The WolfspyreLabs Blog/ August/ Multicast DNS on Wifi networks/ Multicast DNS on Wifi networks This document sourced from [This Cisco TAC Article][tac210835]. I did not write this!! 😀 This document describes the implementation of the Bonjour protocol on the wireless controller. It’s purpose is to help you understand the workflow and provide guidelines to troubleshoot. Prerequisites #Requirements #Cisco recommends that you have knowledge of these topics: Basic knowledge of Bonjour Protocol Basic knowledge of configuring mDNS on WLC Basic knowledge of Multicast routing Components Used #The information in this document is based on these software and hardware versions: AIR-CT2504-K9 WLC: 8.2.141.0 WS-C3560CX-8PC-S AIR-CAP3702I-E-K9 Apple TV Iphone5s: 10.21 The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command. Background Information #Bonjour protocol is an Apple service discovery protocol which locates devices and sevices on a local network with the use of multicast Domain Name System (mDNS) service records. The Bonjour protocol operates on service announcements and service queries. Each query or advertisement is sent to the Bonjour multicast address ipv4 224.0.0.251 (ipv6 FF02::FB). This protocal uses mDNS on UDP port 5353. The address used by the Bonjour protocol is link-local multicast address and therefore is only forwarded to the local L2 network. Routers cannot use multicast routing to redirect the traffic because the time to live (TTL) is set to 1. This meant that all the service providers/sources (which advertise the service) and Bonjour clients (which ask for service) had to be in the same subnet. This lead to scability problems. In order to address this issue, the Cisco Wireless LAN Controller (WLC) acts as a Bonjour Gateway. The WLC listens for Bonjour services, caches these Bonjour advertisements (AirPlay, AirPrint, etc.) from the source/host. For example, Apple TV and responds back to Bonjour clients when they ask/request for a service. This way you can have the sources and clients in different subnets. Configure # Packet Flow with Debugs #There are basic four steps which take place when mDNS runs on a Cisco WLC. These steps are described as follows: 1. When You Globally Enable mDNS on the WLC # WLC listens to these default services if one doesn’t have a customized mDNS profile created as shown in the image. Each of these services has a service string associated with it. Service strings are used to match service instances to service queries. A service type always contains the service name and the protocol. Additionally, it may contain one or more subtype identifiers. AppleTV service uses: _airplay._tcp.local. When mDNS is enabled globally, the controller sends mDNS queries to 224.0.0.251 for all the services on wired (management and dynamic interfaces) and wireless network. In this capture at WLC switch port, packets 80, 81 and 82 show WLC sends a query to 224.0.0.251 over the wired network with source IP of the management (10.48.39.142) and dynamic interfaces(192.168.232.11 and 192.168.239.8) as shown in the image. Packet 83 shows that WLC sends a query over the wireless. The inner packet shows WLC querying to 224.0.0.251 from management interface. Since this query is over the wireless, capwap header is added to the packet with outer source IP still to be that of management but the destination is multicast IP 239.100.100.100 as shown in the image. Now, where does this multicast IP 239.100.100.100 come from? On the WLC, Access Point (AP) multicast mode (controller > general) was set to multicast with multicast group address as 239.100.100.100 (it’s just an example, any ip in the 239 range). The APs join this multicast group and listen on it. WLC forwards the query to this group, APs receive it and send it over the air. The address 239.100.100.100 (this is not static, this is what we configured in the below example) only appears in the capwap header between the WLC and the APs, the wireless clients never sees anything of it (but it can see the inner original mdns packet) as shown in the image. Remember in this setup the WLC is a 2504 in vlan 1 and the AP is in vlan 231. As the devices are in different vlans, one needs to have multicast routing enabled for vlan 1 and 239 on the wired for this to work. Note: If multicast routing is not enabled on the wired for wlc and AP management vlan, then AP multicast mode must be set to unicast. In this mode, the controller unicasts every multicast packet to every AP associated to the controller. This mode is very inefficient and is not recommended. This capture is the query packet in detail as shown in the