topic Re: PIX 6.2(2) Multicast in Network Security

PIX 6.2(2) Multicast

rcfoltz — Fri, 21 Feb 2020 06:52:20 GMT

I have a connection to the MBone on the outside interface of my PIX. I have a PIM router on the inside. I have the igmp helper address command on all internal interfaces pointing to the inside interface of the pix. When I do a show route, all the multicast routes show incoming packets, however they fail due to "Empty Olist". What does this mean? And how would I Fix it?

(128.210.182.12,233.2.171.1), stale, Flags:

Last Used: 21:09:48

Forwarding Counts: 389/0/0

Failure Counts: 0/0/389/0

outside Flags: A SP

inside Flags: F

Re: PIX 6.2(2) Multicast

owillins — Mon, 28 Jul 2003 19:37:08 GMT

As far as I know, PIX does not pass multicast traffic. It would have to be encapsulated in gre or changed to a unicast packet to pass through the PIX. This is probably why the OIL is empty.

The Stub Multicast Routing (SMR) feature was introduced with PIX Firewall version 6.2.

You could refer to the following document that outines the procedure to enable multicast routing on the PIX.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/bafwcfg.htm#xtocid26