Multicast

[zinkann]

My cisco 4506 goes nuts every time i turn multicast on. Unfortunately most of my inherited network is on vlan 1, which i'm slowly segmenting. When ever we need to use a multicast application i have to turn multicast on for vlan 1 (ip pim sparse-mode) When i enable it my cpu stays around 80-100%. When i run a show ip mroute counters there are about 50 routes in it. I guess my question is what can i do about this. I'm sure there are a few different applications that use it but there are all kinds of MC IP's. If i ping one of the IP's, it replays back from a network printer, a proximity panel. is this even reliable method of tracking down the multicast addresses?

Does this look normal? I'm still trying to figure multicast out.



Admin_4506#sh ip mroute count
IP Multicast Statistics
50 routes using 28422 bytes of memory
39 groups, 0.28 average sources per group
Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kilobits per second
Other counts: Total/RPF failed/Other drops(OIF-null, rate-limit etc)

Group: 224.68.200.0, Source count: 1, Packets forwarded: 0, Packets received: 0
Source: 192.168.250.135/32, Forwarding: 0/0/0/0, Other: 0/0/0

Group: 239.192.79.0, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.1, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 234.21.81.1, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.2, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.3, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.7.7.7, Source count: 1, Packets forwarded: 0, Packets received: 719
Source: 192.168.1.211/32, Forwarding: 0/-1/0/0, Other: 719/0/719

Group: 229.111.112.12, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.0.1.22, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.0.1.24, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.32, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.33, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.34, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.35, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.36, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.79.37, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.0.1.40, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.0.1.60, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 235.80.68.83, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 224.0.1.84, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.192, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.193, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.194, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 232.255.255.200, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 229.55.150.208, Source count: 7, Packets forwarded: 7, Packets received: 93
Source: 10.0.1.30/32, Forwarding: 0/0/0/0, Other: 26/0/26
Source: 10.0.1.35/32, Forwarding: 0/0/0/0, Other: 27/0/27
Source: 10.0.3.157/32, Forwarding: 0/-1/0/0, Other: 31/0/31
Source: 10.0.34.112/32, Forwarding: 0/0/0/0, Other: 1/1/0
Source: 10.0.34.133/32, Forwarding: 0/0/0/0, Other: 1/1/0
Source: 192.168.250.135/32, Forwarding: 7/0/513/0, Other: 7/0/0
Source: 192.168.250.139/32, Forwarding: 0/0/0/0, Other: 0/0/0

Group: 239.192.78.224, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.225, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.226, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.227, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.228, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.229, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.230, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.231, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.192.78.232, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.255.255.250, Source count: 2, Packets forwarded: 880, Packets received: 880
Source: 10.0.0.253/32, Forwarding: 10/0/308/0, Other: 10/0/0
Source: 192.168.0.1/32, Forwarding: 870/1/327/2, Other: 870/0/0

Group: 239.255.255.253, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 239.255.255.254, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 227.255.255.254, Source count: 0, Packets forwarded: 0, Packets received: 0

Group: 230.255.255.255, Source count: 0, Packets forwarded: 0, Packets received: 0

CCNA, Network+

 

[Minue]

Hello
It look like someone configured all of those static groups,mabye on the switch.As you can see they have no source address.Can you please post a show run?
CPU usage could be high because maybe you don't have IGMP snooping or CGMP turn on.
Regards

 

[zinkann]

the only configuration that is relevant to multicast is IP Multicast-routing, IP PIM Sparse-mode on select vlan svi's. I just turned IGMP snooping on. I'll keep an eye on it. thanks

CCNA, Network+

 

[zinkann]

cpu still very high.

CCNA, Network+

 

[Minue]

Hello
To make troubleshooting much easier it would be nice if you post a config.Also give some idea of the network design.Link other router or switches participating in the multicast.It strange that you have all of those groups.Also post a show ip igmp group.
Regards

 

[zinkann]

