O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

20.14. Scale Multicast Replication

Problem

You need to replicate multicast traffic coming out of the firewall to multiple downstream interfaces.

Solution

Use multiple VRs and virtual local area networks (VLANs) to move the replication point to the upstream router. First, set up the vrouters, zones, and interfaces:

	FIREWALL-A-> set vrouter name vlan10-vr
	FIREWALL-A-> set vrouter name vlan20-vr
	FIREWALL-A-> set zone name trust-10
	FIREWALL-A-> set zone name untrust-10
	FIREWALL-A-> set zone name trust-20
	FIREWALL-A-> set zone name untrust-20
	FIREWALL-A-> set zone trust-10 vrouter vlan10-vr
	FIREWALL-A-> set zone trust-20 vrouter vlan20-vr
	FIREWALL-A-> set zone untrust-10 vrouter vlan10-vr

	FIREWALL-A-> set zone untrust-20 vrouter vlan20-vr
	FIREWALL-A-> set int eth0/0.10 tag 10 zone untrust-10
	FIREWALL-A-> set int eth0/0.20 tag 20 zone untrust-20
	FIREWALL-A-> set int bgroup0.20 tag 20 zone trust-20
	FIREWALL-A-> set int bgroup0.10 tag 10 zone trust-10
	FIREWALL-A(M)-> set int eth0/0.10 tag 10 zone untrust-10
	FIREWALL-A(M)-> set int eth0/0.20 tag 20 zone untrust-20
	FIREWALL-A(M)-> set int bgroup0.20 tag 20 zone trust-20
	FIREWALL-A(M)->set int bgroup0.10 tag 10 zone trust-10

Next, create access lists for RP mapping and multicast group policy, and enable PIM in the new VRs:

	FIREWALL-A-> set vrouter vlan10-vr
	FIREWALL-A(vlan10-vr)-> set access-list 10 permit ip 224.0.0.0/4 10
	FIREWALL-A(vlan10-vr)-> set route 10.0.6.1/32 int eth0/0.10 gateway
	    10.10.10.254
	FIREWALL-A(vlan10-vr)-> set protocol pim ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required