Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

The PIX/ASA be configured in order to pass multicast traffic


PIX Firewall Software version 6.2 and higher enables you to statically configure multicast routes or use an Internet Group Management Protocol (IGMP) helper address to forward IGMP reports and leave announcements.

This is the multicast support available in this release:

  • Access list filters can be applied in order to multicast traffic to permit or deny specific protocols and ports.

  • Network Address Translation (NAT) and Port Address Translation (PAT) can be performed on the multicast packet source addresses only.

  • Multicast data packets with destination addresses in the address range are not forwarded. But, everything else in the address range is forwarded.

  • IGMP packets for address groups within the range are not forwarded because these addresses are reserved for protocol use.

  • NAT is not performed on IGMP packets. When IGMP forwarding is configured, the PIX Firewall forwards the IGMP packets (report and leave) with the IP address of the helper interface as the source IP address.

Refer to these documents for more information:

Version history
Revision #:
1 of 1
Last update:
‎06-22-2009 04:10 PM
Updated by:
Labels (1)