D-Link DFL-210 - NetDefend - Security Appliance, User Manual

Page: 159 / 469

1. Go to Objects > Services > Add > TCP/UDP
2. Now enter:
• Name: multicast_service
• Type: UDP
• Destination: 1234
B. Create an IP rule:
1. Go to Rules > IP Rules > Add > IP Rule
2. Under General enter.
• Name: a name for the rule, for example Multicast_Multiplex
• Action: Multiplex SAT
• Service: multicast_service
3. Under Address Filter enter:
• Source Interface: wan
• Source Network: 192.168.10.1
• Destination Interface: core
• Destination Network: 239.192.10.0/24
4. Click the Multiplex SAT tab
5. Add interface if1 but leave the IPAddress empty
6. Add interface if2 but this time, enter 237.192.10.0 as the IPAddress
7. Make sure the Forwarded using IGMP checkbox is enabled
8. Click OK
Note: Replace the Allow rule with a NAT rule for source IP
translation
If address translation of the source address is required, the Allow rule following the
SAT Multiplex rule should be replaced with a NAT rule.
4.6.3. IGMP Configuration
IGMP signalling between hosts and routers can be divided into two categories:
IGMP Reports Reports are sent from hosts towards the router when a host wants to subscribe
to new multicast groups or change current multicast subscriptions.
IGMP Queries Queries are IGMP messages sent from the router towards the hosts in order to
make sure that it will not close any stream that some host still wants to receive.
Normally, both these types of rules has to be specified for IGMP to work. One exception to this is if
the multicast source is located on a network directly connected to the router. In this case, no query
rule is needed.
A second exception is if a neighboring router is statically configured to deliver a multicast stream to
the D-Link Firewall. In this case also, an IGMP query would not have to be specified.
NetDefendOS supports two IGMP modes of operation - Snoop and Proxy.
4.6.3. IGMP Configuration Chapter 4. Routing
159