PDA

View Full Version : Equipment supporting multicast routing ?




cube
Jul 18, 2012, 11:49 AM
The firewall I bought is FAIL. It does not support multicast routing between subnets.

Ideally, what I want is a small firewall with around 8 gigabit ports and DMZ.

If I can't find something like that, then I'll have to see how to fit a small gigabit firewall with DMZ and a small gigabit switch with around 8 ports.

Anything that qualifies?

Thanks



aarond12
Jul 19, 2012, 09:04 AM
Since no one responded since yesterday, I'd say your best bet is your own suggestion: Run a switch behind your router for your intra-subnet network activity. Routing multicast is a nasty thing and a potential security risk, which is why most routers filter that out.

cube
Jul 19, 2012, 09:36 AM
Since no one responded since yesterday, I'd say your best bet is your own suggestion: Run a switch behind your router for your intra-subnet network activity. Routing multicast is a nasty thing and a potential security risk, which is why most routers filter that out.

That doesn't solve routing multicast between the LAN and the private DMZ.

I don't need multicast to cross over to the WAN.

There are products with multicast routing capability (not just passthrough to the WAN which I don't want).

dampfdruck
Jul 19, 2012, 08:32 PM
Juniper SRX 220. Not that easy to configure, though.
http://www.juniper.net/as/en/products-services/security/srx-series/srx220/

cube
Jul 20, 2012, 04:38 PM
Juniper SRX 220. Not that easy to configure, though.
http://www.juniper.net/as/en/products-services/security/srx-series/srx220/

Yes, from what I saw Juniper seemed to have this capability, but the 220 is too big and the smaller ones are not gigabit.