Multicast Routing Protocol on IP appliances

Support Center > Search Results > SecureKnowledge Details

Multicast Routing Protocol on IP appliances - FAQ

Solution ID	sk40632
Product	IPSO
Version	4.2
OS	IPSO 4.x
Platform / Model	IP Series
Date Created	14-Apr-2009
Last Modified	15-Jun-2013

Solution

Show All

This article discusses Multicast routing protocols such as DVMRP, PIM-SM, PIM-DM and how to configure them in conjunction with Check Point Security Gateways on IP Appliance Platforms.

Can I run DVMRP (Distance Vector Multicast Routing Protocol) and PIM (Protocol Independent Multicast) at the same time?

Only one multicast routing protocol can be used for multicast packets on the Nokia Appliance.

What changes need to be made to allow Multicast Routing to work with a Check Point Security Gateway?

Use modzap for IPSO 3.x and 4.x to make the following change:
nokia[admin]# modzap _fw_allow_unknown_if $FWDIR/boot/modules/fwmod.o 0x1

(Will change _fw_allow_unknown_if at offset 0xac09c from 0x00000000 to 0x00000001)

Please explain why my Nokia IP Appliance will not route Multicast Packets?

Refer to sk38790: Please explain why my Nokia IP Appliance will not route Multicast Packets?.

Are Multicast Packets "flowed" by Firewall Flows or SecureXL?

No they are not.

How to prevent multicast packets from being dropped by Check Point Security Gateway anti-spoofing rules?

Refer to sk41360: How to prevent multicast packets from being dropped by VPN-1/FireWall-1 anti-spoofing rules?.

How does multicast behave in a High-Availability Configuration?

Refer to:

PIM-DM and PIM-SM Failover Behaviour in a High-Availability Configuration

PIM-DM and PIM-SM Failover Behaviour In a High-Availability Configuration (Word Doc)

DVMRP Failover Behavior in a High-Availability Configuration

Does VRRP support High Availability Failover for Multicast Traffic?

Refer to sk40367: Does VRRP (Virtual Router Redundancy Protocol) support High Availability Failover for Multicast Traffic?.

Why is there temporary suppression of multicast data traffic if a source has been silent for some period of time?

Refer to sk40228: Why is there temporary suppression of multicast data traffic if a source has been silent for some period of time?.

How do I prevent an IPSO platform from becoming the designated router (DR) during the PIM DR election?

Refer to sk39907: How do I prevent an IPSO platform from becoming the DR during the PIM DR election?.

Are there any interoperability issues with Cisco Routers using PIM?

Refer to sk39919: Interoperability issue with non-standard PIM Sparse Mode bootstrap messages from Cisco routers.

What settings do we support for DVMRP (Distance Vector Multicast Routing Protocol)?

Refer to sk38991: What settings do we support for DVMRP (Distance Vector Multicast Routing Protocol)?.

What is the meaning of [LOG_WARNING] ipsrd[237]: PIM CRP: no elected bsr to send crp advertisement?

Refer to sk38695: [LOG_WARNING] ipsrd[237]: PIM CRP: no elected bsr to send crp advertisement.

What is the meaning of [LOG_WARNING] ipsrd[205]: dvmrp_recv_prune: duplicate prune from 192.168.1.255 for (239.255.255.49, 192.168)/48, time remaining 900 seconds?

Refer to sk38568: ipsrd[205]: dvmrp_recv_prune: duplicate prune from xx for (yy, zz)/aa, time remaining bb sec.

Imported from Nokia support database

This solution is about products that are no longer supported and it will not be updated

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating

THREAT INTELLIGENCE

UNDER ATTACK?

RISK ASSESSMENT

Chat

Phone

Locations

Community

SOLUTIONS FOR...

PRODUCT ARCHITECTURE

PRODUCTS

NEXT GENERATION THREAT PREVENTION

MOBILE SECURITY

ENDPOINT SECURITY

NEXT GENERATION FIREWALLS

SECURITY MANAGEMENT

INDUSTRIES

ARCHITECTURE

SUPPORT CENTER

SUPPORT PROGRAMS

SECURITY SERVICES

KNOWLEDGE AND EDUCATION

PROFESSIONAL SERVICES

CHANNEL PARTNERS

TECHNOLOGY PARTNERS

PARTNER PORTAL

COMPANY OVERVIEW

NEWS & MEDIA

EVENTS

CAREERS