[c-nsp] How to tune multicast RPF checking?

Thomas Kernen thomas at ip-man.net
Fri Nov 26 08:44:14 EST 2004



>
> > Starting with 6.2 you could configure PIX as IGMP proxy so GRE is
> > not needed
>
>  Thank you, I wasn't aware of this feature.
>
>  I tested the IGMP proxy feature with PIX 501 and it seemd to work. At
>  least it is able to transmit Palaces Over The World session and at
>  same time I can download files over http.
>
>  Is there any performance issues when the IGMP proxy feature is
>  enabled? There are some MPEG-2 multicast streams people here like to
>  receive. If there are five of those passing through a PIX 525 what
>  will happen? Will the firewall forward the packets easily? Will it
>  practically die?
>

Matti,

as an FYI I run a 501 at home and receive quite a bit of multicast
content (Internet or internal) with bitrates up to 8-10 Mbps without any
problems, I've done some testing with MPEG-2 HD streams @ 25Mbps but
there are some issues, not sure yet if related to the 501 or other
components in the decoding process on the terminal devices.

Thomas



More information about the cisco-nsp mailing list