This KB will explain the support of igmp-snooping & mld-snooping with EVPN.
IGMPv3 and MLDv2 in (S,G) source-specific multicast (SSM) reports won't be snooped by default.
By default, when IGMP snooping or MLD snooping is enabled, the device accepts and processes (*,G) (any-source multicast [ASM]) reports for:
IGMPv3 and MLDv2 also support (S,G) source-specific multicast (SSM) reports and queries, but we don't support accepting and processing both (*,G) and (S,G) reports at the same time.
When you enable the "evpn-ssm-reports-only option with IGMP snooping or MLD snooping, the device honours only IGMPv3 or MLDv2 (S,G) reports. Now, the device drops any (*,G) reports for IGMPv2, IGMPv3, MLDv1, or MLDv2.Refer https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/evpn-ssm-reports-only-protocols-mld-snooping.html
Example: Here, the IGMPv3 membership report contains 4 groups as below. 224.0.0.1 >> ASM 224.0.0.2 >> ASM 232.0.0.1 >> SSM with SIP: 10.10.10.1 232.0.0.2 >> SSM with SIP: 10.10.10.1
Config: set vlans VLAN1 vlan-id 1 set vlans VLAN1 l3-interface irb.1 set vlans VLAN1 vxlan vni 401001 ! set protocols igmp-snooping vlan VLAN1 ! set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members VLAN1
By default, only the ASM groups are getting snooped. root@switch# run show igmp snooping membership Instance: default-switch Vlan: VLAN1 Learning-Domain: default Interface: ge-0/0/1.0, Groups: 2 Group: 224.0.0.1 Group mode: Exclude Source: 0.0.0.0 Last reported by: 10.10.10.10 Group timeout: 259 Type: Dynamic Group: 224.0.0.2 Group mode: Exclude Source: 0.0.0.0 Last reported by: 10.10.10.10 Group timeout: 259 Type: Dynamic {master:0}[edit] root@switch# set protocols igmp-snooping vlan VLAN1 evpn-ssm-reports-only {master:0}[edit] root@switch# show | compare [edit protocols igmp-snooping vlan VLAN1] + evpn-ssm-reports-only; {master:0}[edit] root@switch# commit configuration check succeeds commit complete {master:0}[edit] root@switch# run show igmp snooping membership Instance: default-switch Vlan: VLAN1 Learning-Domain: default Interface: ge-0/0/1.0, Groups: 2 Group: 232.0.0.1 Group mode: Include Source: 10.10.10.1 Source timeout: 259 Last reported by: 10.10.10.10 Group timeout: 0 Type: Dynamic Group: 232.0.0.1 Group mode: Include Source: 10.10.10.1 Source timeout: 259 Last reported by: 10.10.10.10 Group timeout: 0 Type: Dynamic {master:0}[edit] root@switch# Now only SSM groups are getting snooped.