Multicast Routing in pix 7.0.x

[hperez]

I have a pix running 7.0.2 and multicast routing.

When I configure only one RP, all things go fine. Indeed, all suscribers see the mroutes as well as pix.

So, if I configure several rp for several multicast group, nothing is working. Pix can not see any rp and mroute, nothing.

My configuration is the following one:

multicas-routing (obviously)

interface eht0

name ext

ip address 10.1.27.97 255.255.255.224

...

interface eth1

name int

ip address 10.1.27.68 255.255.255.224

...

access-list group1 standard permit 224.100.28.1

access-list group2 standard permit 224.100.29.1

pim rp-address 10.10.28.6 group1

pim rp-address 10.10.29.6 group2

There is connectivity with both rp.

Pix is not working multicast routing with this configuration.

Pix can not see rp and multicast groups ....

Indeed, if I only put one rp it works.

I upgraded to PIX7.0.4 and nothing was better.

Any help ?????

Best regards

Roberto

[wong34539]

The PIX Firewall does not pass multicast packets, even though many routing protocols use multicast packets to transmit their data. Cisco considers it inherently dangerous to send routing protocols across the PIX Firewall. If the routes on the unprotected interface are corrupted, the routes transmitted to the protected side of the firewall pollute routers there as well.

For more info refer to the following url:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800943fe.shtml