topic Re: PIX multicast problem in Network Security

PIX multicast problem

jmprats — Fri, 21 Feb 2020 09:10:00 GMT

Hi, I'm sending a multicast stream from a pix dmz. I have no problem to receive the stream from more secure interfaces, but i can't receive it from less secure ones.

I have enabled multicast-routing

I have reviwed the syslog (there are no errors)

I have enabled pim and igmp on each interface

If i change the security-level of that interface then the multicast traffic works

Anybody know if i have to do anything else?

Thanks

Re: PIX multicast problem

sundar.palaniappan — Mon, 11 Sep 2006 12:12:30 GMT

Is your multicast traffic permitted in the ACL applied on the low security interfaces?

Re: PIX multicast problem

jmprats — Tue, 12 Sep 2006 06:17:22 GMT

Yes, I have tried with "permit ip any any" and it doesn't work

I had the same problem with unicast traffic and i resolved it deleting the "inspect rtsp", but the multicast packets are not received by the client yet. There are multicast packets passing the pix, but it looks like the pix filters this traffic and the client don't understand it.

I broadcast with Windows Media with protocol MMS

Re: PIX multicast problem

sundar.palaniappan — Tue, 12 Sep 2006 20:33:24 GMT

You need to create an IGMP ACL and apply it under the DMZ interface.

Here's a sample config to allow IGMP access for multicast group 224.10.10.1

PXI(config)# access-list 10 permit igmp any 224.10.10.1 255.255.255.255

PIX(config)# multicast interface dmz

PIX(config-multicast)# igmp access-group 10

Hope this helps!

Re: PIX multicast problem

jmprats — Fri, 15 Sep 2006 10:08:50 GMT

Finally, the problem was the multicast IP address. With a 239.192.0.0 it doesn't work. With a 239.255.0.0 it works. I don't understand why

Does anybody know it?