Multicast Forwarding Cache (MFC)

Warning - MFC static entries and Protocol-Independent Multicast (PIM) are mutually exclusive features and must not be enabled at the same time (see PIM and IPv6 PIM).

Overview

Various static and dynamic multicast routing protocols use Multicast Forwarding Cache (MFC) to forward packets that match multicast routes.

Known Limitations

It is not supported to configure IPv6 MFC static entries on VRRP Clusters.

Configuring MFC in Gaia Portal

  1. With a web browser, connect to the Gaia PortalClosed Web interface for the Check Point Gaia operating system..

  2. Log in.

  3. From the left navigation tree, click Advanced Routing > MFC Static Entries.

  4. In the Source section:

    1. In the Source field, configure the source IPv4 or IPv6 address of the multicast traffic.

      Note - The Source IP address and the Group IP address must belong to the same address family (both IPv4, or both IPv6).

    2. In the Source Count field, configure the number of adjacent sources to add.

      This parameter adds multiple (S,G) entries for the configured number of sources in a row.

      This parameter configures all (S+i*inc, G) entries, where:

      • "i" has a range from 0 to n-1.

      • The value of the parameter "source-increment" determines the value of "inc".

      Note - If you also configure the "Group Count", then GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS adds all pairs (S+i*sinc,G+j*ginc)

      Range: 1-512

      Default: 1 (no additional sources)

    3. In the Source increment field, configure the increment between adjacent sources.

      This parameter configures all (S+i*inc, G) entries, where "i" has a range from 0 to n-1.

      The value of this parameter has a format an IPv4 or IPv6 address (matching the source itself). Gaia OS adds this value bit-wise to the group IP address.

      Default Increment for IPv4: 0.0.0.1

      Default Increment for IPv6: ::1

  5. In the Group section:

    1. In the Group field, configure the multicast destination group IPv4 or IPv6 address.

      Notes:

      • The Group IP address and the Source IP address must belong to the same address family (both IPv4, or both IPv6).

      • Groups in the IPv6 range 224.x.x.0/24 and the IPv6 range FF02::/16 are reserved for local networks. Gaia OS does not forward to external networks the multicast traffic that is destined for these multicast groups.

      IPv4 Range: 224.0.0.0/4

      IPv6 Range: FF00::/8

    2. In the Group Count field, configure the number of adjacent groups to add.

      This parameter adds multiple (S,G) entries for the configured number of groups in a row.

      This parameter configures all (S, G+j*inc) entries, where:

      • "j" has a range from 0 to n-1.

      • The value of the parameter "group-increment" determines the value of "inc".

      Note - If you also configure the "Source Count", then Gaia OS adds all pairs (S+i*sinc,G+j*ginc)

      Range: 1-512

      Default: 1 (no additional groups)

    3. In the Group increment field, configure the increment between adjacent groups.

      This parameter configures all (S, G+j*inc) entries, where "i" has a range from 0 to n-1.

      The value of this parameter has a format an IPv4 or IPv6 address (matching the group itself). Gaia OS adds this value bit-wise to the group IP address.

      Default Increment for IPv4: 0.0.0.1

      Default Increment for IPv6: ::1

  6. In the Incoming Interface section:

    • In the IIF field, select the applicable interface.

      Note - Before you can select an interface, you must configure the interface (enable it and configure an IP address on it).

  7. In the Outgoing Interfaces section:

    1. Select the applicable interface from the drop-down menu.

      Note - Before you can select an interface, you must configure the interface (enable it and configure an IP address on it).

    2. Click Add.

    3. Repeat these steps for other applicable interfaces.

  8. Click Save.

  1. With a web browser, connect to the Gaia Portal.

  2. Log in.

  3. From the left navigation tree, click Advanced Routing > MFC Static Entries.

  4. Select the applicable entry.

  5. Make the required changes.

  6. Click Save.

  1. With a web browser, connect to the Gaia Portal.

  2. Log in.

  3. From the left navigation tree, click Advanced Routing > MFC Static Entries.

  4. Select the applicable entry.

  5. Click Delete.

    Important - There is no prompt to confirm.

Configuring MFC in Gaia Clish

set mfc-static source <Source IP Address> group <Destination Group IP Address>

      group-count <1-512> group-increment <Group Increment IP Address> {on | off}

      iif <Name of Incoming Interface> on

      off

      oif <Name of Outgoing Interface> {on | off}

      source-count <1-512> source-increment <Source Increment IP Address> {on | off}

Parameters:

Parameter

Description

source <Source IP Address>

Configures an (S,G) entry in the MFC.

Specifies the source IPv4 or IPv6 address of the multicast traffic.

Note - The "<Source IP Address>" and the "<Destination Group IP Address>" must belong to the same address family (both IPv4, or both IPv6)

Default: none

group <Destination Group IP Address>

Specifies the multicast destination group IPv4 or IPv6 address.

Notes:

  • The "<Destination Group IP Address>" and the "<Source IP Address>" must belong to the same address family (both IPv4, or both IPv6).

  • Groups in the IPv6 range 224.x.x.0/24 and the IPv6 range FF02::/16 are reserved for local networks. Gaia OS does not forward to external networks the multicast traffic that is destined for these multicast groups.

IPv4 Range: 224.0.0.0/4

IPv6 Range: FF00::/8

Default: none

group-count <1-512>

Configures a number of adjacent groups to add.

This parameter adds multiple (S,G) entries for the configured number of groups in a row.

This parameter configures all (S, G+j*inc) entries, where:

  • "j" has a range from 0 to n-1.