image. The debugs reflect the same thing as seen in the captures. Here the snippet only shows query from management interface. (Cisco Controller) >debug mdns all enable Cisco Controller) >*emWeb: Feb 22 16:24:18.203: bgSetBonjourAccessPolicy :1192 Bonjour AccessPolicy status is already in requested state Disabled *emWeb: Feb 22 16:24:18.203: bgSetBonjourQueryInterval :1359 Bonjour query interval is already configured for requested value = 15 *Bonjour_Process_Task: Feb 22 16:24:18.215: bonjourProcessTask : 220 Processing message type = BONJOUR_AGGREGATED_QUERY *Bonjour_Process_Task: Feb 22 16:24:18.215: sendBonjourPkt : 3881 sendBonjourPkt msg-type = BONJOUR_AGGREGATED_QUERY toSend = all *Bonjour_Process_Task: Feb 22 16:24:18.216: Send to Wired, All vlan is TRUE *Bonjour_Process_Task: Feb 22 16:24:18.216: sendBonjourPacketToWired : 3652 sending aggregated query on interface = management *Bonjour_Process_Task: Feb 22 16:24:18.216: buildBonjourPacket : 2916 Preparing for l2 Multicast send *Bonjour_Process_Task: Feb 22 16:24:18.216: buildBonjourPacket : 2936 allVlan = 0 , vlanId = 0 *Bonjour_Process_Task: Feb 22 16:24:18.216: buildBonjourPacket : 2948 simInterfaceMacAddrGet( management ) = 00:A2:89:B9:62:60 *Bonjour_Process_Task: Feb 22 16:24:18.216: Inside buildBonjourAggregatedQuery, available len = 1458 *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : 7339 Sending mDNS AGGREGATED query for services configured in MSAL-DB *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 1 ] Including SRV = AirPrint in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 2 ] Including SRV = AirTunes in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 3 ] Including SRV = AppleTV in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 4 ] Including SRV = HP_Photosmart_Printer_1 in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 5 ] Including SRV = HP_Photosmart_Printer_2 in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : [ 6 ] Including SRV = Printer in aggregated query packet *Bonjour_Process_Task: Feb 22 16:24:18.216: ----------------------------------------- *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : PACKET-1 mDNS-QUERY sent for [ 6 ] services *Bonjour_Process_Task: Feb 22 16:24:18.216: fillBonjourAggregatedQuery : mDNS-QUERY sent for all services in [ 1 ] packets *Bonjour_Process_Task: Feb 22 16:24:18.216: ----------------------------------------- *Bonjour_Process_Task: Feb 22 16:24:18.216: buildBonjourPacket : 3054 BONJOUR_AGGREGATED_QUERY: buildBonjourAggregatedQuery()STATUS = 0 *Bonjour_Process_Task: Feb 22 16:24:18.216: buildBonjourPacket MCAST-DST-IP ADDR = 224.0.0.251 2. WLC Caches Bonjour Services ( Apple TV Advertisement ) #In this packet, the Apple TV ( 192.168.239.37 ) sends advertisements to 224.0.0.251 . Since in this case Apple TV is wireless , one can see the advertisement being sent over capwap. The WLC takes note only once of the mDNS service response, however, that cache entry has a TTL and keepalives are necessary to maintain it as shown in the image. The detailed response from Apple TV is as shown in the image. These debugs show Apple TV in respond to the WLC’s queries . In this scenario, Apple TV responded with 21 services out of which only Airplay service is of interest. *Bonjour_Msg_Task: Feb 23 16:22:02.372: 18:ee:69:11:dc:60 Parsing 21 Bonjour Answers. *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : 1562 aStringNameStr = Wireless Team (4)._airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : 1579 RR: Wireless Team (4)._airplay._tcp.local., aType: 16, aClass: 32769, aTTL: 4500, aDataLen: 207, ptr: 0x327a9ca8, end: 0x327aa100 *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : 1581 aStringNameStr : Wireless Team (4)._airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: Found Service Name:_airplay._tcp.local., Service Provider Name:Wireless Team (4)._airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgServiceAllowedInMsalDb : 181 srv_str = _airplay._tcp.local. type = Wireless *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgServiceAllowedInMsalDb : 195 Incoming Service Advertisement string = _airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: Service-Name = AppleTV Service-String = _airplay._tcp.local. Type = all Origin = Wireless FOUND and is ALLOWED FOR LEARNING <<< Airplay service registered in WLC DB >> *Bonjour_Msg_Task: Feb 23 16:22:02.374: Service Name:_airplay._tcp.local. is supported in Master-service-db *Bonjour_Msg_Task: Feb 23 16:22:02.374: aDataLen: 2, aSrPtrRecord.aSrvProName.size: 39 *Bonjour_Msg_Task: Feb 23 16:22:02.374: Updating updateBonjourSrPtrDb: *Bonjour_Msg_Task: