topic what is the PaloAlto equivalent of Cisco's Auto-RP feature? in General Topics

what is the PaloAlto equivalent of Cisco's Auto-RP feature?

SThatipelly — Fri, 22 Jan 2021 17:10:50 GMT

I am trying to configure multicast but it only works with auto-rp feature. I am wondering the equivalent terms and configurations in Palo's world. has anyone configured it? If so, please provide me your inputs.

Thanks.

Re: what is the PaloAlto equivalent of Cisco's Auto-RP feature?

MP18 — Fri, 22 Jan 2021 17:45:22 GMT

@SThatipelly

As per my info PA does not support

PIM Dense Mode (PIM-DM), IGMP proxy, IGMP static joins, Anycast RP, GRE, or multicast configurations on a Layer 2 or virtual wire interface type.

It only supports Protocol Independent Multicast (PIM) on a Layer 3 interface that you configure for a virtual router on the firewall. For multicast routing, the Layer 3 interface type can be Ethernet, Aggregate Ethernet (AE), VLAN, loopback, or tunnel.

Unless someone correct me here.

Regards

Re: what is the PaloAlto equivalent of Cisco's Auto-RP feature?

SThatipelly — Tue, 26 Jan 2021 18:36:53 GMT

can Palo forward Multicast packets in vwire mode?

Re: what is the PaloAlto equivalent of Cisco's Auto-RP feature?

aleksandar.astardzhiev — Tue, 26 Jan 2021 21:33:47 GMT

Hey @SThatipelly ,

Default behaviour it to forward all multicast traffic in vwire mode - How to Block Multicast Traffic in a VWire (Virtual Wire) Setup - Knowledge Base - Palo Alto Networks

"Multicast traffic is blocked in the Layer-3 mode by default, but is forwarded by default in the Virtual Wire mode."

Re: what is the PaloAlto equivalent of Cisco's Auto-RP feature?

tshooter — Tue, 08 Nov 2022 19:22:41 GMT

Anycast RP is fine for layer 3 virtual router? Or any known issues? WE have issues when adding, removing groups from the Remote RP group list. If we are using a remote RP, do we need to list the groups that are supported on that RP? or is that like an ACL for firewall to only allow those in group list?