Customers hope to achieve the internal network multicast server can provide services and hidden server’s own IP address.
Key configuration is as follows:
1, transparent mode
[USG5300]firewall unknown-mac multicast flood
2, routing mode
[USG5300]multicast interface-set set-name
//Create static multicast interface set, and enter the corresponding view
[USG5300]add interface interface-type interface-number
//Configure the subordinate interface of static multicast interface set, a static multicast interface set can contain multiple interfaces for forwarding the static multicast message. The interface which is added to static multicast interface set can be Ethernet interface, also can be gigabit Ethernet interface. The subordinate interface of static multicast interface set includes the outbound and inbound interface of the multicast message.
[USG5300] multicast route-table static source 10.1.1.2 group 22.214.171.124 in-interface GigabitEthernet 1/0/0 interface-set a1 newsource 126.96.36.199
// Create static multicast routing entry
188.8.131.52 can be used as the user’s multicast address, namely temporary multicast address, which is effective in the network-wide security. Multicast address can be replaced with any one IP address in 184.108.40.206~220.127.116.11 and 18.104.22.168~22.214.171.124.
According to the network topology, the customer need to configure multicast transparent function in the USG5300, there are two realization methods:
1. Configure the USG5300 to transparent mode to realize multicast transparent.
2. Configure the USG5300 to routing mode to realize multicast transparent.