[j-nsp] IGMP-Snooping problem

Paulhamus, Jon jpaulhamus at IU17.ORG
Thu Jan 19 18:20:10 EST 2012


Thanks for all of the replies.

I was able to get this fixed with some additional multicast filtering on the VLAN that I was missing in the firewall config on the switch.  I found a good vendor document with listed some other ranges that I was missing.


 

-----Original Message-----
From: Tima Maryin [mailto:timamaryin at mail.ru] 
Sent: Saturday, January 14, 2012 1:18 PM
To: Paulhamus, Jon
Cc: 'juniper-nsp at puck.nether.net'
Subject: Re: [j-nsp] IGMP-Snooping problem

Hi,

Does that system uses multicat ?

If yes, this knob may be helpful^
http://www.juniper.net/techpubs/en_US/junos10.0/information-products/topic-collections/config-guide-multicast/multicast-router-interface-edit-bridge-domains.html



On 13.01.2012 4:02, Paulhamus, Jon wrote:
> Hi Group,
>
> I have an issue with IGMP snooping enabled on EX switches that it's blocking IP phones from booting.  The phone system is a 3Com NBX system.   When IGMP-snooping is enabled, the phones will never register with the NCP - disabling on that VLAN solves the issue, but I need IGMP snooping on that VLAN for other reasons.
>
> What I've tried to fix the issue is creating a firewall filter both on the VLAN and all switch interfaces facing the phone system allowing the multicast group to be processed by the RE, but this does not seem to be working for me.
>
> I've also created static IGMP groups and applied them on all interfaces / uplinks toward the phone switch as well - this seems to help as the phones will eventually boot after ~ 3 to 5 minutes.  Phones with IGMP snooping disabled on the VLAN boot in about 24 seconds.  Packet captures are not showing any other multicast groups, or even any other activity...  if anyone can provide any assistance I would certainly appreciate it.  I have a cast opened with advanced TAC now, but not getting anywhere.
>
>



More information about the juniper-nsp mailing list