[AG-TECH] PIM through PIX

[Claus Endres]

Hi,

We are trying to run personal AccessGrid nodes through a Cisco PIX
firewall, and don't have much success.

The topology is:


+--------+ IGMP +------------+ PIM +-----+ PIM +-------+ PIM +-------+
| AGnode +------+ C6500 MSFC +-----+ PIX +-----+ C3750 +-----+ C3750 +--
+--------+      +------------+     +-----+     +-------+     +-------+
                                                              RP

The firewall is running version 7.0(2) software, using NAT.

The Catalyst6500 receives IGMP membership reports from the AG node, and
sends corresponding PIM joins to the PIX. The PIX never passes the
PIM joins to the Catalyst 3750, so the AG node never receives the video
and audio streams.

Does anybody have a configuration like this successfully passing
multicast traffic?

Any suggestions about configuration parameters or software revisions
would be greatly appreciated.

A similar config, using IGMP proxy in the PIX (Version 6.3) and IGMP
snooping in the internal network, works successfully, but only within
a layer 2 internal net.

Regards,
Claus.
-- 
--------------------------------------------------------
Claus Endres                | Phone:  +61-3-5998 2310
Endres Consulting Pty. Ltd. | Mobile: +61-418-595 136
10 Facey Road               | Fax:    +61-3-5998 2540
Devon Meadows, VIC 3977     | claus at endresconsulting.co