PIM SM: multicast traffic received on an interface, which is in non-DR, but assert winner state is not processed by Security Gateway

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk107186
Technical Level
Product	Quantum Security Gateways, ClusterXL, Cluster - 3rd party, VSX
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
OS	Gaia
Platform / Model	All
Date Created	05-Aug-2015
Last Modified	22-May-2017

Symptoms

PIM SM multicast traffic does not pass through Security Gateway.
Output of Gaia Clish command "show pim joins" shows the expected interfaces.
Output of Gaia Clish command "show mfc cache" shows correct outgoing interface and RP.
Output of Gaia Clish command "show mfc orphans" shows expired multicast routes.
Output of Expert mode command "ip mroute show" does not show the relevant interface, through which the involved multicast traffic should leave the Security Gateway (there is interface in the "Oifs" field).
RouteD PIM and MFC traces (per sk92598) show:
PIM MFC: xresolv for src=X.X.X.X,grp=2XX.X.X.X failed becausewe are not DR on interface to which source is directly connected mfc_create_sg: PIM instance 0 failed to resolve source X.X.X.X, group 2XX.X.X.X

Cause

Multicast traffic is not forwarded if RouteD daemon is not the PIM DR (Designated Router), but it is the PIM Assert Winner.

RouteD daemon incorrectly stops processing PIM SM multicast traffic that was received directly from source on a non-DR interface that is on that directly connected network.

Solution

Note: To view this solution you need to Sign In .