NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
How do I constrain multicast traffic to specific ports on GS716Tv3?
I can't find specific instructions to constrain multicast traffic on the GS715Tv3 smart switch. I need to force all multicast traffic to travel over a specific set of interfaces, or at least to s...
To switch the the Mangement VLAN to 4.
Make sure you have 2 ports on the switch, one in VLAN1 one in VLAN4.
Set the system you are using to a static IP in the range of the switch and confirm access to the web config then change the "Management VLAN ID" to 4 and Apply. then switch the system you are using to the port or any port in VLAN 4 then you should have access, if not, wait about 60-90sec and try again becuase you may have STP on and it will block anything on the port for a bit unless its set to "Fast Link" Enabled.
Then under "IP Configuration" set the switches IP address to somthing in in IP range of VLAN4.
For Simplisicty sake, Untagged ports should only ever be in 1 VLAN at a time.
And instead of using the point and click, goto "Port PVID Configuration" and just set the VLANs there.
Set PVID and VLAN member the same for a port, based on what VLAN it needs to be in
And to confirm, do you have a cable going from switch to switch for each VLAN? You could cut down on cables and ports if you trunk/tag the ports to the next switch. then all 3 VLAN would only need 1 cable between each pair of switches, saving you atleast 4 ports on each switch.
Just an example from my GS724T (ignore ports g8 and g19-20, thier Current PVID is becuase of somthing else you are not doing, LACP and Span/Monitoring):
All ports are setup for a single VLAN, my "Main LAN" is VLAN12, which the mangement VLAN is set for aswell, ports g23-24 are VLAN Trunks, they are set to tagg VLAN12 and 14 when that traffic goes out of those ports, then the switch on the other side reads the tagg and acts acordingly, this way I dont need 2 cables/ports for each of those.
I don't know if it's being forwarded to all vLANS Dane. All I know is that there are multicast packets (multicast addr 225.0.0.250) from [IOSubsystem1] on one switch being forwarded to [IOSubsystem2] on a separate switch. The only thing physically connecting these two switches is cable from each one's [SimvLAN] going to the [SimvLAN] on a separate development lab switch. See illustration below. When I pull the plug on the development network connection, the data stream corruption ceases - packets are no longer forwarded.
[Switch 1|I/OvLAN1]->[LinuxHost1]
[Switch 1|I/OvLAN1]->[IOSubsystem1]
[Switch1|SimvLAN]
+
|
+
[Switch9|SimvLAN]----------------->[DevHost]
+
|
+
[Switch2|SimvLAN]
[Switch 2|I/OvLAN2]->[LinuxHost2]
[Switch 2|I/OvLAN2]->[IOSubsystem2]
I have configured an IGMP Snooping Querier on one of the GS716Tv3 switches [Switch1]. I used IP address 192.168.55.100 for the querier address, an available address from the network on the affected vLAN.
In "Querier vLAN Configuration" I added vLAN 6 [IOvLAN1], the affected vLAN.
Then in "IGMP Snooping vLAN Configuration" I added vLAN 6 [IOvLAN1].
I'm not sure where to go from here, though. It looks like everything I've done up to now is geared toward identifying and tracking multicast traffic. How do I actually tell the switch to keep its multicast traffic ONLY on the 3 ports that comprise vLAN 6 [IOvLAN1]?
Thank you for your help!
Cal Webster
I've resolved the data stream curruption issues but I still need to know how to configure this switch to control multicast traffic.
To resolve the data stream corruption I reconfigured the players to use the reserved, local subnet block of multicast addresses (224.0.0.0 to 224.0.0.255). This was still not sufficient, though. I had to re-assign a separate multicast address to each pair of players on each switch's [IOvLAN] in order to prevent cross-talk. Even though these switches are not stacked and the vLANS are not tagged, they are passing local traffic between each other for what should be isolated vLANs. IOvLAN on switch 1 should be completely isolated from IOvLAN on switch 2 unless I plug something in there to route traffic.
I still can find nothing to describe how to actually control the multicast traffic that I've configured to snoop on the switch. I'm not even sure I've configured snooping correctly because I don't see anythin listed in the "IGMP Snooping Table". Isn't there a HowTo somewhere? These are things I would expect to find in the Software Admin manual but that's just a series of individual steps to perform sub-tasks.
Any useful tips from those who have done this before would be appreciated.
Regards,
Cal Webster
Thank you for that link Dane. The instructions were much more explanatory than those in the admin guide. I went through those same steps before but used a different querier address. I changed the querier address to that of the switch and configured vLAN 6 since that's the vLAN from which the multicast traffic originates and the one in which I wish to constrain the traffic.
I don't think it's working, though, because there are still no entries at all in IGMP Snooping Table. I expected to see the two players on vLAN 6. Shouldn't there be some MAC addresses in this list?
Should I have configured vLAN 1 instead of 6, even though 6 is the one I want to keep the traffic on?
Regards,
Cal Webster
Hi cwebster,
I think one way to check if multicast traffic is being constraint within VLAN 6 is to configure port mirroring and monitor it using Wireshark. Check this article about port mirroring.
In VLAN 6, you will need to set a source port/s and a destination port for port mirroring. The source port/s is/are the VLAN 6 port/s that you want to check if multicast is being constraint and the destination port is a one port in VLAN 6 where you will connect a PC/laptop that has Wireshark installed to monitor it. Here is the article as reference guide on how to configure port mirroring on the GS716Tv3.
Here is the link where to download Wireshark. Check this link I found online as reference how to analyze IPv4 multicast traffic. Also, you may search videos online (such as YouTube, etc.) or how-to documents about Wireshark.
Regards,
DaneA
NETGEAR Community Team
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
