Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Multicast between Cisco and Fortigate
Hi,
I’m trying to get Multicast between a Layer 3 Cisco switch that has Dense-Sparce mode turned on with its VLANS, and a fortigate that has Dense-mode turned on, to work.
If I hook a computer directly up to the Cisco switch, it can join multicast groups, but if I hook up the Fortigate to it, the Fortigate does not see any PIM neighbors.
The Subnets and IPs are correct, and if I switch the Cisco out for another Fortigate, PIM works.
Anyone else experience anything like this? It almost seems like PIM is turned off on the Cisco but IGMP is working..
3 REPLIES 3
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Do you have a topo of your layout?
To confirm neighborship
" show ip pim neigh" & " show ip pim int " on a cisco would easily identify if the FGT is enabled with pim and what version.
It almost seems like PIM is turned off on the Cisco but IGMP is working..I highly doubt a cisco router will have igmp enable on a interface without pim. Newer iso code, does allow the disabling of ip pim on a interface tho, but once again, those 2 above commands will shed more light on the mcast issues.
PCNSE
NSE
StrongSwan
PCNSE
NSE
StrongSwan
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok ill have the admin of the Cisco box try that.
But I' m guessing he will run it, and it will show no neighbors but PIM will be turned on.
as for the Topology the fortinet on a /29 subnet at .62 and the cisco switch gateway is .57
If that happens what would be the next step to take?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The next steps;
Is pim enabled on the fortigate & interfaces
Can you conduct a mtrace from the sender to the source
Do you have the appropiate fwpolicies-mcast in place
Have you conducted any debug diag ( could have done to validate pim btw 224.0.0.13 ) and look at the intervals/hellos and queries ( igmp )
Does the router has the correct entries ( static/dynamic or mrouted )
Does the sender/receiver have the correct TTL and no ttl-boundaries
what does both the cisco and fgt shows for mcast route table if any
e.g
show ip mroute
get router info multicast pim
Bottom line, we can' t do the work for you on he information you posted.
PCNSE
NSE
StrongSwan
PCNSE
NSE
StrongSwan
