Forwarding Of Multicast Traffic Using The Sat Multiplex Rule - D-Link NetDefend DFL-210 User Manual

Network security firewall ver 2.26.01
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

4.6.2. Multicast Forwarding with SAT
Multiplex Rules
Example 4.9. Forwarding of Multicast Traffic using the SAT Multiplex Rule
In this example, we will create a multiplex rule in order to forward the multicast groups 239.192.10.0/24:1234 to
the interfaces if1, if2 and if3. All groups have the same sender 192.168.10.1 which is located somewhere behind
the wan interface.
The multicast groups should only be forwarded to the out interfaces if clients behind those interfaces have
requested the groups using IGMP. The following steps need to be executed to configure the actual forwarding of
the multicast traffic. IGMP has to be configured separately.
Web Interface
A. Create a custom service for multicast called multicast_service:
1.
Go to Objects > Services > Add > TCP/UDP
2.
Now enter:
Name: multicast_service
Type: UDP
Destination: 1234
B. Create an IP rule:
1.
Go to Rules > IP Rules > Add > IP Rule
2.
Under General enter.
Name: a name for the rule, for example Multicast_Multiplex
Action: Multiplex SAT
Service: multicast_service
3.
Under Address Filter enter:
Source Interface: wan
Source Network: 192.168.10.1
Destination Interface: core
Destination Network: 239.192.10.0/24
4.
Click the Multiplex SAT tab and add the output interfaces if1, if2 and if3 one at a time. For each interface,
leave the IPAddress field blank since no destination address translation is wanted.
5.
Make sure the forwarded using IGMP checkbox is set
6.
Click OK
Creating Multiplex Rules with the CLI
Creating multiplex rules through the CLI requires some additional explanation.
First, the IPRuleset, in this example main, needs to be selected as the current category:
Note: SAT Multiplex rules must have a matching Allow rule
Remember to add an Allow rule that matches the SAT Multiplex rule.
The matching rule could also be a NAT rule for source address translation (see below)
but cannot be a FwdFast or SAT rule.
167
Chapter 4. Routing

Advertisement

Table of Contents
loading

Table of Contents