Hi there,
I have a RUTX50 with one physical device (DeviceA) attached to a switch-port, and a Sonicwall TZ370 firewall/router, also with a single physical device (DeviceB) attached to a switch-port. An IPSec tunnel connects the RUTX50 and TZ370.
NetworkA
172.23.60.0/24
DeviceA
172.23.60.53
RUTX50
172.23.60.1
TZ370
172.22.60.1
DeviceB
172.22.60.50
NetworkB
172.22.60.0/24
The VPN tunnel comes up and ordinary network traffic flows between DeviceA and DeviceB, and vice versa.
The DeviceA emits network traffic into the multicast group: 239.23.43.78 and DeviceB joins that same multicast group.
The TZ370 shows the group 239.23.43.78 on its IGMP state table as a result of DeviceB’s Join. However, no multicast packets appear to flow through the VPN tunnel.
On the RUTX50 I’ve enabled IGMP Snooping on the advanced tab of my LAN configuration page. I’ve also installed the IGMP Proxy package and configured it with:
Direction: Upstream
Interface: Lan
Firewall zone: Lan
Networks: 172.23.60.0/24
Direction: Downstream
Interface: Lan
Firewall zone: Lan
Networks: 172.22.60.0/24
Is there some other config (routing, firewall rules, etc.) required on the RUTX50 to ensure IGMP querier reports are sent across the VPN to the TZ370 so it becomes aware of the existence of the multicast groups created by the device attached to the RUTX50?
Thanks for your help,
Tony