Chromecast multicast from internal to "WAN"

Hello

Actually I have a uncommon setup which look like this

Box - UTM (in DMZ) - Internal network
   |
Some computers

These computers out of Internal network needs to access to internal stuff, especially chromecast speakers

Computers have route to know which gateway to use for internal IPs, FW rules works but I don't know how to find speakers

I found that chromecast use 239.0.0.250 multicast address, I tried to use "PIM SM" with internal and WAN interface, RP with UTM and chromecast

And I get this error in log

upstream neighbor for RP [IP chromecast] for group 239.0.0.250: not found

Don't know how to forward correctly multicast (also don't know if it's possible too)

Thanks in advance

Edit, it looks to work on XG
community.sophos.com/.../multicast-bonjour-apple-tv-traffic



adding info with XG
[edited by: Kazaam at 12:58 AM (GMT -8) on 17 Nov 2022]
  • Salut Kazaam,

    Please insert pictures of the five tabs of your 'Multicast Routing (PIM-SM)' configuration.  Also, copy here the complete line from the log.  If you prefer, obfuscate IPs like 84.XX.YY.121, 10.X.Y.100, 192.168.X.200 and 172.2X.Y.51.  That lets us see immediately which IPs are local and which are identical.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hello

    Here actual config

    Error message, only if I had chromecast speaker as "RP router"

    2022:11:21-18:04:15 ma-box xorp[19167]: [ WARNING xorp_pimsm4 PIM ] JoinDesired(*,G) = true: upstream neighbor for RP 192.168.127.79 for group 239.255.255.250: not found
    2022:11:21-18:04:16 ma-box xorp[19167]: [ WARNING xorp_pimsm4 PIM ] JoinDesired(*,G) = true: upstream neighbor for RP 192.168.127.79 for group 224.0.1.186: not found
    2022:11:21-18:04:17 ma-box xorp[19167]: [ WARNING xorp_pimsm4 PIM ] JoinDesired(*,G) = true: upstream neighbor for RP 192.168.127.79 for group 239.0.0.250: not found 

    239.255.255.250 is multicast address for chromecast

    But also I have this on log

    2022:11:21-18:04:57 ma-box xorp[19167]: [ TRACE xorp_igmp MLD6IGMP ] mld6igmp_process: RX IGMP_V3_MEMBERSHIP_REPORT from 192.168.127.79 to 224.0.0.22 on vif eth0
    2022:11:21-18:04:57 ma-box xorp[19167]: [ TRACE xorp_igmp MLD6IGMP ] mld6igmp_process: RX IGMP_V3_MEMBERSHIP_REPORT from 192.168.127.79 to 224.0.0.22 on vif eth0 

    Internal eth0 is 192.168.127.X

    Internetfree eth5 is 192.168.126.X, used as WAN interface

    Chromecast devices are in internal network, testing device is 192.168.127.79

    Computer that looking to use chromecast in on "internet free" network

    I also tried to make a route from computer to fwd multicast to UTM but nothing change

    FYI even with or without this config, internal network devices can use chromecast

  • Merci, that's a lot easier to understand.

    Wow - that's a lot more complex that what I've worked with.

    In 'Active PIM-SM interfaces', I have 'Internal (Network)' and 'Wireless Guest Network (Network)' and in 'Active PIM-SM RP routers', a Windows server on the Internal interface.  On the 'RP Routers' tab, I have only the Windows server with its internal IP and a single IP for 'Group prefixes' that's in 224.0.0.0/4.  On the 'Routes' tab, I have only 'Wireless Guest Network (Network) → Interface Wireless Guest Network'.  On the 'Advanced' tab, I have a threshold for SPT set to 1048576 bytes/minute, but your setting should work.

    Let us know what works for you.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Thanks, I tried with your config but computer still not see chromecast

    Complex I don't think so, maybe my mind made it crazy.

    It's likely what you have, 2 networks with chromecast and client in each one

    Computer in red network has a rule for full access to blue network
    I try to use chromecast in blue network from this computer

    Red network is considered as WAN for UTM

    You have a windows server as RP, is it possible to use UTM or a win 10 computer as RP ?

  • I doubt that you can use the UTM.  I don't remember now what we did on the Windows server, but the WIN 10 PC might be configured to do what our Windows server does.

    Does #1 in Rulz help?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA