Pick a color scheme
ad placeholder image ad placeholder image

Multicast IP Addresses: Complete Guide

Multicast is a network communication method that allows data to be sent from one source to multiple destinations simultaneously. Unlike broadcast (one-to-all) or unicast (one-to-one), multicast enables efficient one-to-many communication as defined in RFC 1112. This comprehensive guide explains multicast IP addresses, how they work, and their applications.

What is Multicast?

Multicast is a method of sending IP packets to a group of interested receivers in a single transmission. Devices that want to receive the multicast traffic join a multicast group, and the network delivers packets only to group members.

Communication Types Comparison

Unicast (One-to-One):

Server → Client A
Server → Client B
Server → Client C

3 separate transmissions
Bandwidth: 3x

Broadcast (One-to-All):

Server → All devices on network

1 transmission to everyone
Bandwidth: 1x but reaches unwanted recipients
Network congestion

Multicast (One-to-Many):

Server → Multicast Group (A, B, C)

1 transmission to interested parties only
Bandwidth: 1x
Efficient and targeted

Benefits of Multicast

Bandwidth efficiency: - Single stream serves multiple clients - Reduces network load - Scales efficiently - Conserves resources

Server efficiency: - Server sends once - Network duplicates packets - Lower CPU usage - Better scalability

Applications: - Video streaming (IPTV) - Stock market data - Video conferencing - Software updates - Routing protocols - Service discovery

IPv4 Multicast Addresses

Multicast Address Range

Range: 224.0.0.0 - 239.255.255.255

CIDR: 224.0.0.0/4

Binary pattern: 1110xxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx

First 4 bits: Always 1110 (Class D)

Total addresses: 268,435,456

Multicast Address Structure

Format:

224.0.0.0 to 239.255.255.255

First octet: 224-239
Identifies as multicast

MAC address mapping:

IP: 224.0.0.1
MAC: 01:00:5E:00:00:01

First 25 bits of IP mapped to last 23 bits of MAC
Prefix: 01:00:5E (IANA OUI for multicast)

Multicast Address Ranges

Local Network Control Block (224.0.0.0/24)

Range: 224.0.0.0 - 224.0.0.255

Scope: Link-local (never forwarded by routers)

TTL: 1 (single hop)

Purpose: Network protocols on local segment

Well-known addresses:

224.0.0.1 - All Hosts:

All hosts on local network segment
Used for: Host discovery, announcements
Example: Router advertisements

224.0.0.2 - All Routers:

All routers on local network segment
Used for: Router discovery, IGMP queries
Example: OSPF Hello packets

224.0.0.5 - OSPF Routers:

All OSPF routers
Used for: OSPF routing protocol
Link-state advertisements

224.0.0.6 - OSPF Designated Routers:

OSPF designated routers
Used for: OSPF DR/BDR communication

224.0.0.9 - RIPv2 Routers:

All RIPv2 routers
Used for: RIP routing updates

224.0.0.13 - PIM Routers:

All PIM routers
Protocol Independent Multicast

224.0.0.22 - IGMP:

IGMPv3 reports
Internet Group Management Protocol

224.0.0.251 - mDNS:

Multicast DNS
Service discovery (Bonjour, Avahi)
Local name resolution

224.0.0.252 - LLMNR:

Link-Local Multicast Name Resolution
Windows name resolution

Internetwork Control Block (224.0.1.0/24)

Range: 224.0.1.0 - 224.0.1.255

Scope: Can be routed

Purpose: Internet-wide control protocols

Examples:

224.0.1.1 - NTP:

Network Time Protocol
Time synchronization

224.0.1.39 - Cisco Auto-RP Announce:

Cisco Auto-RP announcements
PIM rendezvous point discovery

224.0.1.40 - Cisco Auto-RP Discovery:

Cisco Auto-RP mapping agents

AD-HOC Block (224.0.2.0 - 224.0.255.255)

Range: 224.0.2.0 - 224.0.255.255

Purpose: Temporary assignments

Scope: Variable

Use: Special applications and testing

Source-Specific Multicast (232.0.0.0/8)

Range: 232.0.0.0 - 232.255.255.255

Purpose: Source-Specific Multicast (SSM)

Characteristics: - Receivers specify both group and source - More secure than ASM - Prevents unauthorized sources - Better for one-to-many applications

Format:

(S, G) = (Source IP, Group IP)
Example: (10.1.1.1, 232.1.1.1)

Advantages: - No shared trees - Simpler protocol - Better security - Easier troubleshooting

GLOP Addressing (233.0.0.0/8)

