Firewall-1

Re: [FW-1] OOT ? ClusterXL multicast and 3com switches

Subject: Re: [FW-1] OOT ? ClusterXL multicast and 3com switches
From: Jean-Pierre FORCIOLI <jean-pierre.forcioli AT CYBER-NETWORKS DOT FR>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 27 Jun 2003 17:06:44 +0200
On Fri, 2003-06-27 at 13:18, Anuska Aragón Fernández wrote:
> andre.liese AT GMX DOT DE wrote:
> >>Hi all,
> >
> > Hi Anuska,
> >
> >
> >>My question is, taking into account that every packet addressed to the
> >>gateway is using as destination a multicast mac address, how to avoid
> >>these packets to be sent to every port in the switches?
> >
> > If your switches are able to learn who is on which port they don't send
> > every frame to every port. Switches can learn this by receiving IGMP 
> > messages.
> > The switches's IGMP snooping feature must be enabled.
> >
> IGMP snooping is enabled, but packets still arrive to ports they
> shouldn't. Anyway, I do not know much about it but, IGMP is not related
> with ip multicast? What is the relationship between IGMP and ethernet
> multicast?

Usually, a cluster product using IP unicast/MAC multicast sends an "IGMP
membership report" when a node enters the cluster and an "IGMP leave
group" when it leaves the cluster. Of course, the IP multicast group
"reported" by the IGMP message is compatible with the MAC multicast
associated (In fact you can derive a MAC multicast from any class D IP
addresses) with the IP unicast representing the cluster.

But I don't think that Check Point is using IGMP...

Without IGMP, you can also force your switch to forward packet to the
same MAC destination through two differents ports.

>
> Greeetings,
> --
> A n u s k a     A r a g ó n
> e-mail: anuska.aragon AT si.unirioja DOT es
> Tf.:    +34 941 299233                    Fax:    +34 941 299180
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
--
Jean-Pierre.FORCIOLI AT cyber-networks DOT fr             Cyber Networks France
http://www.freebsd.org                      http://www.cyber-networks.fr
PGP Key fingerprint = 9AEA 910F CB46 C39B 89EE  EF4C 68AC 2AF1 CF17 3713
     http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCF173713

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>