cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
219
Views
0
Helpful
1
Replies

Multicast Troubles

alangunnsteel
Level 1
Level 1

I am having problems configuring multicast support on my PIX 515 (6.3(2)).

I am trying support a Symantec Ghost Console on my Inside network, communicating with Ghost Clients on my DMZ network.

Server:

System = Windows 2000 Server, Domain member

IP = 192.168.0.18

Default Gateway = 192.168.0.75 (PIX Inside interface)

Multicast Client:

System = Windows XP Professional, Workgroup member

IP = 192.168.2.31

Default Gateway = 192.168.2.1 (PIX DMZ interface)

The following article describes the multicast infrastrcuture required for this system to work:

http://service1.symantec.com/SUPPORT/ghost.nsf/ppfdocs/2002101612025325?Open&dtype=corp

I have tried a number of multicast configurations, with no success.

My questions are these:

Does the PIX support the multicast communications that I need -- or do I have to wait for 7.0?

If it does, what configuration do I require (in terms of multicast, nat and access-list settings) -- given that my Server and Workstations are on different subnets/interfaces?

When I ran Microsoft's "mcast.exe" (multicast troubleshooting utility), none of the multicast traffic got through. When I moved the Client to the same subnet/interface as the Server, the multicast traffic was fine.

Thanks to all for your input,

Alan

1 Reply 1

pradeepde
Level 5
Level 5

In Software versions 6.2 and higher the PIX firewall supports Stub Multicast routing (SMR), which enables it to pass multicast traffic. With SMR the PIX acts as an IGMP proxy agent.