• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2819
  • Last Modified:

Cannot multicast through Cisco ASA VPN tunnel

I recently replaced a SonicWALL PRO 3060 with a Cisco ASA 5510, and I'm having problems with my VPN tunnels and RIP routing.  My remote sites have SonicWALL TZ170s, and I could have them send RIP v2 multicasts across the VPN connections back to the PRO 3060.  Now that I've replaced the 3060 with the ASA, these multicasts aren't passing through the firewall.  I've read somewhere that ASA don't pass multicasts/broadcasts through VPN tunnels, but haven't been able to find out why or if there is a work-around.

My network looks like this:

(inside network) --- --- (inside router) --- --- (Cisco ASA) --- Internet --- (remote SonicWALL TZ170) --- 192.168.x.0/24 --- (remote network)

The inside network where my ASA is located has an internal router, but the remote network has no router, just the firewall.

Some of the work-arounds I've seen involve firewalls and inside routers on both ends, but that obviously won't work in my situation.

Is there any simple way to get the ASA to accept RIP v2 multicasts (or v1 broadcasts) through the VPN?  Thanks.
  • 2
1 Solution
If there is only one network at the remote end, why do you need dynamic routing since your ASA has to be specifically configured with the tunnel information anyway?
You can use reverse route injection and OSPF between the ASA and the internal router to distribute the vpn tunnel routes to the inside router if that is what you need to do.
1griffith1Author Commented:
RRI looks like what I'm looking for.  Never used it before, but it's doing what I want in a test environment.

One other thing... do you know if a Cisco PIX 506e can also do RRI?  
Unfortunately, the 506 cannot do RRI. This is a feature that Cisco put into the ASA/PIX 7.x in their attempt to combine best of the VPN3000 concentrator and the PIX FW. Glad it's working in the lab..


Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now