roelbroersma
commented
7 months ago I have exactly the same problem! Also using KNX/IP Router here. I even use the same multicast group: 224.0.23.12 and port: 3671.
The multicast traffic from site A is seen at site B. However, the multicast traffic from site B is not seen at site A. It isn't even seen at the tunnel interface at site B!
But, when setting the RP -and- the BSR to Site A, it works. Havinf only the RP or the BSR at site B, it doesn't work anymore and we see the same problem (multicast traffic from site B is seen at the eth0 interface, but not at the tap0 interface).
- I am using OpenVPN v2.6.3 in TAP mode.
- I am using a much more simplified setup (just 2 Raspberry Pi's) with 1x eth0 and 1x tap0 interface.
- Using pimd v2.3.2, and also tested with latest v3.0-beta1 (downloaded Head at 2023-11-21). Since it's a test environment, I've made some crazy settings, just to be sure..:
- Checked rp_filters (for all interfaces, it is off)
- Checked mc_forwarding (for all interfaces, it is on)
- Promisc mode for all interfaces is enabled (e.g. ip link set dev eth0 promisc on)
- IP forwarding (and even bc_forwarding) is enabled for all interfaces.
- Tested with
spt-thresshold packets 0 interval 100at both sides and also tested withspt-thresshold infinity interval 100(just to rule out the SPT stuff).
Site A Site B
(running PIMD with BSR and RP) (running PIMD)
┌──────────────────────┐ ┌────────────────────────┐
| | | |
| 172.16.199.1/24 | tap0 tap0 | 172.16.199.2/24 |
| OpenVPN (server) |----------------------------------| OpenVPN (client) |
| 192.168.4.56/24 | | 192.168.11.128/24 |
| | | |
└──────────────────────┘ └────────────────────────┘
| eth0 eth0 |
| |
| |
| |
┌────────────────────────┐ ┌────────────────────────────┐
| Client-A 192.168.4.1/24| | Client-B 192.168.11.196/24 |
└────────────────────────┘ └────────────────────────────┘
Snafu
troglobit
Hello troglobit, I'm using pimd in order to forward the multicast data from two LANs of different routers (pfSense, FreeBSD14.0) to each other, connected via WireGuard tunnel. On router A it is the LAN 192.168.11.0/24 and on router B it is the LAN 192.168.22.0/24, see image below. In LAN 192.168.11.0/24 there are two KNX/IP routers (192.168.11.30 and 192.168.11.35) and in LAN 192.168.22.0/24 there is one KNX/IP router (192.168.22.20) that all broadcast packets to multicast group 224.0.23.12. Within the LAN 192.168.11.0/24 everything works great, now I want to get the KNX/IP router from the other LAN to join the party.
Issue
I currently have it half way working, meaning I can see all multicast data in the LAN of router B. In the LAN of router A, howerver, I can only see the local multicast data. From what I can see it seems as if on router A the wrong Vif is used as input for the remote source. Instead of Vif 4 it shows the Vif 17 register_vif0 as input. On router B it correctly shows Vif 2 (tun_wg0) as input for the remote source. Is my assumption correct or is the pimd -r output OK in your mind and I have some other issue? (Hints appreciated) I've got static routes configured on both routers, multicast is enabled on all involved interfaces and firewall rules are configured correctly as well. I can see PIM messages from 192.168.22.1 to 192.168.11.1 on the tunnel network.
Edit: I just swapped the DR role and made 192.168.22.1 the RP on both routers and now I have the same issue just the other way round. The router which is acting as RP somehow can't handle the broadcasts properly.
Router A
Router B