Admin_4506#sh ip igmp groups
IGMP Connected Group Membership
Group Address Interface Uptime Expires Last Reporter
239.255.255.254 Vlan1 00:00:05 00:02:54 10.0.0.30
239.255.255.254 Vlan250 00:27:08 00:02:32 192.168.250.5
239.255.255.253 Vlan1 00:00:05 00:02:54 10.0.7.169
239.255.255.250 Vlan1 00:00:05 00:02:54 10.0.1.124
239.255.255.250 Vlan23 00:20:10 00:02:31 10.0.23.112
239.255.255.250 Vlan34 00:27:18 00:02:31 10.0.34.145
239.255.255.250 Vlan250 00:27:46 00:02:31 192.168.250.114
230.255.255.255 Vlan1 00:00:05 00:02:54 10.0.2.43
227.255.255.254 Vlan34 00:27:17 00:02:31 10.0.34.180
232.255.255.200 Vlan1 00:00:03 00:02:56 10.0.2.43
239.192.79.32 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.79.33 Vlan1 00:00:05 00:02:54 10.0.2.111
239.192.79.34 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.79.35 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.79.36 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.79.37 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.79.0 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.79.1 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.79.2 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.79.3 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.78.225 Vlan1 00:00:05 00:02:54 10.0.2.111
239.192.78.224 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.78.227 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.78.226 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.78.229 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.78.228 Vlan1 00:00:04 00:02:55 10.0.2.111
239.192.78.231 Vlan1 00:00:03 00:02:56 10.0.2.111
239.192.78.230 Vlan1 00:00:05 00:02:54 10.0.2.111
239.192.78.232 Vlan1 00:00:05 00:02:54 10.0.2.111
229.55.150.208 Vlan1 00:00:04 00:02:55 10.0.0.29
239.192.78.193 Vlan1 00:00:05 00:02:54 10.0.2.113
239.192.78.192 Vlan1 00:00:04 00:02:55 10.0.2.113
239.192.78.194 Vlan1 00:00:04 00:02:55 10.0.2.114
235.80.68.83 Vlan1 00:00:05 00:02:54 10.0.0.29
234.21.81.1 Vlan1 00:00:04 00:02:55 10.0.7.228
224.0.1.84 Vlan1 00:00:05 00:02:54 10.0.2.180
224.0.1.40 Vlan250 20:44:23 00:02:34 192.168.250.1
224.0.1.60 Vlan1 00:00:05 00:02:54 10.0.0.152
224.0.1.60 Vlan34 00:27:10 00:02:35 10.0.34.144
224.7.7.7 Vlan1 00:00:03 00:02:56 10.0.3.248
229.111.112.12 Vlan1 00:00:03 00:02:56 10.0.2.67
224.0.1.22 Vlan1 00:00:04 00:02:55 10.0.2.140
224.0.1.24 Vlan1 00:00:04 00:02:55 10.0.2.105

CCNA, Network+

 

[zinkann]

hostname Admin_4506
!

vtp domain ''
vtp mode transparent
ip subnet-zero
!
ip multicast-routing
!
spanning-tree mode mst
spanning-tree extend system-id
no spanning-tree vlan 1-4094
spanning-tree vlan 1-4094 priority 0
!
spanning-tree mst configuration
name CowetaMST
revision 2
instance 1 vlan 1-4094
!
power redundancy-mode redundant
!
!
!
!
!
vlan 3
name SAN
!
vlan 10
name WIFIMGT
!
vlan 11
name WIFIInt
!
vlan 20
name IT
!
vlan 21
name MetroE_sites
!
vlan 22
name JusticeCenter
!
vlan 23
name WaterAuthorityAdmin
!
vlan 24
name AdminBuilding
!
vlan 25
name Sheriff
!
vlan 26
name FireDept
!
vlan 27
name BuildingDept
!
vlan 28
name AdultProbation
!
vlan 29
name EngineerDept
!
vlan 30
name 911
!
vlan 31
name GCIS
!
vlan 32
name Printers
!
vlan 33
name SuperiorCourt
!
vlan 34
name Library
!
vlan 35
name HVAC
!
vlan 36
name Miscellaneous
!
vlan 37
name Servers
!
vlan 38
name AccessControl
!
vlan 39
name A/V
!
vlan 41
name EastSidePrecinct
!
vlan 45
name RFID
!
vlan 50
name BTBROWNTEST
!
vlan 100
name JusticeCenter_VOIP
!
vlan 101
name WAAdmin_VOIP
!
vlan 103
name Library_VOIP
!
vlan 250
name CPLS-PUBLIC
!
vlan 251
name CPLS-PIX-GPLS
!
vlan 252
name CPLS-PUBLIC-WIRELESS
!
interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,11,32,100-104
switchport mode trunk
shutdown
!
interface GigabitEthernet1/2
description CCSO_Trunk
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,25,32
switchport mode trunk
!
interface GigabitEthernet2/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet2/2
!
interface GigabitEthernet2/3
!
interface GigabitEthernet2/4
!
interface GigabitEthernet2/5
description VMServer
switchport mode access
duplex full
!
interface GigabitEthernet2/6
description Temp_switch_in_Admin
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,11,32,34-36,38,39,41,45,103,250,251
switchport mode trunk
!
interface GigabitEthernet2/7
!
interface GigabitEthernet2/8
!
interface GigabitEthernet2/9
!
interface GigabitEthernet2/10
switchport mode access
!
interface GigabitEthernet2/11
!
interface GigabitEthernet2/12
switchport access vlan 251
switchport mode access
!
interface GigabitEthernet2/13
!
interface GigabitEthernet2/14
!
interface GigabitEthernet2/15
!
interface GigabitEthernet2/16
!
interface GigabitEthernet2/17
!
interface GigabitEthernet2/18
!
interface GigabitEthernet2/19
!
interface GigabitEthernet2/20
description WLC01
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,11,39,252
switchport mode trunk
!
interface GigabitEthernet2/21
!
interface GigabitEthernet2/22
!
interface GigabitEthernet2/23
!
interface GigabitEthernet2/24
!
interface FastEthernet3/1
description CPLS-PUBLIC-INSIDE
switchport access vlan 250
switchport mode access
!
interface FastEthernet3/2
description CPLS-PUBLIC-OUTSIDE
switchport access vlan 251
switchport mode access


