[j-nsp] IGMP-Snooping problem

[Paul Zugnoni]

Are all your multicast-participating devices in this situation in the same VLAN? I.e. the switch is not acting as a IGMP gateway?

This may or many not be your situation, but I'll offer this tidbit:

We've had an issue where the source and receivers are on the same VLAN, and the application uses a control channel to trigger the source to start a multicast stream. So, there's no querier on the LAN. Unfortunately, the EX doesn't have a configuration available to make it a dedicated Querier (which is available on Cisco and some others...). Funny, IGMP Snooping does work on the EX when you do have a device connected that's configured with IGMP Querier. @Payam: We've also seen ISIS hellos blocked by EX ports in an IGMP-snooping VLAN.

Paul Zugnoni

On Jan 12, 2012, at 16:58 , Payam Chychi wrote:

hey John,

i believe juniper filters out macs when igmp snooping is enabled on the vlan, normally this would be fine however i think their filters are also capturing legitimate mac add/ranges

why do you need igmp snooping on ur phone vlan? if possible seperate ur voive vlan from data and disable igmp snooping on voice vlan

weve seen the same issue with isis

Sent from my iPhone
Payam T Chychi



On 2012-01-12, at 4:02 PM, "Paulhamus, Jon" <jpaulhamus at iu17.org<mailto:jpaulhamus at iu17.org>> wrote:

Hi Group,

I have an issue with IGMP snooping enabled on EX switches that it's blocking IP phones from booting.  The phone system is a 3Com NBX system.   When IGMP-snooping is enabled, the phones will never register with the NCP - disabling on that VLAN solves the issue, but I need IGMP snooping on that VLAN for other reasons.

What I've tried to fix the issue is creating a firewall filter both on the VLAN and all switch interfaces facing the phone system allowing the multicast group to be processed by the RE, but this does not seem to be working for me.

I've also created static IGMP groups and applied them on all interfaces / uplinks toward the phone switch as well - this seems to help as the phones will eventually boot after ~ 3 to 5 minutes.  Phones with IGMP snooping disabled on the VLAN boot in about 24 seconds.  Packet captures are not showing any other multicast groups, or even any other activity...  if anyone can provide any assistance I would certainly appreciate it.  I have a cast opened with advanced TAC now, but not getting anywhere.


Thank you very much,
Jon

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
https://puck.nether.net/mailman/listinfo/juniper-nsp

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
https://puck.nether.net/mailman/listinfo/juniper-nsp