Feb 23 16:22:02.374: aType: 12, aClass: 1, aTTL: 4500, aDataLen: 2, ptr: 0x327a9d93, end: 0x327aa100 *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : .. < SP-SR_PTR PKT >... *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : SERVICE NAME ......... = AppleTV *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : SERVICE STRING ....... = _airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : SERVICE PROVIDER ..... = Wireless Team (4)._airplay._tcp.local. *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : aTTL ................. = 4500n *Bonjour_Msg_Task: Feb 23 16:22:02.374: bgProcessServiceAdvRsp : 1546 msg : 0x327a9bda, ptr : 0x327a9d93, end : 0x327aa100, pld_len : 877 3. WLC Listens to Client Queries For Services #Later on, at any point in time, the wireless client (192.168.232.98) sends a query which asks for airplay service over the air (typically when the client opens up an application that is airplay capable) as shown in the image. *Bonjour_Msg_Task: Feb 27 17:03:15.603: 00:6d:52:5d:5a:7d Parsing 2 bonjour questions *Bonjour_Msg_Task: Feb 27 17:03:15.603: 00:6d:52:5d:5a:7d Query Service Name: _airplay._tcp.local., RR-Type: TYPE_DOMAIN_NAME_PTR , Class: 1 *Bonjour_Msg_Task: Feb 27 17:03:15.603: processBonjourPacket : 1017 qNameStr : _airplay._tcp.local., bonjServiceNameStr : _airplay._tcp.local., bonjSpNameStr : _airplay._tcp.local. *Bonjour_Msg_Task: Feb 27 17:03:15.603: Service Name : AppleTV Service String : _airplay._tcp.local. is supported in MSAL-DB *Bonjour_Msg_Task: Feb 27 17:03:15.603: 00:6d:52:5d:5a:7d SRV : _airplay._tcp.local. is supported by client profile : default-mdns-profile 4. WLC Sends Unicast Response to Client Queries for Bonjour Services #The WLC responds with cached service Wireless Team (4)._airplay._tcp.local. The source IP of the inner packet is the dynamic interface of the client vlan, in this case 192.168.232.11 as shown in the image. Snippet from debug #BONJOUR_AGGREGATED_QUERY_RESPONSE *Bonjour_Process_Task: Feb 27 17:03:45.229: buildBonjourQueryResponsePld : SRV-NAME ..... : AppleTV *Bonjour_Process_Task: Feb 27 17:03:45.229: buildBonjourQueryResponsePld : SP-NAME....... : *Bonjour_Process_Task: Feb 27 17:03:45.229: buildBonjourQueryResponsePld : SEND TO ...... : BONJOUR_PKT_TO_WIRELESS *Bonjour_Process_Task: Feb 27 17:03:45.229: buildBonjourQueryResponsePld : VLAN ......... : 232 *Bonjour_Process_Task: Feb 27 17:03:45.229: buildBonjourQueryResponsePld : IS MCAST ..... : NO *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : DST-MAC ...... : 00:6D:52:5D:5A:7D *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : DST-IP ....... : 192.168.232.98 *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : ALL mDNS-AP .. : 0 *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : TTL COUNTER .. : TIMEOUT_RESET *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : RESTART TIME . : 0 *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : SNOOP STATUS . : 0 *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : LSS STATUS ... : DISABLED *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : RSP SRV NAME . : AppleTV *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : MSG-ID ....... : 0 *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld : POLICY STATUS : DISABLED *Bonjour_Process_Task: Feb 27 17:03:45.230: buildBonjourQueryResponsePld INCLUDING SpData : Wireless Team (4)._airplay._tcp.local. in AGGREGATED QUERY RESPONSE *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID SR-PTR RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID SD-PTR RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID SRV RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID TXT RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID NSEC RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID DOMAIN RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: fillBonjourDomain : 6055 : attaching SP-DOMAIN RR *Bonjour_Process_Task: Feb 27 17:03:45.233: VALID DOMAIN-NSEC RR FOUND, attaching..... *Bonjour_Process_Task: Feb 27 17:03:45.233: buildBonjourPacket DST-IP ADDR = 192.168.232.98 *Bonjour_Process_Task: Feb 27 17:03:45.233: Transmitting bonjour Pkt to STA: 00:6D:52:5D:5A:7D *Bonjour_Process_Task: Feb 27 17:03:45.233: Unicast Packet sent to client 00:6D:52:5D:5A:7D success. Verification and Troubleshooting #This section provides information you can use in order to confirm and troubleshoot your configuration. In order to identify and isolate issues in mdns requires the configuration to be correct and thus requires few basic checks. 