Range: 233.0.0.0 - 233.255.255.255

Purpose: Statically assigned based on AS numbers

Format:

233.X.Y.0/24
Where X.Y is derived from 16-bit AS number

AS 65001:
Binary: 11111101 11101001
233.253.233.0/24

Use case: - Organizations with AS numbers - Globally unique multicast addresses - No registration needed

Administratively Scoped (239.0.0.0/8)

Range: 239.0.0.0 - 239.255.255.255

Purpose: Private/local multicast

Scope: Organization-local

Characteristics: - Not routed on internet - Like private IP addresses - Reusable by different organizations - Configurable boundaries

Common uses:

239.255.0.0/16 - Organization-local
239.192.0.0/14 - Site-local
239.0.0.0/10 - Local scope

Example:

Company A uses 239.1.1.1 for internal video
Company B uses 239.1.1.1 for internal video
No conflict (different networks)

IGMP (Internet Group Management Protocol)

What is IGMP?

Protocol for managing multicast group memberships.

Purpose: - Hosts join/leave multicast groups - Routers track group members - Optimize multicast delivery - Prevent unnecessary traffic

IGMP Versions

IGMPv1 (RFC 1112):

Basic join/leave
Router queries
Host reports
Deprecated

IGMPv2 (RFC 2236):

Leave group messages
Querier election
Faster leave process
Widely deployed

IGMPv3 (RFC 3376):

Source filtering
SSM support
Include/exclude sources
Modern standard

IGMP Process

Joining a group:

1. Host wants to receive 224.1.1.1
2. Host sends IGMP Membership Report
3. Router notes host is in group
4. Router forwards 224.1.1.1 traffic to segment

Maintaining membership:

1. Router sends IGMP Query (periodic)
2. Hosts respond with Membership Report
3. Router continues forwarding traffic
4. If no response, router stops forwarding

Leaving a group:

1. Host sends IGMP Leave message
2. Router sends group-specific query
3. If no other members, router stops forwarding
4. Immediate leave (IGMPv2+)

Multicast Routing

PIM (Protocol Independent Multicast)

PIM-DM (Dense Mode):

Flood and prune
Assumes receivers everywhere
Prunes unnecessary branches
Good for dense receiver distribution

PIM-SM (Sparse Mode):

Explicit join
Assumes receivers sparse
Rendezvous Point (RP)
Scalable for internet

PIM-SSM (Source-Specific):

Uses SSM address range (232/8)
No RP needed
Simpler than SM
Better security

Multicast Distribution Trees

Shared Tree (*,G):

Rooted at Rendezvous Point
All sources use same tree
Suboptimal paths possible
Simpler to manage

Source Tree (S,G):

Rooted at source
Shortest path to receivers
More efficient
More state required

Multicast Applications

IPTV and Video Streaming

Use case:

TV channels to subscribers
Single stream, many viewers
Massive bandwidth savings

Example:

Without multicast:
1000 viewers × 5 Mbps = 5 Gbps

With multicast:
1 stream × 5 Mbps = 5 Mbps
99.9% bandwidth reduction

Stock Market Data

Use case:

Real-time market data
Thousands of traders
Same data to all
Low latency critical

Benefits: - Single feed - Simultaneous delivery - Reduced latency - Efficient distribution

Video Conferencing

Use case:

Multi-party conferences
Each participant sends once
All receive all streams
Bandwidth efficient

Example:

10 participants
Without multicast: 90 streams (9 per person)
With multicast: 10 streams (1 per person)

Software Distribution

Use case:

OS updates
Software deployment
Simultaneous distribution
Reduced server load

Routing Protocols

OSPF:

Uses 224.0.0.5 and 224.0.0.6
Efficient routing updates
Only OSPF routers receive

RIP:

Uses 224.0.0.9
Routing table updates
RIP routers only

EIGRP:

Uses 224.0.0.10
Cisco proprietary
Efficient updates

Configuring Multicast

Enabling Multicast Routing

Cisco IOS:

Router(config)# ip multicast-routing
Router(config)# interface GigabitEthernet0/0
Router(config-if)# ip pim sparse-mode

Linux:

# Enable multicast routing
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/conf/all/mc_forwarding

# Install PIM daemon
apt-get install pimd

Joining Multicast Group

Linux (application):

struct ip_mreq mreq;
mreq.imr_multiaddr.s_addr = inet_addr("224.1.1.1");
mreq.imr_interface.s_addr = htonl(INADDR_ANY);
setsockopt(sock, IPPROTO_IP, IP_ADD_MEMBERSHIP, &mreq, sizeof(mreq));

