ASA Firewall - Multicast Mroute - Informacast

[Mohammad Raza Meer]

Hi,

For one of our customers, we are trying to use Paging Application (Informacast) over WAN to multiple sites, which requires Multicasting to be enabled over the WAN links and LAN links.

We have enabled ip multicast-routing & pim sparse-dense-mode on LAN and WAN interfaces of Head-Office ASR Router and remote 3900 Series Router.

Informacast server is installed in the Head-Office site, In Head Office backbone network is

1. Core Switch connected to Inside Interface of Firewall (security-level 100)

2. ASR Router connected to Outside Interface of Firewall (security-level 0)

3. ASR Router connected to multiple remote sites

If we do "show ip mroute" in the core switch, we are able to see the multicast routing table with an entry of Paging server ip address and a multicast address (x.x.x.x, 239.x.x.x)

But we are not able to see mroute table in the ASR Router. So this mroute table is not propagated to Remote sites router as well.

Informacast Server -> Access Switch -> Core Switch -> (Inside) Firewalll (Outside) -> ASR Router 

In Firewall, for testing this paging application, any any traffic is allowed for ip protocol on both inside and outside interfaces. 

[johnd2310]

Hi,

Have you enabled multicast routing on the ASA firewall? You need to enable multicast routing along the whole path from source to destination. If you cannot enable multicast routing on the firewall, then configure GRE tunnel between Core Switch and ASR router and enable multicast through tunnel.

Thanks

John

[Mohammad Raza Meer]

Hi John,

thanks for your reply, yes multicast is enabled on the Firewall on all interfaces, IGMP and PIM enabled. 

Access Rules created on the Firewall on both Inside and Outside Interfaces (in ACL). 

Access Rules have

any any ip

any any igmp

any any pim