cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
267
Views
3
Helpful
1
Replies

VPN WITH MULTICAST

lidium.net
Level 1
Level 1

Hello everyone I have an ipsec VPN created, but in addition to this we need to let me do multicast between points of the VPN, for a system VideoConference someone can guide me how to do it?

Thanks for your help

Router 1 connected to source

version 12.4

no service pad

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname xxx

!

no logging buffered

!

no aaa new-model

!

crypto isakmp policy 10

hash md5

authentication pre-share

crypto isakmp key XXXX address 195.x.x.70

!

!

crypto ipsec transform-set setmenorca esp-des esp-md5-hmac

!

crypto map palma 10 ipsec-isakmp

set peer 195.XX.XX.70

set transform-set setmenorca

match address 100

!

ip cef

no ip domain lookup

ip multicast-routing

!

multilink bundle-name authenticated

username admin privilege 15 password 7 XXXXXXXXXXXXXX

!

interface Ethernet0

ip address 192.168.3.251 255.255.255.0

ip nat inside

ip virtual-reassembly

hold-queue 100 out

!

interface ATM0

no ip address

no ip route-cache cef

no ip route-cache

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

ip address 217.XXX.XXX.188 255.255.255.192

ip nat outside

ip virtual-reassembly

no ip route-cache

no snmp trap link-status

crypto map palma

pvc 8/32

encapsulation aal5snap

!

!

ip route 0.0.0.0 0.0.0.0 ATM0.1

!

no ip http server

no ip http secure-server

!

ip nat inside source route-map nonat interface ATM0.1 overload

!

access-list 100 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 120 deny ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 120 permit ip 192.168.3.0 0.0.0.255 any

snmp-server community private RO

snmp-server enable traps tty

!

route-map nonat permit 10

match ip address 120

!

1 Reply 1

paolo bevilacqua
Hall of Fame
Hall of Fame

Hi,

IPsec cannot carry multicast.

Please configure a GRE tunnel between routers doing the VPN and apply "tunnel protection" command on it.

The tunnel will be then encrypted and able to carry multicast.

Hope this helps, please rate post if it does!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: