Differences
This shows you the differences between two versions of the page.
|
network:multicast [2010/11/17 16:21] tibor created |
network:multicast [2010/11/17 16:43] (current) tibor |
||
|---|---|---|---|
| Line 14: | Line 14: | ||
| ===== IGMP Proxy ===== | ===== IGMP Proxy ===== | ||
| - | Multicast transmissions are usually controlled using IGMP (Internet Group Management Protocol). The Internet Gate has an IGMP proxy to control the way IGMP and multicast packets are allowed through the firewall. [[wp>IGMP]] | + | Multicast transmissions are usually controlled using IGMP (Internet Group Management Protocol). The Internet Gate has an IGMP proxy to control the way IGMP and multicast packets are allowed through the firewall. Internet Gate supports the IGMPv2 protocol. [[wp>IGMP]] |
| IGMP and multicast packets are by default blocked by the Internet Gate firewall at Hi security level, and allowed through at Lo security level. You can change this configuration on the [[web GUI:Security Profile]] page. | IGMP and multicast packets are by default blocked by the Internet Gate firewall at Hi security level, and allowed through at Lo security level. You can change this configuration on the [[web GUI:Security Profile]] page. | ||
| Line 28: | Line 28: | ||
| Multicast packets requested by multiple clients on the LAN are still sent using link layer multicast, to ensure they reach all clients. | Multicast packets requested by multiple clients on the LAN are still sent using link layer multicast, to ensure they reach all clients. | ||
| + | ==== Configuration ==== | ||
| + | The [[web GUI:Security profile]] page has two fields controlling IGMP/multicast: | ||
| + | |||
| + | ^ Applications from inside\\ IGMP/Multicast ^ General settings\\ IGMP/Multicast proxy ^ Resulting behaviour ^ | ||
| + | | | | No IGMP nor multicast packets allowed through the firewall | | ||
| + | | | x | No IGMP nor multicast packets allowed through the firewall | | ||
| + | | x | | All IGMP and multicast packets allowed through the firewall without any changes | | ||
| + | | x | x | Only valid IGMP and multicast packets (actually requested by clients on the LAN) are allowed through the firewall, link layer unicast to single LAN client, multiple IGMP clients support. | | ||
| + | |||
| + | If you have multiple WAN interfaces you select which WAN interface to receive multicast data streams from on the [[web GUI:Extra WAN interfaces]] page. Read more about [[network:extrawan#IGMP proxy|how IGMP proxy uses extra WAN interfaces]]. | ||
| + | |||
| + | ==== Logging ==== | ||
| + | Multicast packets are by default //not// included into the [[web GUI:firewall log page|firewall log]], as the amount of data multicasted usually is so much it would clog the firewall log down. You can however turn on logging of multicast packets by enabling **Log UDP multicast packets** under **Firewall Log** on the [[web GUI:Log Configuration page]]. (You must of course also set Firewall Log to other than off on that same page too, to start logging packets.) | ||
