I am connected to the Internet through an Cisco ME3400EG-2CS-A access switch, routing enabled.
Gi0/1 and Gi0/2 are configured as a SVI (VLAN1) and on that ports I attached two pfSense firewalls with a configured CARP WAN.
My problem is that CARP doesn't work as expected for some multicast filtering reason.
It has somehow to deal with that ME3400EG, because if I install a simple L2 Switch between ME3400EG (on just GI0/1) and both firewalls, CARP is stable.
I built up an test environment with an SG300 switch (instead of the ME3400EG) and I could recreate this issue if I set on Gi0/2 "bridge multicast unregistred filtering".
My ISP doesn't want to help me because the multicast packets from the firewall have a MAC starting with
00:00:5E:00:01:01 and they say that multicast packets only can be forwarded if the look like this:
Can I forward unregistred multicasts on the ME3400EG?
UPDATE: Now I bought a ME3400EG for testing purpose.
Here is the config like on ISPs:
Current configuration : 1041 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Switch ! boot-start-marker boot-end-marker ! no logging console ! no aaa new-model system mtu routing 1546 ip routing no ip domain-lookup ! ! ! ! ! ! ! ! spanning-tree mode rapid-pvst spanning-tree extend system-id ! ! vlan internal allocation policy ascending ! ! ! interface FastEthernet0 no ip address no ip route-cache cef no ip route-cache ! interface GigabitEthernet0/1 load-interval 30 media-type rj45 ! interface GigabitEthernet0/2 load-interval 30 media-type rj45 ! interface GigabitEthernet0/3 port-type nni ! interface GigabitEthernet0/4 port-type nni no switchport ip address 126.96.36.199 255.255.255.252 ! interface Vlan1 ip address 188.8.131.52 255.255.255.248 ! interface Vlan10 no ip address ! no ip http server ip http secure-server ip classless ! ! ip sla enable reaction-alerts no cdp run no cdp tlv location no cdp tlv app ! ! line con 0 line vty 5 15 ! end
I already tried
no switchport block multicast but it seems to be default like this.
If I issue
show ip igmp interface vlan 1 I get:
Vlan1 is up, line protocol is up Internet address is 184.108.40.206/29 IGMP is disabled on interface Multicast routing is disabled on interface Multicast TTL threshold is 0 No multicast groups joined by this system
Should multicast not be enabled? Or TTL at least 1? Or the hosts as joined in a multicast group??