Convert ScreenOS Multicast static route to PaloAlto

Gianpiero — Mon, 25 Nov 2019 09:25:05 GMT

Hi all,

i'm finally converting an old Juniper ScreenOS firewall to a PaloAlto firewall (5020). I have some problem to understand how to convert some Multicast static Routes.

On screen os i have this specific entry for ex:

GUI:

Type: Static, Forwarding

Source IP: 192.168.100.126

Mgroup: 239.0.0.2

Incoming Interface: eth3/6.3

Outgoing interface: eth3/6.2

cli:

set mroute mgroup 239.0.0.2 source 192.168.100.126 iif ethernet3/6.3 oif ethernet3/6.2

Multicast policy:

Source:12

Destination: empty

Messages: IGMP

Bidirectional: yes

set access-list 12
set access-list 12 permit ip 239.0.0.2/32 10
set access-list 12 permit ip 239.0.0.3/32 20

Can you help me how to configure this on PaloAlto?

Thnxxx a lot

Gianpiero

Re: Convert ScreenOS Multicast static route to PaloAlto

NikhilMohod — Thu, 31 Mar 2022 15:24:39 GMT

Recently we faced a similar scenario where multicast routes need to be converted to Palo Alto format. For Juniper ScreenOS firewall to a PaloAlto firewall (5200) series conversion.

Only relevant article we could find:

How to Facilitate Multicast Routing when only One Palo Alto Net... - Knowledge Base - Palo Alto Networks

Here is cli o/p:
set mroute multiple-iif-enable
set mroute mgroup 200.X.X.X source 0.0.0.0 iif aggregate2 oif aggregate1

Can Palo Alto please reply?

topic Convert ScreenOS Multicast static route to PaloAlto in Custom Signatures

Convert ScreenOS Multicast static route to PaloAlto

Re: Convert ScreenOS Multicast static route to PaloAlto