Cisco ASA 5505 Configuration Manual page 466

Customizing Multicast Routing
Choose the interface name from the Interface Name drop-down list. Select the interface for which you
Step 3
are configuring the PIM bidirectional neighbor filter ACL entry.
Step 4 From the Action drop-down list, click Permit or Deny for the neighbor filter ACL entry.
Choose Permit to allow the specified devices to participate in the DF election process. Choose Deny to
prevent the specified devices from participating in the DF election process.
Step 5 In the IP Address text field, enter the IP address of the multicast PIM group being permitted or denied.
Valid group addresses are from 224.0.0.0 to 239.255.255.255.255.
From the Netmask drop-down list, choose the netmask for the multicast group address.
Step 6
Step 7 Click OK.
Configuring a Multicast Boundary
Address scoping defines domain boundaries so that domains with RPs that have the same IP address do
not leak into each other. Scoping is performed on the subnet boundaries within large domains and on the
boundaries between the domain and the Internet.
You can set up an administratively scoped boundary on an interface for multicast group addresses
usingConfiguration > Routing > Multicast > MBoundary in ASDM. IANA has designated the
multicast address range 239.0.0.0 to 239.255.255.255 as the administratively scoped addresses. This
range of addresses can be reused in domains administered by different organizations. They would be
considered local, not globally unique.
A standard ACL defines the range of addresses affected. When a boundary is set up, no multicast data
packets are allowed to flow across the boundary from either direction. The boundary allows the same
multicast group address to be reused in different administrative domains.
You can configureexamine, and filter Auto-RP discovery and announcement messages at the
administratively scoped boundary. Any Auto-RP group range announcements from the Auto-RP packets
that are denied by the boundary access control list (ACL) are removed. An Auto-RP group range
announcement is permitted and passed by the boundary only if all addresses in the Auto-RP group range
are permitted by the boundary ACL. If any address is not permitted, the entire group range is filtered and
removed from the Auto-RP message before the Auto-RP message is forwarded.
To configure a multicast boundary, perform the following steps:
In the main ASDM window, choose Configuration > Routing > Multicast > MBoundary.
Step 1
The MBoundary pane lets you configure a multicast boundary for administratively-scoped multicast
addresses. A multicast boundary restricts multicast data packet flows and enables reuse of the same
multicast group address in different administrative domains. When a multicast boundary is defined on
an interface, only the multicast traffic permitted by the filter ACL passes through the interface.
Step 2 Click Edit.
The Edit Boundary Filter dialog box appears and displays the multicast boundary filter ACL. You can
add and remove boundary filter ACL entries using this dialog box.
When the boundary filter configuration is applied to the adaptive security appliance, the ACL appears in
the running configuration with the name interface-name_multicast, where the interface-name is the
name of the interface the multicast boundary filter is applied to. If an ACL with that name already exists,
a number is appended to the name, for example inside_multicast_1.
Cisco ASA 5500 Series Configuration Guide using ASDM
24-16
Chapter 24 Configuring Multicast Routing
OL-20339-01