The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Security Gateway with PIM Sparse-Mode registers multicast traffic for non-local subnets
Technical Level
Solution ID
sk115852
Technical Level
Product
Quantum Security Gateways
Version
R77.20 (EOL), R77.30 (EOL), R80.10 (EOL)
OS
Gaia
Platform / Model
All
Date Created
14-Feb-2017
Last Modified
18-Jun-2017
Symptoms
Output of the Gaia Clish command "show pim joins" shows that the Security Gateway registers the multicast source even if the Multicast Source does not match the Security Gateway's interfaces subnets.
Output of the Expert mode command "ip mroute" shows in the list of outbound interfaces "Oifs" both "pimreg0" and the physical interface facing the Multicast client.
Example:
[Expert@HostName:0]# ip mroute
(<Multicast_Source>, <Multicast_Group>) Iif: Eth-<x> Oifs: pimreg0 Eth-<y>
If the Rendezvous Point replies with a "register-stop", then the Security Gateway will continue sending "null-register" messages to the Rendezvous Point every 60 seconds.
Cause
The Security Gateway does not check whether the Multicast Source is a local subnet before registering the Multicast Group to the Rendezvous Point.