[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] How to make a multicast packet to test it passing throughFW-1?
Hello, Thanks a lot for your great help. crist.clark> You'd have to set up multicast routing on the firewall to do that. That's crist.clark> a lot more complicated than just making a multicast packet. I have no idea howto set up multicast routing on a firewall. The firewall manual said, "Firewall 1 does not treat multicast as a special case, so for VPN-1/FireWall-1 , a multicast packet is simply an IP packet with a class D (224.0.0.0 239.255 .255.255) destination address." crist.clark> If you want to make a multicast packet, on a default install of Solaris crist.clark> you can just, crist.clark> crist.clark> $ ping -I1 224.0.0.1 crist.clark> crist.clark> For real fun (if you have other Solaris systems on the LAN with the default crist.clark> multicasting setup). A "ping 224.0.0.1" will also work fine on a Windows crist.clark> box (Win2k anyway). I have just $ ping -I1 224.0.0.1 in the firewall(Solaris8) and got the following message, PING 224.0.0.1: 56 data bytes 64 bytes from fwlb2 (192.168.2.254): icmp_seq=0. time=3. ms 64 bytes from fwlb2 (192.168.2.254): icmp_seq=1. time=1. ms 64 bytes from fwlb2 (192.168.2.254): icmp_seq=2. time=0. ms 64 bytes from fwlb2 (192.168.2.254): icmp_seq=3. time=1. ms ... Does it mean a multicast packet has passed the firewall? Sorry for my very newbie question. Best regards, --Wen ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|