[j-nsp] IGMP-Snooping problem

[Payam Chychi]

hey John,

i believe juniper filters out macs when igmp snooping is enabled on the vlan, normally this would be fine however i think their filters are also capturing legitimate mac add/ranges 

why do you need igmp snooping on ur phone vlan? if possible seperate ur voive vlan from data and disable igmp snooping on voice vlan

weve seen the same issue with isis

Sent from my iPhone
Payam T Chychi



On 2012-01-12, at 4:02 PM, "Paulhamus, Jon" <jpaulhamus at iu17.org> wrote:

> Hi Group,
> 
> I have an issue with IGMP snooping enabled on EX switches that it's blocking IP phones from booting.  The phone system is a 3Com NBX system.   When IGMP-snooping is enabled, the phones will never register with the NCP - disabling on that VLAN solves the issue, but I need IGMP snooping on that VLAN for other reasons.
> 
> What I've tried to fix the issue is creating a firewall filter both on the VLAN and all switch interfaces facing the phone system allowing the multicast group to be processed by the RE, but this does not seem to be working for me.
> 
> I've also created static IGMP groups and applied them on all interfaces / uplinks toward the phone switch as well - this seems to help as the phones will eventually boot after ~ 3 to 5 minutes.  Phones with IGMP snooping disabled on the VLAN boot in about 24 seconds.  Packet captures are not showing any other multicast groups, or even any other activity...  if anyone can provide any assistance I would certainly appreciate it.  I have a cast opened with advanced TAC now, but not getting anywhere.
> 
> 
> Thank you very much,
> Jon
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp