topic Re: How to configure Multicast in Firewall and Security Management

How to configure Multicast

RioAung — Tue, 23 Feb 2021 04:15:05 GMT

Hi,

I am beginner of checkpoint.

I would like to ask about multicast configuration.

I have below network for video stream.

Video Server==> Switch1==>CP5600=> Switch2 =>PC

When PC is directly connected to Switch1, i can get video stream.

But when PC is connected switch2 or checkpoint firewall port, i can not get the video stream.

So please let what kind of configuration do i need to add ?

I configured PIM dense mode in both of WAN interface and LAN interface of CP5600

do i need to configure igmp snooping in switch 1 and switch 2 ?

do i need to change sparse mode in firewall ?

Do i need to change routed mode to bridge mode ?

Re: How to configure Multicast

JackPrendergast — Wed, 24 Feb 2021 09:44:53 GMT

Hello.

Going to basics and most importantly, is there firewall rules in place to allow multicast?

Re: How to configure Multicast

RioAung — Thu, 25 Feb 2021 08:02:00 GMT

Hi,

i added allow all rule and tried. when i check with fw ctl zdebug + drop , i got below log.

@;126210;[cpu_0];[SIM-206862971];sim_pkt_send_drop_notification: (0,2) received drop, reason: Do routing, conn: <10.2.2.11,6760,239.2.2.11,6780,17>;
@;126210;[cpu_0];[SIM-206862971];sim_pkt_send_drop_notification: no track is needed for this drop - not sending a notificaion, conn: <10.2.2.11,6760,239.2.2.11,6780,17>;
@;126210;[cpu_0];[SIM-206862971];prepare_cut_through: drop due to no multicast listeners, rc: 23 changing to => SIMPKT_IN_DROP, conn: <10.2.2.11,6760,239.2.2.11,6780,17>;
@;126210;[cpu_0];[SIM-206862971];do_packet_finish: SIMPKT_IN_DROP vsid=0, conn:<10.2.2.11,6760,239.2.2.11,6780,17>;
@;126210;[cpu_0];[SIM-206862971];do_routing: multicast route count is zero -> DROP;