53-9
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter5 3 Configuring Multicast Policies on Firewall Devices
Configuring Multicast Boundary Filters
Field Reference
Configuring Multicast Boundary Filters
On an ASA running version 7.2(1) or later, you can use the Multicast Boundary Filter page to configure
the appliance to act as a boundary between multicast domains. The ASA compares multicast group
addresses to an access list, blocking all multicast traffic except that specifically permitted by the list.
The Multicast Boundary Filter page lists all currently defined per-interface boundary filter lists; you can
add, edit and delete filter lists from this page.
Refer to Add/Edit MBoundary Configuration Dialog Box, page 53-9 for a description of the fields on
this page.
Navigation Path
•(Device view) Select Platform > Multicast > Multicast Boundary Filter from the Device Policy
selector.
•(Policy view) Select PIX/ASA/FWSM Platform > Multicast > Multicast Boundary Filter from
the Policy Type selector. Select an existing policy from the Shared Policy selector, or create a new
one.
Related Topics
•Add/Edit MBoundary Interface Configuration Dialog Box, page53-10

Add/Edit MBoundary Configuration Dialog Box

Use the Add/Edit MBoundary Configuration dialog box to add, edit and delete multicast boundary filter
lists for individual interfaces.
Table53-8 Add/Edit MRoute Configuration Dialog Box
Element Description
Source Interface Enter or Select the incoming interface for the multicast route.
Source Network Enter the IP address and mask of the multicast source, or select a
Networks/Hosts object.
Output Interface/Dense (Optional) Enter or Select the outgoing interface for the multicast route.
If you specify the destination interface, the route is forwarded through
the selected interface. If you do not specify a destination interface, then
RPF is used to forward the route. You can specify the interface, or the
RPF neighbor, but not both at the same time.
Multicast Network (PIX 6.3) Enter or Select the group that is to receive the multicast packets. This
must be a multicast IP address in the range of 224.0.1.0 to
239.255.255.255.
Distance (PIX 7.x, ASA and
FWSM)
Enter an administrative distance for the static multicast route. If the
static multicast route has the same administrative distance as the
unicast route, the static multicast route takes precedence.