and enable PIM-SM and IGMP

# Enable IP multicast routing on Firewall A, enable PIM-SM on each interface, and run IGMPv3 on

GigabitEthernet 0/0, which connects Firewall A to the stub network.

<FirewallA> system-view

Ethernet

EthernetEthernet

N1N2