Firewall-1

Re: [FW-1] VoIP Multicast

Subject: Re: [FW-1] VoIP Multicast
From: cisco4ng <cisco4ng AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 25 Aug 2005 05:38:46 -0700
I've limited experiences with NGx so I can NOT comment much on it.  However, I 
do have
experience with R55w on SPLAT and I can offer the following advice:
 
Routing on SPLAT in R55w in Zebra, in NGx they called it something else but I 
still zebra
directory in NGx so it may be different only to the CP marketing/sale guys.  
SPLAT R55w
can not terminate GRE on the interface itself, you need to use Nokia for that.  
Nokia IPSO
can terminate GRE on the interface.  Zebra in SPLAT, AFAIK, can only do RIP, 
OSPF, BGP,
etc.. and nothing else.
 
If you are looking to route multicast traffics, your options would either to 
use Nokia
or Cisco IOS router that will perform GRE so that it will tunnel routing 
protocols and multicast
traffics such as VoIP traffics for you.  After that, you can protect the GRE 
traffics with the 
IPSec VPN.  That's why they call it GRE/IPSec.  
 
I also heard that with Cisco IOS release 12.4 and later, there is a feature 
that you do not need
to use GRE to route multicast traffics and it is not Dynamic Multipoint VPN 
either.  I would
imagine that Checkpoint has something similar in NGx that is compatible with 
Cisco in IOS 
release 12.4.  
 
Before you invest in SPLAT Pro, talk to your Checkpoint rep. and requested to 
talk to a CP 
engineer (not sale engineer) but someone who is familiar with what I just 
described above.
AFAIK, SPLAT Pro is NOT cheap and it may not meet the requirements you 
described.
 
Good Luck!
 
cisco4ng

FW-1 Emails <fw1 AT TNCC DOT COM> wrote:
Does anyone have any recommendations for, or want to share experiences
in, getting multicast traffic operational between sites via VPN? I
understand SPLAT Pro offers multicast routing but I have also read
something regarding GRE encapsulation of multicast traffic but not sure
how this would work on regular SPLAT. Just wanted input before I make a
commitment to SPLAT Pro. All feedback is greatly appreciated.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>