PIX multicast problem

[jmprats]

Hi, I'm sending a multicast stream from a pix dmz. I have no problem to receive the stream from more secure interfaces, but i can't receive it from less secure ones.

I have enabled multicast-routing

I have reviwed the syslog (there are no errors)

I have enabled pim and igmp on each interface

If i change the security-level of that interface then the multicast traffic works

Anybody know if i have to do anything else?

Thanks

[sundar.palaniappan]

Is your multicast traffic permitted in the ACL applied on the low security interfaces?

[jmprats]

Yes, I have tried with "permit ip any any" and it doesn't work

I had the same problem with unicast traffic and i resolved it deleting the "inspect rtsp", but the multicast packets are not received by the client yet. There are multicast packets passing the pix, but it looks like the pix filters this traffic and the client don't understand it.

I broadcast with Windows Media with protocol MMS

[sundar.palaniappan]

You need to create an IGMP ACL and apply it under the DMZ interface.

Here's a sample config to allow IGMP access for multicast group 224.10.10.1

PXI(config)# access-list 10 permit igmp any 224.10.10.1 255.255.255.255

PIX(config)# multicast interface dmz

PIX(config-multicast)# igmp access-group 10

Hope this helps!

[jmprats]

Finally, the problem was the multicast IP address. With a 239.192.0.0 it doesn't work. With a 239.255.0.0 it works. I don't understand why

Does anybody know it?