rfc-editor | 4 Apr 2009 01:47
Favicon

RFC 5519 on Multicast Group Membership Discovery MIB


A new Request for Comments is now available in online RFC libraries.

        
        RFC 5519

        Title:      Multicast Group Membership Discovery MIB 
        Author:     J. Chesterfield, B. Haberman, Ed.
        Status:     Standards Track
        Date:       April 2009
        Mailbox:    julian.chesterfield <at> cl.cam.ac.uk, 
                    brian <at> innovationslab.net
        Pages:      41
        Characters: 76260
        Obsoletes:  RFC2933, RFC3019

        I-D Tag:    draft-ietf-magma-mgmd-mib-15.txt

        URL:        http://www.rfc-editor.org/rfc/rfc5519.txt

This memo defines a portion of the Management Information Base (MIB)
for use with network management protocols in the Internet community.
In particular, it describes objects used for managing the Internet
Group Management Protocol (IGMP) and the Multicast Listener Discovery
(MLD) protocol.  [STANDARDS TRACK]

This document is a product of the Multicast & Anycast Group Membership Working Group of the IETF.

This is now a Proposed Standard Protocol.

(Continue reading)

V, Magesh (Magesh | 12 Apr 2009 18:31
Favicon

IGMP Snooping proxy

Hi,

A v2 snooping switch that works in proxy-mode may aggregate and send the v2 igmp membership reports to upstream igmp router with source ip address 0.0.0.0. In such a case,

1. How can the upstream igmp router ensure that the membership report is coming from a host that is indeed in the same subnet that of the igmp interface?

2. Should the igmp router not discard the reports if the source-ip of such packets are not in its local network?

3. If such packets (as in 2) will indeed be dropped then is it not required of the snooping switch (proxy mode) to send at least one report for each LAN w/ valid source-ip address for that network?

 

Would appreciate if someone can educate me on this.

 

Thanks a lot,

Magesh.

 

_______________________________________________
magma mailing list
magma <at> ietf.org
https://www.ietf.org/mailman/listinfo/magma
Bharat Joshi | 13 Apr 2009 05:26
Favicon

Re: IGMP Snooping proxy


Hi Magesh,

    Please see my response in line.

Thanks,
Bharat

>A v2 snooping switch that works in proxy-mode may aggregate and send the v2 igmp membership reports to
upstream igmp 
>router with source ip address 0.0.0.0. In such a case, 
>
>1. How can the upstream igmp router ensure that the membership report is coming from a host that is indeed in
the same 
>subnet that of the igmp interface?

It can not. Router needs to be told that there is a snooping switch which does aggregation as well.

>2. Should the igmp router not discard the reports if the source-ip of such packets are not in its local network?

No. It should not. A router needs to be configured appropriately to not discard such messages. IIRC, Proxy
RFC mention this somewhere.

>3. If such packets (as in 2) will indeed be dropped then is it not required of the snooping switch (proxy
mode) to 
>send at least one report for each LAN w/ valid source-ip address for that network?

As I mentioned above, router must be configured not to drop these packets. 

For your question, if snooping switch forwards at least one report upstream for each valid source ip, part
of aggregation is broken. Another question is how does this switch will know what all are the valid source addresses?

**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely 
for the use of the addressee(s). If you are not the intended recipient, please 
notify the sender by e-mail and delete the original message. Further, you are not 
to copy, disclose, or distribute this e-mail or its contents to any other person and 
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken 
every reasonable precaution to minimize this risk, but is not liable for any damage 
you may sustain as a result of any virus in this e-mail. You should carry out your 
own virus checks before opening the e-mail or attachment. Infosys reserves the 
right to monitor and review the content of all messages sent to or from this e-mail 
address. Messages sent to or from this e-mail address may be stored on the 
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***
V, Magesh (Magesh | 13 Apr 2009 07:24
Favicon

Re: IGMP Snooping proxy

Hello Bharat,

Thanks for the answers.

·         Can you please elaborate as to what the igmp router can be configured with; is it to explicitly specify to process reports with src-ip 0.0.0.0?

·         I referred in 2236 (mine is a v2 router) where, I couldn’t find a reference for this?

·         Lastly, regarding valid source-ip; I agree that a part of aggregation will be defeated but the switch may send just ONE report per mc group per vlan in addition to the aggregated report. The switch can use the source-ip of the report which it last heard to refresh its group membership expiry timer for than LAN.

·         OR it must be made possible in the proxy-snooping implementation to configure an ip-address per mrouter port which, can be used as the source-ip for the aggregates.

 

Thanks,

Magesh.

