Define static multicast

You can configure static routes for multicast traffic between a source IP address and firewall interface pair and a destination (multicast) IP address and firewall interface pair.

Note: Make sure your IPv4 Access rules allow the static multicast traffic to pass through the firewall.

For more details about the product and how to configure features, click Help or press F1.

Steps

Right-click an NGFW Engine, then select Edit <element type>.
Browse to Routing > Multicast Routing.
Select Static as the Multicast Routing Mode.
Click Add.
Configure the values for the entry.
Click Save and Refresh to transfer the changed configuration.

Engine Editor > Routing > Multicast Routing

Use this branch to define static multicast, IGMP-based multicast forwarding, or PIM dynamic routing. Only IPv4 addresses are supported.

Option	Definition
Multicast Routing Mode	Specifies how the NGFW Engine routes multicast traffic. None — Disables multicast routing. Static — Enables options that allow you to add static routes for multicast traffic. IGMP Proxy — Enables options that allow you to use the NGFW Engine for IGMP-based multicast forwarding. PIM — Enables options that allow you to use the NGFW Engine for dynamic routing using PIM.

Option	Definition
When Multicast Routing Mode is Static Click Add to add a row to the table, or Remove to remove the selected row.
Source Interface	Select the interface to use for multicast routing.
Source IP Address	Enter the unicast IP address of the multicast source.
Destination IP Address	Enter the multicast destination IP address. The destination address must be within the multicast range of 224.0.0.0 to 239.255.255.255.
Destination Interface	Right-click Destination Interface, then select Edit Destination Interface to select the interfaces where you want this multicast traffic forwarded.
Comment (Optional)	A comment for your own reference.

Option	Definition
When Multicast Routing Mode is IGMP Proxy
Upstream Interface	Select the interface to use as the upstream interface. If the multicast servers and the hosts are in the local networks, or if you want to limit the multicast to the local networks, it is not necessary to define the upstream interface. In that case, leave Not Set selected.
Upstream IGMP Version	Select the IGMP version according to the upstream network environment. The default IGMP version is version 3.
Downstream Interfaces table Click Add to add a row to the table, or Remove to remove the selected row.
Interface	Select the downstream interfaces.
IGMP Querier Settings	Select an IGMP Querier Settings element according to the downstream network environment. The element defines the IGMP version and query parameters.

Option	Definition
When Multicast Routing Mode is PIM
PIM Profile	Select a PIM Profile to use. The profile contains the multicast groups and determines the PIM mode that is used.
Multicast Routing Preference	Note: This option is not supported in this version of Forcepoint NGFW. The routing table is used to specify reverse path forwarding (RPF) information whenever multicast traffic from source addresses uses a different path than unicast traffic from the same source address. Prefer Best Match — The RPF lookup prefers the best match based on both the default routing table and the Multicast routing (mroute) table. Prefer mroute — The RPF lookup uses the mroute table. If the mroute table cannot be used, the default routing table is used.
Bootstrap Settings — see RFC 5059 for more information.
RP Candidate	If you want to use the firewall as a rendezvous point (RP) candidate, select an IP address. Otherwise, select Not a Candidate.
RP Priority	Enter a value for the RP priority.
Multicast Groups	Add the multicast IPv4 networks for which the firewall acts as an RP candidate. Click Add to add a row to the table, or Remove to remove the selected row.
BSR Candidate	If you want to use the firewall as a bootstrap router (BSR) candidate, select an IP address. Otherwise, select Not a Candidate.
BSR Priority	Enter a value for the BSR priority.