topic Re: ASA5510 Multicast in Network Security

ASA5510 Multicast

jschweng — Mon, 11 Mar 2019 17:26:32 GMT

We have an ASA5510 which we need send 12 Multicast through. I am using igmp join-groups on the OUTSIDE interface so that it will forward the packets. Occasionally we need to limit some of the groups because its private video. I have tried setting up outbound filters with the specific MC groups that I would like to deny out andt hen applying it to the interface, but it doesn't seem to have any effect. The only think I have found that works is either addign or removing the igmp join-group statements from the interface - which stops those groups from going outbound.

Is there anyway to use access-lists or filtering to restrict certain groups from being forwarded?

thank you

LMCO

Re: ASA5510 Multicast

Kureli Sankar — Fri, 26 Mar 2010 20:43:06 GMT

Have you tried this?

igmp access-group acl

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i1.html#wp1691964

-KS

Re: ASA5510 Multicast

jschweng — Fri, 26 Mar 2010 20:44:44 GMT

yes I did try igmp access-list but - the static joins appeared to override it.

Re: ASA5510 Multicast

jschweng — Fri, 26 Mar 2010 21:26:40 GMT

do hte ASA access-lists not filter any multicast packets? Does MC bypass the interface filters?