Turn off icmp inspection and make sure you allow icmp in the ACL's It isn't failing. The problem is you ping the multicast source and the reply is going to originate from the router address.
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Tuesday, August 03, 2010 10:27 AM To: [email protected] Subject: [OSL | CCIE_Security] ASA SMR Hi all I am trying ASA Stub Muilticast routing with the following topology: R1 (G0/0) 10.20.30.41 ----------------- 10.20.30.42 (G0/1) (ASA) (G0/0) 20.10.30.42 -------------------- 20.10.30.41 (G0/0) R2 R1 interface GigabitEthernet0/1 ip address 10.20.30.41 255.255.255.0 ip igmp join-group 239.1.2.3 ASA interface GigabitEthernet0/1 nameif inside security-level 100 ip address 10.20.30.42 255.255.255.0 igmp forward interface outisde R2 ip multicast-routing iip pim rp-address 20.10.30.41 255.255.255.0 interface FastEthernet0/0 ip address 20.10.30.41 255.255.255.0 ip pim sparse-mode When I ping from R2 to 239.1.2.3, I don't get replies from R1. Why does SMR never work :-) Am I missing something? With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
