Multicast Forwarding - Address Translation - D-Link NetDefend DFL-210 User Manual

Network security firewall ver 2.26.01
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

4.6.2. Multicast Forwarding with SAT
Multiplex Rules
gw-world:/> cc IPRuleset main
The CLI command to create the multiplex rule is then:
add IPRule SourceNetwork=<srcnet> SourceInterface=<srcif>
DestinationInterface=<srcif> DestinationNetwork=<destnet>
Action=MultiplexSAT Service=<service>
MultiplexArgument={outif1;ip1},{outif2;ip2},{outif3;ip3}...
The two values {outif;ip} represent a combination of output interface and, if address translation of a
group is needed, an IP address.
If, for example, multiplexing of the multicast group 239.192.100.50 is required to the output
interfaces if2 and if3, then the command to create the rule would be:
add IPRule SourceNetwork=<srcnet> SourceInterface=<if1>
DestinationInterface=core DestinationNetwork=239.192.100.50
Action=MultiplexSAT Service=<service>
MultiplexArgument={if2;},{if3;}
The destination interface is core since 239.192.100.50 is a multicast group. No address translation
of 239.192.100.50 was added but if it is required for, say, if2 then the final argument would be:
MultiplexArgument={if2;<new_ip_address>},{if3;}
4.6.2.2. Multicast Forwarding - Address Translation Scenario
Figure 4.10. Multicast Forwarding - Address Translation
This scenario is based on the previous scenario but now we are going to translate the multicast
group. When the multicast streams 239.192.10.0/24 are forwarded through the if2 interface, the
multicast groups should be translated into 237.192.10.0/24. No address translation should be made
when forwarding through interface if1. The configuration of the corresponding IGMP rules can be
found below in Section 4.6.3.2, "IGMP Rules Configuration - Address Translation".
168
Chapter 4. Routing

Advertisement

Table of Contents
loading

Table of Contents