I-PIM-SM ngaphesheya kwe-VPN: hlola i-BSR, imephu ye-RP nemizila ye-RPF

Ithube lisebenza, ama-ping e-unicast ayadlula kulo, kodwa isamukeli sisabonisa isikrini esimnyama. Ekusetshenzisweni kwe-PIM-SM lesi sibonakaliso cishe njalo sisho ukuthi enye yemizila emine yokulawula iphukile, futhi umzila wedatha awuzange ube yinkinga. Landela uhlu olungezansi ngokulandelana futhi ume esinyathelweni sokuqala esihlulekayo, ngoba sonke isinyathelo esilandelayo sincike kwesedlule. Ngigcina lezi zivivinyo ezinhlanu efayeleni lombhalo futhi ngizinamathisela kutheminali lapho kufika isikhalo se-multicast, okwenza ukuxilonga kungaphenduki ukuqagela.

Qala ngesamukeli, hhayi ngethube

Isamukeli esingakaze sicele iqembu asikhi sandla sikhathi kunoma yiluphi umhambisi, ngakho ngaphambi kokuhlola enye into qinisekisa ukuthi ukujoyina kukhona esigabeni esibheke kusamukeli. Emapulatifomuni esitayela se-Cisco, i-show ip igmp groups kumhambisi wamagxathu okugcina iphrinta amaqembu ajonyiwe eceleni kwesixhumi esisebenzayo esasizwile. Lapho iqembu lingekho kulowo mphumela, ithube liyisiphazamisi: isicelo safa kuswishi yokungena, kusokhethi yomsingathi noma ku-VLAN engena-querier.

Izimbangela ezimbili ezijwayelekile zichaza iningi lokujoyina okungekho engikubonile: ukungafani kwenguqulo ye-IGMP phakathi komsingathi nomhambisi, kanye nokukhethwa kwe-querier okwehlela kuswishi engahambisi. Okwesithathu kucashile kakhulu: iqembu lijoyiniwe kodwa kuku-VLAN okungalungile, ngoba umsingathi unamakhadi amabili enethiwekhi futhi uhlelo lwanamathela kwelilodwa elingalungile. Abamukeli be-IPv6 banenkinga efanayo ne-MLD, lapho i-show ipv6 mld groups iphendula umbuzo ofanayo. Akukho nalokhu okulungiswa ngokuthinta ithube, futhi yikho kanye okwenza ukulandelana kubaluleke.

Lapho ukujoyina sekubonakala, qinisekisa ukuthi i-PIM ivuliwe kusixhumi esibheke kusamukeli nakusixhumi esiholela endaweni yokuhlangana. Umhambisi onobulungu be-IGMP kodwa ongenayo i-PIM kusixhumi saso esiphezulu uzogcina iqembu kuthebula lendawo futhi akukho azokuthumela ndawo.

Ingabe isethi ye-BSR ifinyelela kolunye uhlangothi?

Imiyalezo ye-Bootstrap Router ihamba ngamagxathu ngamanye ngaphakathi kwesizinda esisodwa se-PIM, futhi yiso leso sikhombisi esiphuka lapho kudlulwa ithube. Ama-RP angabazekayo athumela izimemezelo zawo ku-BSR ekhethiwe nge-unicast, ngakho ingxenye ye-RP-kuya-BSR ivamise ukusinda ingashintshile ethubeni elisebenzayo. Uzamazama wemiyalezo ye-Bootstrap kolunye uhlangothi uncike ekutheni zonke izixhumi eziphakathi zine-PIM, nasekutheni kukhona okumisa imiyalezo emngceleni. I-RFC 5059 ichaza lokho kusabalalisa kanye nemingcele yobubanzi bokuphatha evunyelwe ukuyifinyeza.

Isitatimende se-ip pim bsr-border, i-ACL ehlunga iphrothokholi engu-103, noma ithube le-IPsec elisekelwe kunqubomgomo elingakwazi ukuthwala i-multicast, ngakunye kuzosika uzamazama kuyilapho i-unicast isala ingashintshile. Yikho kanye lokhu kuhlangana okwenza ukuhluleka kubonakale njengenkinga ye-RP kuyilapho empeleni kuyinkinga yokufinyeleleka, futhi yikho engifunda ngakho isimo se-BSR ngaphambi kokufunda ukuhlelwa kwe-RP.

Kumhambisi ohlangothini olukude, i-show ip pim bsr-router isho i-BSR ekhethiwe kanye nesethi ye-RP efundiwe; uma umphumela ungenalutho, uhlangothi olukude luhlezi esizindeni salo futhi akukho kuhlelwa kwe-RP okuzobuyisana kokubili. Qhathanisa ububanzi bamaqembu namakheli e-RP ku-show ip pim rp mapping kuzinhlangothi zombili zethube. Imephu ekhona endaweni kuphela ikhiqiza isihlahla esabiwe esigcina endaweni engalungile, futhi isamukeli silinda kuze kube phakade.