Windows (application):

struct ip_mreq mreq;
mreq.imr_multiaddr.s_addr = inet_addr("224.1.1.1");
mreq.imr_interface.s_addr = INADDR_ANY;
setsockopt(s, IPPROTO_IP, IP_ADD_MEMBERSHIP, (char*)&mreq, sizeof(mreq));

Testing Multicast

Send multicast:

# Using iperf
iperf -c 224.1.1.1 -u -T 32 -t 3600 -i 1

# Using socat
echo "test" | socat - UDP4-DATAGRAM:224.1.1.1:5000

Receive multicast:

# Using iperf
iperf -s -u -B 224.1.1.1 -i 1

# Using socat
socat UDP4-RECV:5000,ip-add-membership=224.1.1.1:0.0.0.0 -

Troubleshooting Multicast

Common Issues

No multicast traffic received:

Check:
1. IGMP enabled on router?
2. PIM configured?
3. Firewall blocking?
4. Correct multicast group?
5. Switch IGMP snooping?

Multicast flooding:

Problem: Multicast sent to all ports
Cause: IGMP snooping disabled
Solution: Enable IGMP snooping on switches

Duplicate packets:

Problem: Receiving duplicate multicast
Cause: Multiple paths, no RPF check
Solution: Configure RPF, check routing

Diagnostic Commands

Cisco:

show ip mroute
show ip igmp groups
show ip igmp interface
show ip pim neighbor
show ip pim interface

Linux:

# Show multicast routes
ip mroute show

# Show IGMP memberships
cat /proc/net/igmp

# Show multicast interfaces
ip maddr show

Wireshark filters:

igmp - IGMP traffic
ip.dst >= 224.0.0.0 and ip.dst <= 239.255.255.255 - Multicast

IPv6 Multicast

IPv6 Multicast Addresses

Prefix: ff00::/8

Format:

ff00::/8 - Multicast prefix
ffXY::/16 - Flags and scope

X = Flags (0 or 1)
Y = Scope

Scopes:

ff01:: - Interface-local
ff02:: - Link-local
ff05:: - Site-local
ff08:: - Organization-local
ff0e:: - Global

Well-known addresses:

ff02::1 - All nodes (like 224.0.0.1)
ff02::2 - All routers (like 224.0.0.2)
ff02::1:2 - All DHCP servers

Differences from IPv4

No broadcast: - IPv6 has no broadcast - Uses multicast instead - More efficient

Solicited-node multicast:

ff02::1:ffXX:XXXX
Used for neighbor discovery
Replaces ARP

Best Practices

Design

1. Plan address allocation

Use administratively scoped for internal
SSM for one-to-many applications
Document all assignments

2. Implement IGMP snooping

Prevents flooding
Improves efficiency
Reduces unnecessary traffic

3. Configure PIM appropriately

Sparse mode for most cases
Dense mode for dense receivers
SSM when applicable

Security

1. Filter multicast at boundaries

Block unwanted multicast
Prevent multicast DDoS
Control scope

2. Use SSM when possible

Source authentication
Prevents unauthorized sources
Better security model

3. Monitor multicast traffic

Track bandwidth usage
Detect anomalies
Identify unauthorized streams

Performance

1. Optimize TTL

Set appropriate TTL
Prevent unnecessary propagation
Control scope

2. Use proper QoS

Prioritize multicast traffic
Ensure delivery
Prevent packet loss

3. Monitor and tune

Check for packet loss
Optimize routes
Adjust timers

Conclusion

Multicast IP addresses enable efficient one-to-many communication, essential for applications like video streaming, real-time data distribution, and routing protocols. Understanding multicast addressing, IGMP, and multicast routing is crucial for designing and managing modern networks.


Related Articles

Related Address Types

Networking Protocols

  • ICMP - Internet Control Message Protocol
  • Routing - Multicast routing fundamentals
  • BGP - Border Gateway Protocol
  • TCP/IP Model - Protocol stack

IPv6 Multicast

Applications

Explore More

Key takeaways: - Multicast range: 224.0.0.0 - 239.255.255.255 - Efficient one-to-many communication - IGMP manages group memberships - PIM handles multicast routing - SSM (232/8) for source-specific multicast - Administratively scoped (239/8) for private use - IGMP snooping prevents flooding - Essential for IPTV, conferencing, and protocols - More efficient than broadcast or multiple unicasts - Requires proper configuration and management

Whether you're deploying IPTV services, optimizing network protocols, or implementing real-time data distribution, understanding multicast addressing and protocols is essential for efficient and scalable network communication.

ad placeholder image ad placeholder image
Three funny piglies - an illustration ippigly.com