multicast problem on ASA

rice.wong · ‎12-23-2009

I have configure two firewall on the same inside VLAN(192.168.0.0/24). The outside of these two firewall is connect to differnet WAN link. Firewall A(192.168.0.1) is forward multicast group 239.193.3.1 packet to Server A(192.168.0.100). Firewall B(192.168.0.254) is forward multicast group 239.139.2.1 packet to Server B(192.168.0.200).

However only Server A can receive multicast packet. When i unplug the Firewall A inside interface, Server B can receive multicast packet.

The problem is all igmp report (join group message) will go to firewall A when both firewall connected to inside VLAN.

Is there any solution for this.

Thank you.

Kureli Sankar · ‎12-23-2009

So the topology is like this??

(192.168.0.100) ServerA-----------(192.168.0.1)FW-A--------Sender (group 239.193.3.1)

| |

inside vlan| | outside vlan

| |

(192.168.0.254) ServerB---------(192.168.0.154)FW-B--------Sender (group 239.193.2.1)

Could you pls. copy and paste the "sh run int" output from both the firewalls for the inside interface?

Do you have IGMP join group configured on both the firewall's inside interfaces?

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i1.html#wp1687160

Here is a good multicast doc.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807631d2.shtml

-KS