 

-----Original Message-----
From: Bharat Joshi [mailto:bharat_joshi <at> infosys.com]
Sent: Monday, April 13, 2009 8:57 AM
To: V, Magesh (Magesh)
Cc: magma <at> ietf.org
Subject: RE: IGMP Snooping proxy

 

 

Hi Magesh,

 

    Please see my response in line.

 

Thanks,

Bharat

 

>A v2 snooping switch that works in proxy-mode may aggregate and send the v2 igmp membership reports to upstream igmp

>router with source ip address 0.0.0.0. In such a case,

>

 

>1. How can the upstream igmp router ensure that the membership report is coming from a host that is indeed in the same

>subnet that of the igmp interface?

 

It can not. Router needs to be told that there is a snooping switch which does aggregation as well.

 

>2. Should the igmp router not discard the reports if the source-ip of such packets are not in its local network?

 

No. It should not. A router needs to be configured appropriately to not discard such messages. IIRC, Proxy RFC mention this somewhere.

 

>3. If such packets (as in 2) will indeed be dropped then is it not required of the snooping switch (proxy mode) to

>send at least one report for each LAN w/ valid source-ip address for that network?

 

As I mentioned above, router must be configured not to drop these packets.

 

For your question, if snooping switch forwards at least one report upstream for each valid source ip, part of aggregation is broken. Another question is how does this switch will know what all are the valid source addresses?

 

**************** CAUTION - Disclaimer *****************

This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely

for the use of the addressee(s). If you are not the intended recipient, please

notify the sender by e-mail and delete the original message. Further, you are not

to copy, disclose, or distribute this e-mail or its contents to any other person and

any such actions are unlawful. This e-mail may contain viruses. Infosys has taken

every reasonable precaution to minimize this risk, but is not liable for any damage

you may sustain as a result of any virus in this e-mail. You should carry out your

own virus checks before opening the e-mail or attachment. Infosys reserves the

right to monitor and review the content of all messages sent to or from this e-mail

address. Messages sent to or from this e-mail address may be stored on the

Infosys e-mail system.

***INFOSYS******** End of Disclaimer ********INFOSYS***

_______________________________________________
magma mailing list
magma <at> ietf.org
https://www.ietf.org/mailman/listinfo/magma
Bharat Joshi | 13 Apr 2009 07:38
Favicon

Re: IGMP Snooping proxy

Hi Magesh,

      Please see my response in line.

Thanks,
Bharat

> 
> ·        Can you please elaborate as to what the igmp router can be configured with; is it to explicitly specify to
process reports with src-ip 0.0.0.0?
> 
> ·        I referred in 2236 (mine is a v2 router) where, I couldn’t find a reference for this?

Please look at point 2 of section 2.1.1 of RFC 4541. It mention this. Just read through this RFC,
consideration of source address as 0.0.0.0 is mentioned at couple of places.

> ·        Lastly, regarding valid source-ip; I agree that a part of aggregation will be defeated but the switch
may send just ONE report per mc group per vlan in addition to the aggregated report. The switch can use the
source-ip of the report which it last heard to refresh its group membership expiry timer for than LAN.

Yes. Switch can surely do that and with this you do not need to send multiple join/leave requests upstream.

> ·        OR it must be made possible in the proxy-snooping implementation to configure an ip-address per
mrouter port which, can be used as the source-ip for the aggregates.

You can do this as well. It is similar to the above one but more granular.
**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely 
for the use of the addressee(s). If you are not the intended recipient, please 
notify the sender by e-mail and delete the original message. Further, you are not 
to copy, disclose, or distribute this e-mail or its contents to any other person and 
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken 
every reasonable precaution to minimize this risk, but is not liable for any damage 
you may sustain as a result of any virus in this e-mail. You should carry out your 
own virus checks before opening the e-mail or attachment. Infosys reserves the 
right to monitor and review the content of all messages sent to or from this e-mail 
address. Messages sent to or from this e-mail address may be stored on the 
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***
V, Magesh (Magesh | 13 Apr 2009 08:51
Favicon

Re: IGMP Snooping proxy

Hi Bharat,
4541 talks about a switch receiving/sending reports with src-ip 0.0.0.0. My question was w.r.t the
upstream igmp router that receives this report. Hence, I was referring 2236. However, I got a reference in
3376 (IgmpV3 - section 4.2.13) that mandates to accept reports w/ source-ip 0.0.0.0

However, my igmp router is v2.

Thanks,
Magesh.

-----Original Message-----
From: Bharat Joshi [mailto:bharat_joshi <at> infosys.com] 
Sent: Monday, April 13, 2009 11:09 AM
To: V, Magesh (Magesh)
Cc: magma <at> ietf.org
Subject: RE: IGMP Snooping proxy

Hi Magesh,

      Please see my response in line.

