All things related to multicast

["Kelly, Vaughn [NCSUS Non J&J]" <>]

Title: RE: Multicasts and Firewalls

You don't have to use the GRE tunnel as of 6.2(2) PIX firewall software.

-----Original Message-----
From: Peter John Hill []
Sent: Thursday, May 15, 2003 1:37 PM
To: Fred Zalupski; I2 Multicast Working Group
Subject: Re: Multicasts and Firewalls

Apparently with PIX firewalls, you need to have a router in front of the firewall and a gre tunnel through the firewall for multicast traffic. Let's

have a vote, who thinks this sounds like a fun thing to set up? It would be nice if the PIX could do everything at layer 2 and did not need to be the

router. I do believe that the newer code does allow that. I think they also added dhcp relay and ospf to the devices.

Of course, here at CMU, we do not have any firewalls that are run by the computing services organization, so I may not be the best person to help you.

here it the link to cisco's doc, cco account req'd
<http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a00800943fe.shtml>

--On Thursday, May 15, 2003 9:33 AM -0400 Fred Zalupski <> wrote:

> One of our member institutions is looking for advice from someone using a firewall in a multicast-enabled environment. They recently installed a

> Nortel Shasta (same look and feel as Checkpoint, he reports) and subsequently discovered a problem receiving content. Anyone willing to pass along

> advice or experience, please contact me and I'll put you in touch with my subscriber.
>
> Thanks and regards, all,
>
> --
> Fred F. Zalupski
> Engineering and Operations Coordinator
> MAGPI GigaPoP, University of Pennsylvania
> tel 215-573-6417
> fax 215-898-9348
> www.magpi.net
>
>