1. mDNS must be enabled globally. #From GUI navigate Controller > mDNS as shown in the image. #From CLI: #show network summary (snippet) mDNS snooping............................... Enabled mDNS Query Interval......................... 15 minutes 2. If you use a custom mDNS profile ensure that all the required services are added to it. #3. Ensure that mDNS is enabled under the SSID and the correct mdns profile is mapped to the SSID. #From GUI navigate to WLAN > WLAN ID > Advanced as shown in the image. From CLI: show wlan <ID> (snippet) mDNS Status...................................... Enabled mDNS Profile Name................................ default-mdns-profile ##### 4. Verify whether mDNS service provider is listed in the mDNS domains services. This lists the domain names ( Apple TV, airprinters) of the services that have been cached by the WLC. From GUI, navigate to Controller > mDNS > mDNS Domain Name IP> Summary as shown in the image. From CLI: show mdns domain-name-ip summary Number of Domain Name-IP Entries................. 1 DomainName MAC Address IP Address Vlan Id Type TTL Time left (sec) (sec) -------------------- ---------------- ---------------- ------- ------ ------ ------ Wireless-Team-3.local. 18:ee:69:11:dc:60 192.168.239.37 239 Wireless 4725 4163 5. #Verify whether the service provider is also listed under the specific service itself. From GUI, navigate to Controller > mDNS > General > Service Name as shown in the image. From CLI: show mdns service detailed AppleTV Service Name..................................... AppleTV Service String................................... _airplay._tcp.local. Service Id....................................... 3 Service query status............................. Enabled Service LSS status............................... Disabled Service learn origin............................. Wireless and Wired Number of Profiles............................... 1 Profile.......................................... default-mdns-profile Number of Service Providers ..................... 1 Number of priority MAC addresses ................ 0 ServiceProvider MAC Address AP Radio MAC Vlan Id Type TTL Time left(sec) (sec) -------------------- ---------------- ---------------- ------- ------ ----- --------- Wireless Team (4)._airplay._tcp.local. 18:EE:69:11:DC:60 A4:6C:2A:7C:8F:80 239 Wireless 4500 3841 If the service is not discovered by the WLC, then check if it is to be learnt under bonjour browser (Controller»mDNS»mDNS browser). Bonjour browser is a cache of all the service advertisements seen at the WLC and not discovered because configuration did not allow to learn. You can add services by picking them from the Bonjour browser, this comes in handy when you test and implement a new service. 7 a These are the commands to debug Bonjour: debug mdns error enable debug mdns message enable debug mdns detail enable debug mdns all enable Bonjour browser and show mdns service not-learnt could be used as a debug tool as well. As mentioned before, If WLC and AP are in different subnets and AP multicast mode is set to multicast, then ensure that multicast routing is enabled on the wired network between the two vlans. In this setup, vlans are vlan 1 (WLC) and vlan 231 (AP). Conf t ! interface Vlan1 ip pim sparse-dense-mode ! interface Vlan231 ip pim sparse-dense-mode ! Multicast routing at play: Gateway#sh ip mroute 239.100.100.100 IP Multicast Routing Table -------snippet-------------------- (*, 239.100.100.100), 2w4d/stopped, RP 10.48.39.5, flags: SJC Incoming interface: Null, RPF nbr 0.0.0.0 Outgoing interface list: Vlan231, Forward/Sparse-Dense, 2w0d/00:02:10 Vlan232, Forward/Sparse-Dense, 2w4d/00:02:11 (10.48.39.142, 239.100.100.100), 2w4d/00:02:50, flags: T Incoming interface: Vlan1, RPF nbr 0.0.0.0, RPF-MFD Outgoing interface list: Vlan231, Forward/Sparse-Dense, 2w0d/00:02:10, H Along with these checklist, the key is to understand the packet flow when mDNS runs on WLC. The packet flow and the debugs help deep dive into areas where the above verification commands fall short. TAC Authored Contributed by Cisco Engineers Ritin Mahajan Cisco TAC Engineer Akshat Munshi Cisco TAC Engineer [tac210835]: https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/210835-Troubleshooting-mDNS.html [img00]:(images/210835-00.jpeg) [img01]:(images/210835-01.jpeg) [img02]:(images/210835-02.jpeg) [img03]:(images/210835-03.jpeg) [img04]:<images/210835-04.jpeg> [img05]:<images/210835-05.jpeg> [img06]:(images/210835-06.jpeg) [img07]:(images/210835-07.jpeg) [img08]:(images/210835-08.jpeg) [img09]:(images/210835-09.jpeg) [img10]:(images/210835-10.jpeg) [img11]:(images/210835-11.jpeg) [img12]:(images/210835-12.jpeg) [img13]:(images/210835-13.jpeg)