O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

20.13. Provide Active-Active Multicast

Problem

You need to provide active-active support for multicast traffic only. All groups in the 239.0.0.0/16 range need to traverse FIREWALL-A, and in parallel, all groups in the 239.1.0.0/16 range need to traverse FIREWALL-B.

Solution

Use multiple RPs and VSD-less clusters with OSPF to provide active-active support for multicast and active-passive support for unicast traffic. First, configure NSRP on each device in VSD-less mode:

	FIREWALL-A-> set nsrp cluster id 1
	FIREWALL-A(B)-> set nsrp rto-mirror sync
	FIREWALL-A(B)-> unset nsrp vsd-group id 0
	FIREWALL-A(M)-> set nsrp rto-mirror session non-vsi
	FIREWALL-A(M)-> set nsrp monitor interface ethernet0/0
	FIREWALL-A(M)-> set nsrp monitor interface bgroup0
	FIREWALL-A(M)-> set nsrp vsd-group hb-interval 200

	FIREWALL-B-> set nsrp cluster id 1
	FIREWALL-B(B)-> set nsrp rto-mirror sync
	FIREWALL-B(B)-> unset nsrp vsd-group id 0
	FIREWALL-B(M)-> set nsrp monitor interface ethernet0/0
	FIREWALL-B(M)->set nsrp monitor interface bgroup0

Next, configure OSPF on the devices and cost the links on FIREWALL-B with a higher cost:

	FIREWALL-A(M)-> set vrouter trust-vr
	FIREWALL-A(trust-vr)(M)-> set protocol ospf
	FIREWALL-A(trust-vr/ospf)(M)-> set enable
	FIREWALL-A(trust-vr/ospf)(M)-> end
	FIREWALL-A(M)-> set interface bgroup0 protocol ospf area 0.0.0.0
	FIREWALL-A(M)-> set interface bgroup0 protocol ospf enable
	FIREWALL-A(M)-> set interface ethernet0/0 protocol ospf area 0.0.0.0
	FIREWALL-A(M)-> set interface ethernet0/0 protocol ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required