Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 405 / 861

404 Providing remote access using VPN tunnels
Multicast traffic through gateway-to-gateway IPsec tunnels
How multicast traffic passes through a gateway-to-gateway IPsec tunnel
Figure 10-5 shows how multicast traffic can pass between Host 1, 2, and 3. To pass multicast traffic,
you need to turn on multicast support.
Additionally, for the gateway-to-gateway IPsec tunnel you need to:
■
Configure multicast support.
■
Create tunnels between Security gateway 1 and Security gateway 2. See Figure 10-5 to understand
how to configure these special multicast tunnels.
Figure 10-5 Multicast in an IPsec tunnel through the Internet
Example multicast gateway-to-gateway IPsec tunnel configuration
In addition to the following instructions, be familiar with the general instructions for configuring a
gateway-to-gateway IPsec tunnel.
A special tunnel configuration is required to pass multicast traffic over an IPsec gateway-to-gateway
tunnel. This tunnel must have specific tunnel endpoints. Use the example outlined below to
understand how to construct this special tunnel.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Configuring multicast support for a gateway-to-gateway IPsec tunnel” on page 406
■
“Manually configuring a gateway-to-gateway VPN tunnel” on page 393
Host 1
Host 2
Host 3
eth0
eth1
eth0
eth1
10.10.10.1
10.10.20.1
Security gateway 1
Security gateway 2