Thanks,
Bharat

> 
> *        Can you please elaborate as to what the igmp router can be configured with; is it to explicitly specify to
process reports with src-ip 0.0.0.0?
> 
> *        I referred in 2236 (mine is a v2 router) where, I couldn't find a reference for this?

Please look at point 2 of section 2.1.1 of RFC 4541. It mention this. Just read through this RFC,
consideration of source address as 0.0.0.0 is mentioned at couple of places.

> *        Lastly, regarding valid source-ip; I agree that a part of aggregation will be defeated but the switch may
send just ONE report per mc group per vlan in addition to the aggregated report. The switch can use the
source-ip of the report which it last heard to refresh its group membership expiry timer for than LAN.

Yes. Switch can surely do that and with this you do not need to send multiple join/leave requests upstream.

> *        OR it must be made possible in the proxy-snooping implementation to configure an ip-address per mrouter
port which, can be used as the source-ip for the aggregates.

You can do this as well. It is similar to the above one but more granular.
**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely 
for the use of the addressee(s). If you are not the intended recipient, please 
notify the sender by e-mail and delete the original message. Further, you are not 
to copy, disclose, or distribute this e-mail or its contents to any other person and 
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken 
every reasonable precaution to minimize this risk, but is not liable for any damage 
you may sustain as a result of any virus in this e-mail. You should carry out your 
own virus checks before opening the e-mail or attachment. Infosys reserves the 
right to monitor and review the content of all messages sent to or from this e-mail 
address. Messages sent to or from this e-mail address may be stored on the 
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***
Bharat Joshi | 13 Apr 2009 09:14
Favicon

Re: IGMP Snooping proxy

Hi Magesh,

     You are right. I was thinking that I have read this somewhere.

     From RFC 4541, it is clear that a switch can generate a join message with 0.0.0.0 source address. Now if your
router is IGMPv2 and follow RFC to the word, it will discard this packet. But if your router can
interoperate with switches that supports RFC 4541, it must not discard this packet.

     Alternatively, you can check if switch provides some mean to configure an IP address that can be used as
source address for these messages but then the same IP address can not be used in the general queries
generated on downstream ports.

Thanks,
Bharat

________________________________________
From: V, Magesh (Magesh) [mageshv <at> alcatel-lucent.com]
Sent: Monday, April 13, 2009 12:21 PM
To: Bharat Joshi
Cc: magma <at> ietf.org
Subject: RE: IGMP Snooping proxy

Hi Bharat,
4541 talks about a switch receiving/sending reports with src-ip 0.0.0.0. My question was w.r.t the
upstream igmp router that receives this report. Hence, I was referring 2236. However, I got a reference in
3376 (IgmpV3 - section 4.2.13) that mandates to accept reports w/ source-ip 0.0.0.0

However, my igmp router is v2.

Thanks,
Magesh.

-----Original Message-----
From: Bharat Joshi [mailto:bharat_joshi <at> infosys.com]
Sent: Monday, April 13, 2009 11:09 AM
To: V, Magesh (Magesh)
Cc: magma <at> ietf.org
Subject: RE: IGMP Snooping proxy

Hi Magesh,

      Please see my response in line.

Thanks,
Bharat

>
> *        Can you please elaborate as to what the igmp router can be configured with; is it to explicitly specify to
process reports with src-ip 0.0.0.0?
>
> *        I referred in 2236 (mine is a v2 router) where, I couldn't find a reference for this?

Please look at point 2 of section 2.1.1 of RFC 4541. It mention this. Just read through this RFC,
consideration of source address as 0.0.0.0 is mentioned at couple of places.

> *        Lastly, regarding valid source-ip; I agree that a part of aggregation will be defeated but the switch may
send just ONE report per mc group per vlan in addition to the aggregated report. The switch can use the
source-ip of the report which it last heard to refresh its group membership expiry timer for than LAN.

Yes. Switch can surely do that and with this you do not need to send multiple join/leave requests upstream.

> *        OR it must be made possible in the proxy-snooping implementation to configure an ip-address per mrouter
port which, can be used as the source-ip for the aggregates.

You can do this as well. It is similar to the above one but more granular.
**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely
for the use of the addressee(s). If you are not the intended recipient, please
notify the sender by e-mail and delete the original message. Further, you are not
to copy, disclose, or distribute this e-mail or its contents to any other person and
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken
every reasonable precaution to minimize this risk, but is not liable for any damage
you may sustain as a result of any virus in this e-mail. You should carry out your
own virus checks before opening the e-mail or attachment. Infosys reserves the
right to monitor and review the content of all messages sent to or from this e-mail
address. Messages sent to or from this e-mail address may be stored on the
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***

Gmane