topic Re: multicast issue in Firewall and Security Management

multicast issue

coskun_sanli — Thu, 07 Feb 2019 20:24:18 GMT

Hello,

we have checkpoint r8010 running on two gateways and we have 2 different vlans on these gateways: vlan 1 and vlan 10 . there is no access restriction between these two networks.

we stream multicast from server having vlan1 and we want the pc with vlan 10 to receive it. However we fail to receive this although we have tried several configurations.

Can you help us with the details we need to pay attention so that we can have the multicast successfully?

Re: multicast issue

_Val_ — Fri, 08 Feb 2019 00:35:28 GMT

Start here How to configure PIM on Gaia OS

Re: multicast issue

coskun_sanli — Fri, 08 Feb 2019 11:43:49 GMT

Hello

thank you for your answer. I supported this guide, but I didn't succeed

my multicast server on VLAN 1 and the IP address of VLAN 1 192.168.1.1/24 . My receiver client I running on VLAN 10 IP address of VLAN 10 gateway is 192.168.2.1/24

I selected PIM protocol Sparce Mode and all VLAN add tab of PIM Interfaces.

enable static RP and Rendezvous Point 192.168.1.1 , Multicast groups 224.0.0.0/4

stream video on VLC Player on VLAN1 ,but i didn't receive vlan 10

thank you for your help

Re: multicast issue

Dmitry_Krupnik — Fri, 08 Feb 2019 17:00:01 GMT

Hello,

I suggest to check:

1) The TTL settings on the VLC Player (source). If you didn't set it manually, I advice to use the ttl=20.

2) IGMP configuration.

3) Take a look the "Troubleshooting" section of the sk100239 and output of the "show pim joins" command in particular.

4) Output of the tcpdump on the relevant interfaces of the GW. We need to be sure, that GW receives the packets from the source and receiver.

5) Drops, related to this traffic.

Regards,

Dmitry.

Re: multicast issue

_Val_ — Mon, 11 Feb 2019 09:02:56 GMT

do you have FW policy rules to cover this traffic?

Re: multicast issue

coskun_sanli — Tue, 12 Feb 2019 14:14:47 GMT

Hello

when i check Troubleshooting tab on sk100239

i see this message

[Expert@HostName:0]# fwaccel conns

The relevant multicast connections should not have the "F" (Forwarded to Kernel) flag.

but my all multicast network have F , what can be the reason for this?

Re: multicast issue

_Val_ — Tue, 12 Feb 2019 15:23:29 GMT

Its normal, there is no acceleration for multicast. Keep looking

Re: multicast issue

coskun_sanli — Mon, 18 Mar 2019 05:51:02 GMT

thank you for your help

i check on switch and i add static multicast join group ,its work