Cisco PIX 525 Especificações descarregar pdf (Página 107)

2-47

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 2 Establishing Connectivity

Enabling Stub Multicast Routing

Replace mc-source-if-name with the name of the PIX Firewall interface that is connected to the MC

router. This is typically the outside interface. For example, the following command enables the

forwarding of IGMP reports on the currently selected PIX

Firewall interface, when the MC router is

connected to the interface named “outside.”

igmp forward interface outside

Step 4 (Optional) Define static IGMP entries by using the following command:

igmp join-group group-address

Enter this command on the downstream interface, which has receiving hosts in the multicast group.

This command configures the interface to be a statically connected member of the specified group. This

allows the PIX

Firewall to act for a client that may not be able to respond via IGMP, but still requires

reception. This command is applied to the downstream interface toward the receiving hosts.

Step 5 Create an access list entry to permit inbound traffic to the multicast address:

access-list acl_ID permit udp host ip-address host group-address

Step 6 Apply the access list to the Outside interface for inbound multicast transmissions:

access-group acl_ID in interface outside

Note It is suggested that you narrow down the host that is sourcing the multicast stream.

Step 7 (Optional) Configure the multicast groups that hosts can join:

access-list acl_ID permit igmp any destination_addr destination_mask

This command configures an access control list that allows IGMP traffic to permissible Class D

destination addresses.

• Replace acl_ID with the name of the access control list.

• Replace destination_addr with the Class D address of the multicast group from which you wish to

allow hosts to receive multicast transmissions. To define many multicast groups with a single

command, use the object grouping feature, described in “

Simplifying Access Control with Object

Grouping” in Chapter 3, “Controlling Network Access and Use.”

Step 8 Apply the access list by entering the following command from the multicast subcommand mode:

igmp access-group acl_ID

This command applies the access list to the multicast interface that you are currently configuring.

Example 2-6 Inside Receiving Hosts

In the following example, inside clients must register with the multicast group with the Class D address

225.2.1.14:

multicast interface inside

igmp join-group 225.2.1.14

After entering these commands, the PIX Firewall will act as an interested host for 224.1.1.1 and act

accordingly on the interface to which the command was applied. Other downstream interfaces may be

added to the list dynamically via IGMP.

1 2 ... 102 103 104 105 106 107 108 109 110 111 112 ... 465 466

Comentários a estes Manuais

Sem comentários

Cisco PIX 525 Especificações Página 107

Comentários a estes Manuais

Manuais e produtos relacionados com Sistemas de segurança - controlo de acesso Cisco PIX 525