topic ASA mcast IGMP static mcast group in Network Security

ASA mcast IGMP static mcast group

Gongyuan Yao — Mon, 11 Mar 2019 20:34:09 GMT

Hi,

We have ASA 5580-40 with rel ver 8.1(2). During testing mcast, we found that if we do not configure IGMP static group or join group with specific mcast group ip addr, the mcast will not work, the client application can not join the specific mcast group. Any one knows the reason or we missed some IGMP configuration in ASA.

Any help would be greatly appreciated.

Thanks.

Re: ASA mcast IGMP static mcast group

Anu M Chacko — Tue, 17 May 2011 08:25:33 GMT

Hi Gongyuan,

To configure IGMP stub mode on the ASA, you need the following. Let's assume that the mcast receivers are on the outside and the senders on the inside. Gig 0/0 is the ouside interface.

multicast-routing

int gig0/0

igmp forward interface inside //whatever macst traffic is recieved on the outside, fwd it out to the inside//

Since in this example, the inside is on a higher security-level, yoy dont need access-list to permit traffic from the senders. However, if you do have an access-list already applied, you will need the following:

access-list aclin permit ip any host

Regards,

Anu

P.S. Please mark the question as answered if it has been resolved.Do rate helpful posts.

Re: ASA mcast IGMP static mcast group

Gongyuan Yao — Thu, 19 May 2011 20:15:36 GMT

Hi Adu

Thank you very much for your answer.

Very sorry, your answer is not the correct one. The problem was a bug in ASA rel 8.1(2)---it caused IGMP req dropped incorrectly. This bug has been fixed in ASA rel 8.2(4). After we discussed this with Cisco TAC and upgraded to ASA rel 8.2(4), the problem has been fixed.

Anyway, Thanks for your help.