ASA 5505 - multicast with IPSEC

aviyoshi10 · ‎07-13-2010

Hi all,

i have a setup with 2 X asa 5505. i configure both asa to a VPN site to site configuration - IPSEC (no split tunnel).

my question is if i can enable multicast (pim sparse-mode) on that configuration and platform ?

please advise,

Avi.

kenrandrews · ‎07-13-2010

I believe this article is what you are looking for:

http://www.cisco.com/en/US/docs/ios/ipmulti/configuration/guide/imc_cfg_mc_vpn_ps6441_TSD_Products_Configuration_Guide_Chapter.html

I hope that helps.

Marcin Latosiewicz · ‎07-13-2010

Avi,

IPsec itself cannot carry multicast (neither on ASA nor IOS, nor any standard adharding device) . A common workaround is to use GRE over IPsec, or VTI.

ASA supports neither of mentioned methods. It can however do IPsec for GRE flows terminating on other devices.

Marcin