interface FastEthernet5/45
description CISCO ASA5520
!
interface FastEthernet5/46
description MX200 Mail Firewall
!
interface FastEthernet5/47
!
interface FastEthernet5/48
description P2P
switchport trunk encapsulation dot1q
switchport mode trunk
speed 100
duplex full
!
interface GigabitEthernet6/1
description Water Authority MB
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,23,32,101
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet6/2
description JusticeCenter
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,11,32,100
switchport mode trunk
!
interface GigabitEthernet6/3
!
interface GigabitEthernet6/4
!
interface GigabitEthernet6/5
!
interface GigabitEthernet6/6
!
interface GigabitEthernet6/7
!
interface GigabitEthernet6/8
!
interface GigabitEthernet6/9
!
interface GigabitEthernet6/10
!
interface GigabitEthernet6/11
!
interface GigabitEthernet6/12
!
interface GigabitEthernet6/13
!
interface GigabitEthernet6/14
!
interface GigabitEthernet6/15
!
interface GigabitEthernet6/16
!
interface GigabitEthernet6/17
!
interface GigabitEthernet6/18
description Library
switchport trunk allowed vlan 1,10,11,32,34-36,38,39,41,45,103,250
switchport mode trunk
!
interface Vlan1
description Data
ip address 10.0.0.1 255.255.248.0
ip pim sparse-mode
!
interface Vlan10
description WIFIMGT
ip address 10.0.10.1 255.255.255.0
!
interface Vlan11
description WIFIInt
ip address 10.0.11.1 255.255.255.0
!
interface Vlan12
description WIFIPublic
no ip address
shutdown
!
interface Vlan20
description IT
ip address 10.0.20.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan21
description MetroE_Sites
ip address 10.0.21.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan22
description JusticeCenter
ip address 10.0.22.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan23
description WaterAuthorityAdmin
ip address 10.0.23.1 255.255.255.0
ip helper-address 10.0.0.30
ip pim sparse-mode
!
interface Vlan24
description AdminBuilding
ip address 10.0.24.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan25
description Sheriff
ip address 10.0.25.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan26
description FireDept
ip address 10.0.26.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan27
description BuildingDept
ip address 10.0.27.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan28
description AdultProbation
ip address 10.0.28.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan29
description EnginnerDept
ip address 10.0.29.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan30
description 911
ip address 10.0.30.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan31
description SIGC
ip address 10.0.31.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan32
description Printers
ip address 10.0.32.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan33
description SrCrt
ip address 10.0.33.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan34
description Library
ip address 10.0.34.1 255.255.255.0
ip helper-address 10.0.0.30
ip pim sparse-mode
!
interface Vlan35
description HVAC
ip address 10.0.35.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan36
description Miscellaneous
ip address 10.0.36.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan37
description Servers
ip address 10.0.37.1 255.255.255.0
ip helper-address 10.0.0.30
shutdown
!
interface Vlan38
description AccessControl
ip address 10.0.38.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan39
description A/V
ip address 10.0.39.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan41
description EastSidePrecinct
ip address 10.0.41.1 255.255.255.0
ip helper-address 10.0.0.30
!
interface Vlan45
description RFID_Library
ip address 10.0.45.1 255.255.255.0
!
interface Vlan100
description Justice_VOIP
ip address 10.0.100.75 255.255.255.0
!
interface Vlan101
description WAAdmin_VOIP
ip address 10.0.101.75 255.255.255.0
!
interface Vlan103
description Library_VOIP
ip address 10.0.103.75 255.255.255.0
!
interface Vlan250
description CPLS-PUBLIC
ip address 192.168.250.1 255.255.255.0
ip helper-address 10.0.0.30
ip pim sparse-mode
ip policy route-map CPLS
!
interface Vlan252
description CPLS
ip address 192.168.252.1 255.255.255.0
ip access-group CPLS-WIRELESS-SECURITY in
ip helper-address 10.0.0.30
ip policy route-map CPLS
!
router eigrp 100
network 10.0.0.0
auto-summary
!
ip route 0.0.0.0 0.0.0.0 10.0.0.75
no ip http server
!
!
!
ip access-list standard telnet
permit 10.0.0.0 0.0.255.255
deny any
!
ip access-list extended CPLS-250
deny ip 192.168.250.0 0.0.0.255 10.0.0.0 0.0.255.255
permit ip 192.168.250.0 0.0.0.255 any
ip access-list extended CPLS-252
deny ip 192.168.252.0 0.0.0.255 10.0.0.0 0.0.255.255
permit ip 192.168.252.0 0.0.0.255 any
ip access-list extended CPLS-WIRELESS-SECURITY
permit ip any host 10.0.32.120
permit ip any host 10.0.32.121
permit ip any host 10.0.32.122
permit ip any host 10.0.32.123
deny ip any 10.0.0.0 0.0.255.255
permit ip any any
!
no logging trap
route-map CPLS permit 10
match ip address CPLS-250 CPLS-252
set ip next-hop 192.168.250.2
!



