IGMP v3 and SUN Solaris 10

Ahmed Shahzad · ‎12-17-2009

We have recently upgraded Sun Solaris to version 10, which only support IGMP v3.After upgrading the multicast application is not working.

There are two SUN machines, and both running the Multicast Client and Server applications.

Servers are directly connected to Catalyst 6509-VSS, and there is no SVI on it. The dafault gateway of SUN servers is the Nokia Check Point firwall. Nokia checkpoint is acting as IGMP Querier.

By dafault Cisco Catalyst works on IGMP v2. I have connected another switch (3750) with the VSS and defined an SVI on it, and also set the IGMP v3 on the SVI.

Any idea, what would be the issue, and how it could be resolved.

Thanks and Regards,
Ahmed Shahzad.

Giuseppe Larosa · ‎12-21-2009

Hello Ahmed,

have you tried with the feature called IGMP snooping querier?

it is declared able to send IGMPv3 queries

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/snooigmp.html#wp1100551

The IGMP snooping querier sends IGMPv3 querier messages. Although the IGMP version of the querier messages is not configurable, the querier is compatible with IGMPv2 hosts.

this feature allows to use IGMP snooping in a vlan where no multicast enabled router is present.

Some limitations with IGMPv3 are present and declared:

IGMP Version 3 Support Overview

IGMP snooping supports IGMP version 3 (IGMPv3). IGMPv3 uses source-based filtering, which enables hosts and routers to specify which source addresses should be allowed or blocked for a specific multicast group. When you enable IGMPv3 snooping, the switch maintains IGMPv3 states based on messages it receives for a particular group in a particular VLAN and either allows or blocks traffic based on the following information in these messages:

•Source lists

•Allow (include) or block (exclude) filtering options

Because the Layer 2 table is (MAC-group, VLAN) based, with IGMPv3 hosts it is preferable to have only a single multicast source per MAC-group.

Hope to help

Giuseppe

Ahmed Shahzad · ‎12-21-2009

Hi Giuseppe,

Thank you for your response.

According to guidelines and restriction "If there is no IP address configured on the VLAN interface, the IGMP snooping querier does not start.".

The problem is that IP address can not be configured on the SVI, otherwise it will bypass the firewall. In order to resolve it, Cisco Catalyst 3750 is connected with 6509-VSS, and SVI along with IP Address has been configured on it. There is no such command like "ip igmp snooping querier" on this catalyst.

Thanks and Regards,

Shahzad.