  • The value of the parameter "group-increment" determines the value of "inc".

Note - If you also configure the "source-count", then Gaia OS adds all pairs (S+i*sinc,G+j*ginc)

Range: 1-512

Default: 1 (no additional groups)

group-increment <Group Increment IP Address>

Configures the increment between adjacent groups.

This parameter configures all (S, G+j*inc) entries, where "i" has a range from 0 to n-1.

The value of this parameter has a format an IPv4 or IPv6 address (matching the group itself). Gaia OS adds this value bit-wise to the group IP address.

Default Increment for IPv4: 0.0.0.1

Default Increment for IPv6: ::1

iif <Name of Incoming Interface> {on | off}

Configures the traffic incoming interface for the (S,G) entry.

  • on - Enables the MFC on the specified interface

  • off - Disables the MFC on the specified interface

Note - Before you configure the MFC on an interface, you must configure the interface (enable it and configure an IP address on it.

off

Remove this (S,G) entry from the MFC.

oif <Name of Outgoing Interface> {on | off}

Configures the traffic outgoing interface for the (S,G) entry - the interface that forwards the traffic.

  • on - Enables the MFC on the specified interface

  • off - Disables the MFC on the specified interface

Notes:

  • Before you configure the MFC on an interface, you must configure the interface (enable it and configure an IP address on it).

  • You can configure more than one outgoing interface for the same (S,G) entry.

source-count <1-512>

Configures the number of adjacent sources to add.

This parameter adds multiple (S,G) entries for the configured number of sources in a row.

This parameter configures all (S+i*inc, G) entries, where:

  • "i" has a range from 0 to n-1.

  • The value of the parameter "source-increment" determines the value of "inc".

Note - If you also configure the "group-count", then Gaia OS adds all pairs (S+i*sinc,G+j*ginc)

Range: 1-512

Default: 1 (no additional sources)

source-increment <Source Increment IP Address>

Configures the increment between adjacent sources.

This parameter configures all (S+i*inc, G) entries, where "i" has a range from 0 to n-1.

The value of this parameter has a format an IPv4 or IPv6 address (matching the source itself). Gaia OS adds this value bit-wise to the group IP address.

Default Increment for IPv4: 0.0.0.1

Default Increment for IPv6: ::1

show mfc

      cache [static]

      interface

      orphans

      stats

      summary

Parameters

Parameter

Description

cache [static]

Shows the MFC cache state.

interface

Shows the state information for all interfaces where the MFC is active.

orphans

Shows the MFC <S,G> routes that multicast routing could not resolve (because the multicast source IP address is not reachable).

For details on why a route is orphaned, enable the corresponding trace option "MFC Cache". See Trace Options.

stats

Shows the MFC statistics.

summary

Shows the MFC configuration summary information.

 
MyGW> show mfc stats

Multicast Forwarding Cache Stats
        Resolve Task MyGW
                Total:                         0
                Errors:
                        Truncated:                     0
                        Unsupported Version:           0
                        Multicast Disabled:            0
                        Unsupported Type:              0

        Resolve Requests
                Normal:                        0
                PIM:                           0
                Errors:
                        Unsupported Operation:         0
                        Truncated:                     0
                        Unsupported Type:              0

        RPF Failure Notifications
                Normal:                        0
                PIM Register:                  0
                SPT Switchover:                0
                Errors:
                        Truncated:                     0
                        Unsupported Type:              0
                        No MFC Active:                 0
                        Interface Not Activ:           0

        MFC Maintenance
                Packet Count Request:          0
                Packet Count Response:         0
                Xresolve Request:              0
                Mcast Forward Request:         0
                Errors:
                        Packet Count Request:          0
                        Packet Count Response:         0
                        Xresolve Request:              0
                        Mcast Forwarding Request:      0

MyGW>

MyGW> show mfc

Multicast Forwarding Cache State
        Number of interfaces enabled:            0
        Number of cache entries:                 0
        Kernel forwarding entry limit:           unlimited
        Number of kernel forwarding entries:     0
        Cache entry average lifetime:            300 seconds
        Prune average lifetime:                  7200 seconds
        Cache age cycle:                         10 seconds
        Datarate update interval:                10 seconds
        Multicast Protocol(Instance):            Any(0)

Multicast Forwarding Cache Static Entry State
        Number of interfaces enabled:            0
        Number of cache entries:                 0
        Number of kernel forwarding entries:     0
        Multicast Protocol(Instance):            MFC Static(N/A)

MyGW>

Monitoring MFC Entries

To see the IPv4 and IPv6 multicast entries:

show mfc cache

Example:

MyGW> show mfc cache

Multicast Forwarding Cache State
Prefix                               Type            Age   Expire  RPF
2.2.2.2,224.10.10.10/64              Static          N/A   N/A     eth1.10
        Forwarding:
                eth1.20
                eth1.30
80::1,ff0e::101/256                  Static          N/A   N/A     eth1.10
        Forwarding:
                eth1.20
MyGW>

  • To see the IPv4 multicast entries:

    ip mroute

    Example:

    [Expert@MyGW:0]# ip mroute
(2.2.2.2, 224.10.10.10)          Iif: eth1.10    Oifs: eth1.20 eth1.30 
[Expert@MyGW:0]#

  • To see the IPv6 multicast entries:

    ip -6 mroute

    Example:

    [Expert@MyGW:0]# ip -6 mroute
(80::1, ff0e::101)               Iif: eth1.10    Oifs: eth1.20
[Expert@MyGW:0]#

Troubleshooting MFC

See Trace Options.