CCNA, Network+

 

[Minue]

Hello
Your config is strange,normally you would put your multicast source on one Vlan and the recievers on another in your case you have source and recievers on the same.You have a lot of multicast server on your network.You should find out where their are,and try to disable the groups that are not in use.Another problem that you have is your design.A good design would have a router proccessing the multicast pumps,then the 4506 could receive on a level 3 interface and then dish it out at level 2 to the recievers.I will take a good look at our Multicast design tommorow and ask my colleagues that work in the multicast division if your design is feasible.
Regards

 

[zinkann]

Well, i'm a little new to multicast so any help would be great. I know we have some multicast flooding into our network from a treatment facility, and we are about to isolate it. That will take care of a lot of it.

CCNA, Network+

 

[zinkann]

I guess my biggest question is how do i track down what servers are running Multicast? All i have is the Multicast group IP. Like i said i know of another problem that will take care of half of the multicast groups. But there are still quite a few i don't know where it is coming from. Before i started it was one large flat network. Everything had a /21 ip. That is a lot of IP's in one subnet, vlan 1. So nothing has ever been configured for multicast.

CCNA, Network+

 

[Minue]

Hello
Your design is possible.But your multicast network is a mess.You will really have to do some cleaning up.First you need to decide who will be the multicast video pump and then elimate the other sources you don't need.Next find out which vlans will be needing the stream.
For testing you can create a separate vlan for the source and turn pim for any other vlan except "Vlan 1" to see if the trouble is there.Remember to alway turn on "igmp snooping"
To trace the server that's send all those groups try to find out what machine is the "10.0.2.111"
Regards
ps.Post a show ip mroute as well.

 

[zinkann]

10.0.2.111 is a device that doesn't need to be on our network. Like i mentioned once i isolate some of those devices the mcast should cut down in half. I still would like to know how to find out who is running those groups.

CCNA, Network+

 

[brianinms]

You need an RP for sparse mode.

 

[Minue]

Hello
To start the below 2 address seem to be two Windows XP machines using the UPnP protocol.Try to take out the 10.0.2.111 machine to see if it's that have all those groups.Try to trace back the address of the sources.Also please post the show ip mroute and show ip mroute active output.
Yes he could try setting up an RP,but I don't think that will solve the problem being that he's really not doing any "multicast routing".Everything is happening on VLAN 1.


Group: 239.255.255.250, Source count: 2, Packets forwarded: 880, Packets received: 880
Source: 10.0.0.253/32, Forwarding: 10/0/308/0, Other: 10/0/0
Source: 192.168.0.1/32, Forwarding: 870/1/327/2, Other: 870/0/0

Regards

 

[zinkann]

like i said, i inherited the network and i'm trying to get it segmented. Once i get that done a little more, get rid of the 10.0.2.111-114 devices, it should clear up a little. Then i can start configuring multicast.

CCNA, Network+

 

[Minue]

OK!Keep us posted.
Regards

 

[dearingkr]

I haven't tried it but I wonder if it would be possible to put an access-list blocking 239.192.0.0/16 on the edge switch that 10.0.2.111 is connected to.

Like I said, I haven't tried it, so I'm not sure it's possible. If so, it would be a temporary solution until he gets the network design straightened out.


MCSE CCNA CCDA

 

[Minue]

Yes!That's possible as well.But it would be better to clean up the network for the better performance.The 4506 is already proccesing a whole lot of traffic.
Regards

 

[zinkann]

that is a good temporary solution. I guess the main question is how in the world do i found out what programs or servers are running multicast. How do i know which program is using a certain multicast group IP?

CCNA, Network+

 

[burtsbees]

Packet sniffer...

Burt