Vumelanisa imephu ye-RP kuzinhlangothi zombili zethube

I-RP emile, i-BSR ne-anycast-RP ziyizindlela ezintathu zokuphendula umbuzo ofanayo, futhi ukuzixuba ngaphesheya kwethube kuyindlela ethembekile yokwakha isizinda esingahlangani nakancane. Uma uhlangothi oluyinhloko lusebenzisa i-BSR futhi igatsha lisebenzisa i-ip pim rp-address emile ekhomba kwelinye ikheli, igatsha lakha isihlahla salo esabiwe libheke ku-RP engazi ukuthi isamukeli sikhona. Imephu kufanele ivumelane ngobubanzi beqembu nangekheli, ngoba ububanzi obuthile bunqoba obubanzi.

I-anycast-RP ikhona khona kanye ukuze izingosi ezimbili zabelane ngekheli elilodwa le-RP, futhi kufanelekile ukuyisho lapha ngoba ishintsha okushiwo «i-RP efanayo». Ama-RP amabili amemezela ikheli elilodwa avumelana ngokwakhiwa; ama-RP amabili amemezela amakheli ahlukene obubanzi obufanayo awavumelani, noma ngabe isiza ngasinye sibukeka siphilile kangakanani sisodwa.

Kuma-multicast athile emthonjeni ngaphakathi kwe-232.0.0.0/8, i-RP ayibuzwa nakancane, ngakho imephu ye-RP engenalutho ayiyona iphutha ngokuzenzakalela. Nquma ukuthi uhlelo lisebenzisa imuphi umfuziselo wensizakalo ngaphambi kokujaha i-RP engakaze idingeke.

Funda ukusesha kwe-RPF kubheke emthonjeni

I-PIM yakha isihlahla ngokuhlanekezela umzila we-unicast, ngakho ukuhlola okubalulekile umzila obuyela emthonjeni, noma obuyela ku-RP wesihlahla esabiwe. Ukujoyina okufika kusixhumi umhambisi angasithathi njengesiphezulu kuyalahlwa, futhi isizathu sibhalwa njengokuhluleka kwe-RPF hhayi njengokuhluleka kwethube. Kumhambisi wegatsha onomzila ozenzakalelayo ophezu kwethube kanye nomzila othile kakhulu ophezu kwe-WAN, isixhumi se-RPF singaba i-WAN kalula noma ngabe umthombo ufinyeleleka kuphela ngethube. Yisona sizathu esisodwa esivame kakhulu sokuthi ukujoyina kulahlwe buthule.

I-show ip rpf 192.0.2.10 iphrinta isixhumi esikhethiwe, igxathu elilandelayo kanye nomzila owakha isinqumo, futhi lokho ngokuvamile kwanele ukubona ukungavumelani. Umzila we-multicast omile njenge-ip mroute 192.0.2.0 255.255.255.0 tunnel0 weqa ukusesha kwe-unicast kuleyo siqalo, futhi kuwukulungisa okusemthethweni lapho itopology ye-multicast ihluka ngempela kwelokuthi i-unicast. Kuyiphatha njengokuhlelwa okufanele kubhalwe phansi, hhayi njengesiqephu esisetshenziswe ngesikhathi sezigameko sase sikhohlwa.

Qinisekisa ukujoyina ngemiyalelo, hhayi nge-ping

I-ping ikhombisa ukuthi i-unicast iyasebenza, osekwazi lokho. Ukuqinisekisa kusuka ekugcineni kuya ekugcineni kuwukulandelana okubonisa ukujoyina, imephu, umakhelwane nesihlahla ngalolo hlelo, futhi umyalo ngamunye uphendula umbuzo ohlukile.

show ip igmp groups 239.1.1.1
show ip pim rp mapping
show ip pim neighbor
show ip rpf 192.0.2.10
show ip mroute 239.1.1.1

Umugqa we-(S,G) ogcwele onesixhumi sangempela sokungena kanye nohlu lokuphuma olungenalutho lusho ukuthi izinga lokulawula liqedile umsebenzi walo. Umugqa okufundwa kuwo isixhumi sokungena njenge-Null, noma isibali esibhalwe nge-RPF failed esikhula njalo, kukhomba emuva esigabeni esedlule hhayi ethubeni.

Uma yonke imiyalelo emihlanu ibonakala ilungile futhi isamukeli singaboni lutho, umsolwa osele inqubomgomo yethube ngokwalo: i-ACL yokubetela noma umthetho we-firewall ovumela iphrothokholi yokuhambisa i-unicast kodwa hhayi i-PIM, i-IGMP noma ithrafikhi yeqembu ngokwalo. Ethubeni le-IPsec elisekelwe kunqubomgomo, i-multicast ayithwalwa nakancane, ngakho impendulo ukwakhiwa kwe-GRE noma i-VTI hhayi esinye isiphambeko sesihlungi. Bhala ukuthi yikuphi kokuhlola okuhlanu okwehlulekile ngaphambi kokushintsha noma yini, bese ushintsha leso sigaba kuphela.