A. Create a custom Service object for multicast:
1.
Go to: Objects > Services > Add > TCP/UDP
2.
Now enter:
•
Name: my_multicast_service
•
Type: UDP
•
Destination: 1234
B. Create an IP Rule object:
1.
Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2.
Now enter:
•
Name: my_multicast_rule
•
Action: Multiplex SAT
•
Source Interface: wan
•
Source Network: 192.168.10.1
•
Destination Interface: core
•
Destination Network: 239.192.10.0/24
•
Service: my_multicast_service
3.
Click the Multiplex SAT tab and add one entry each for the output interfaces if1, if2 and if3.
For each interface, leave the IPAddress field blank since no destination address translation
is required.
4.
Enable the option:
Multicast traffic must have been requested using IGMP before it is forwarded
5.
Click OK
Creating Multiplex Rules with the CLI
Creating multiplex rules through the CLI requires some additional explanation.
The CLI command to create the multiplex rule is then:
gw-world:/> add IPRule
SourceNetwork=<srcnet>
SourceInterface=<srcif>
DestinationInterface=<srcif>
DestinationNetwork=<destnet>
Action=MultiplexSAT
Service=<service>
MultiplexArgument={outif1;ip1},{outif2;ip2},{outif3;ip3}...
The two values {outif;ip} represent a combination of output interface and, if address translation of
a group is needed, an IP address.
364
Chapter 4: Routing