topic mroute on a Pix running V7.2 in Network Security

mroute on a Pix running V7.2

thstagman — Mon, 11 Mar 2019 19:32:52 GMT

(Addresses are made up)

I have a Multicast server (1.1.1.1) that is multicasting out on address 224.1.1.1 on an interface called CLAN . I need this mutilcast to be routed out of the inside interface to a client on the internal network.

The mroute command syntax is something along the lines of "mroute 1.1.1.1 255.255.255.255 inside"

This server mutilcasts out multiple multicast addresses and the above syntax to me, would shove everything out of the inside interface.

Is there away of identifying a particular multicast address to be routed out of a specific interface, or is the above syntax correct .. ?

All the required ACL's are in place both inbound & Outbound

Many thanks

Mike

Re: mroute on a Pix running V7.2

Jennifer Halim — Tue, 11 Jan 2011 05:24:53 GMT

Is the PIX actually participating in any multicast routing protocol, or it's only passing through the multicast traffic?

As advised in your previous post, PIX in routed mode does not support passing through of multicast traffic.

However if the PIX participates in the multicast routing protocols, then it is supported.

Here is the configuration guide to configure multicast on PIX if you are interested:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/multicst.html

Re: mroute on a Pix running V7.2

thstagman — Tue, 11 Jan 2011 12:00:49 GMT

Hello Jennifer

Thank you for taking the time to reply

To be honest I'm struggling with this and appreciate any help you can give me. I know how to configure Pix's but not with Multicast. I have attached the config to this message so you can see what I'm trying to do and if I have made a right hash of it or not. I have also attached a small diagram to help you.

Basically there is a Multicast Server on Ethernet 2 (CLAN) . The Client resides on the "inside" interface.

Whats made me throw my hands up in despair is that I tried to ping the multicast address of the server on Ethernet2 and the Pix fired back an error message saying it has no mroute to the that address. Although the server is locally attached ?