Description

This KB will explain the support of igmp-snooping & mld-snooping with EVPN.

Symptoms

IGMPv3 and MLDv2 in (S,G) source-specific multicast (SSM) reports won't be snooped by default.

Solution

By default, when IGMP snooping or MLD snooping is enabled, the device accepts and processes (*,G) (any-source multicast [ASM]) reports for:

  • IGMP version 2 (IGMPv2)
  • IGMPv3
  • MLD version 1 (MLDv1)
  • MLDv2

IGMPv3 and MLDv2 also support (S,G) source-specific multicast (SSM) reports and queries, but we don't support accepting and processing both (*,G) and (S,G) reports at the same time.

When you enable the "evpn-ssm-reports-only option with IGMP snooping or MLD snooping, the device honours only IGMPv3 or MLDv2 (S,G) reports. Now, the device drops any (*,G) reports for IGMPv2, IGMPv3, MLDv1, or MLDv2.

Refer https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/evpn-ssm-reports-only-protocols-mld-snooping.html

Example:

Here, the IGMPv3 membership report contains 4 groups as below.
224.0.0.1 >> ASM
224.0.0.2 >> ASM
232.0.0.1 >> SSM with SIP: 10.10.10.1
232.0.0.2 >> SSM with SIP: 10.10.10.1
Config:

set vlans VLAN1 vlan-id 1
set vlans VLAN1 l3-interface irb.1
set vlans VLAN1 vxlan vni 401001
!
set protocols igmp-snooping vlan VLAN1
!
set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members VLAN1
By default, only the ASM groups are getting snooped.

root@switch# run show igmp snooping membership        
Instance: default-switch

Vlan: VLAN1

Learning-Domain: default
Interface: ge-0/0/1.0, Groups: 2
    Group: 224.0.0.1
        Group mode: Exclude
        Source: 0.0.0.0
        Last reported by: 10.10.10.10
        Group timeout:     259 Type: Dynamic
    Group: 224.0.0.2
        Group mode: Exclude
        Source: 0.0.0.0
        Last reported by: 10.10.10.10
        Group timeout:     259 Type: Dynamic

{master:0}[edit]
root@switch# set protocols igmp-snooping vlan VLAN1 evpn-ssm-reports-only

{master:0}[edit]
root@switch# show | compare 
[edit protocols igmp-snooping vlan VLAN1]
+    evpn-ssm-reports-only;

{master:0}[edit]
root@switch# commit 
configuration check succeeds
commit complete

{master:0}[edit]
root@switch# run show igmp snooping membership    
Instance: default-switch

Vlan: VLAN1

Learning-Domain: default
Interface: ge-0/0/1.0, Groups: 2
    Group: 232.0.0.1
        Group mode: Include
        Source: 10.10.10.1
        Source timeout: 259
        Last reported by: 10.10.10.10
        Group timeout:       0 Type: Dynamic
    Group: 232.0.0.1
        Group mode: Include
        Source: 10.10.10.1
        Source timeout: 259
        Last reported by: 10.10.10.10
        Group timeout:       0 Type: Dynamic

{master:0}[edit]
root@switch# 

Now only SSM groups are getting snooped.

Modification History

2024-08-01 : Article Created