For details on cookie usage on our site, read our Privacy Policy
Multicast over IPSEC between 2 PA devices
- LIVEcommunity
- Discussions
- General Topics
- Multicast over IPSEC between 2 PA devices
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Multicast over IPSEC between 2 PA devices
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-05-2015 05:03 AM
PanOS Admin manual says multicast over ipsec is fully supported between PA devices. I just cant figure out how to configure it properly. I can get the receivers to show up on PIM, and I can see traffic going thru to the receiving side PA, but not forwarded from there.
Here is our wanted setup. Because our ISP won't allow multicast traffic through it's MPLS network, we have to tunnel it somehow.
I have set PA1 as Static RP on Ethernet1.32 and configured PA2 to use it. Security rules for multicast traffic are currently set to allow any->multicast. Both PA's have IGMP and PIM enabled on tunnel.1 and internal Ethernet interfaces. I believe the solution lies in configuring the routes properly, but I can't figure it out and can't find any guides for this setup.
- Labels:
-
Configuration
-
Networking
- Device Block List for GlobalProtect - where is it in v10.x? in GlobalProtect Discussions
- Global Protect Virtual adapter not installed on ARM64 win 11 device in GlobalProtect Discussions
- Device Certificate: can't replace old device cert by putting in newly generated OTP in General Topics
- OOM-Killer on 8.1 Trail (PA-5050 device) in General Topics
- SSO with macOS devices in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
