I'm currently trying to work through an L2TP over IPSec remote access setup using a Cisco ASA 5520. I'm able to successfully connect Windows 2000/XP clients, and various Linux distro clients. What I am having difficulty performing is the tunneling of multicast traffic (in the range of 239.0.0.0 to 239.255.255.255 for example). Multicast traffic does not flow down the established tunnel, but follows its physical interface connection instead.
Any thoughts?
In routers you can use GRE tunnels over IPSEC to accomplish this. You could create a GRE tunnel (GRE tunnel use unicast), this allow you to encapsulate multicast packet into a unicast packet. However the PIX, IMHO, does not support the encrypting of multicast packets. So in this situation I do not think your solution will work.
Just my opinion....
HTH
Have something to add? Share your thoughts — no account required.
Ask the community — no account required