Multicast over single fiber

[wilfriedstautner]

Hello,

the challenge is to transmit video (udp multicast) from a switch in a save environment to a media wall.

The media wall is in an unsafe / uncontrolled environment. To ensure that no data or attack is coming from this side, I'd prefer to have just a TX fiber leaving the save environment and nothing coming back from the media wall.

I face now several challenges:

1) How do I make the fiber link active without any signal at RX?

  The SFP might be a GLC-SX-MM.

  Which commands could I use to keep it up and sending?

2) How do I subscribe this inteface to a multicast group?

  I have a 3560-CG in that area, but could also use a 3560X.

  The multicast might start at 239.1.0.x/24.

  Having no back channel, there is no subscription to the multicast group.

The receiver is a media converter and a set-top-box.

Sending directly udp multicast over two media converters to the set-top-box works.

Any help or advice appreciated.

Wilfried

[balaji.bandi]

Rather i would advise to have Access control list blocking. - is this make sense ?

[wilfriedstautner]

That was my first idea too.

But some people are a bit "paranoid" and I have physically just one fiber for now.

I wanted to avoid the extra costs for a new cable or additional hardware.

Wilfried

[Giuseppe Larosa]

Hello @wilfriedstautner ,

I agree with Balaj you can use an extended IP ACL to protect your secure environment applied inbound on the interface.

Hope to help

Giuseppe

[pieterh]

you can also consider placing the multicast client (a pc or the set-top box ?) in the controlled environment

then use a hdmi -to fiber (or UTP)  transmitter and receiver to bring the data to the media-wall?