EasyManuals Logo

Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

Cisco 5510 - ASA SSL / IPsec VPN Edition
1822 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #459 background imageLoading...
Page #459 background image
24-9
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 24 Configuring Multicast Routing
Customizing Multicast Routing
Step 4 Click OK.
Modifying the Query Messages to Multicast Groups
The adaptive security appliance sends query messages to discover which multicast groups have members
on the networks attached to the interfaces. Members respond with IGMP report messages indicating that
they want to receive multicast packets for specific groups. Query messages are addressed to the
all-systems multicast group, which has an address of 224.0.0.1, with a time-to-live value of 1.
These messages are sent periodically to refresh the membership information stored on the adaptive
security appliance. If the adaptive security appliance discovers that there are no local members of a
multicast group still attached to an interface, it stops forwarding multicast packet for that group to the
attached network and it sends a prune message back to the source of the packets.
By default, the PIM designated router on the subnet is responsible for sending the query messages. By
default, they are sent once every 125 seconds.
When changing the query response time, by default, the maximum query response time advertised in
IGMP queries is 10 seconds. If the adaptive security appliance does not receive a response to a host query
within this amount of time, it deletes the group.
To change the query interval, query response time, and query timeout value, perform the following steps:
Step 1 In the main ASDM window, choose Configuration > Device Setup > Routing > Multicast > IGMP >
Protocol.
Step 2 Choose the interface you want to limit from the table on the Protocol pane, and click Edit.
The Configure IGMP Parameters dialog box appears.
Step 3 In the Query Interval field, enter the interval, in seconds, at which the designated router sends IGMP
host-query messages. Valid values range from 1 to 3600 seconds. The default value is 125 seconds.
If the adaptive security appliance does not hear a query message on an interface for the specified
timeout value, then the adaptive security appliance becomes the designated router and starts sending
the query messages.
Step 4 In the Query Timeout field, enter the period of time, in seconds, before which the adaptive security
appliance takes over as the requester for the interface after the previous requester has stopped doing so.
Valid values range from 60 to 300 seconds. The default value is 255 seconds.
Step 5 Click OK.
Changing the IGMP Version
By default, the adaptive security appliance runs IGMP Version 2, which enables several additional
features.
All multicast routers on a subnet must support the same version of IGMP. The adaptive security
appliance does not automatically detect version 1 routers and switch to version 1. However, a mix of
IGMP Version 1 and 2 hosts on the subnet works; the adaptive security appliance running IGMP Version
2 works correctly when IGMP Version 1 hosts are present.
To control which version of IGMP is running on an interface,perform the following steps:

Table of Contents

Other manuals for Cisco 5510 - ASA SSL / IPsec VPN Edition

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco 5510 - ASA SSL / IPsec VPN Edition and is the answer not in the manual?

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General IconGeneral
BrandCisco
Model5510 - ASA SSL / IPsec VPN Edition
CategoryFirewall
LanguageEnglish

Related product manuals