Chapter 7 Firewall for FortiOS 5.0 : Building firewall objects and policies : Multicast Address
  
Multicast Address
The company has a large high tech campus that has monitors in many of its meeting rooms. It is common practice for company wide notifications of importance to be done in a streaming video format with the CEO of the company addressing everyone at once. The video is High Definition quality so takes up a lot of bandwidth. To minimize the impact on the network the network administrators have set things up to allow the use of multicasting to the monitors for these notifications. Now it has to be set up on the FortiGate firewall to allow the traffic.
The range being used for the multicast is 239.5.0.0 to 239.5.255.255
The interface on this FortiGate firewall will be on port 4
Go to Firewall Objects > Address > Addresses and select Create New > Address/FQDN.
Fill out the fields with the following information:
Field
Value
Category
Multicast Address
Name
Meeting_Room_Displays
Color
<optional>
Show in address list
enabled
Multicast IP Range
239.5.0.0-239.5.255.255
Interface
port4
Comments
<optional>
Select OK.
Enter the following CLI command:
config firewall multicast-address
edit "meeting_room_display"
set associated-interface "port9"
set start-ip 239.5.0.0
set end-ip 239.5.255.255
set visibility enable
next
end
To verify that the address range was added correctly:
Go to Firewall Objects > Address > Groups. Check that the addresses have been added to the address list and that they are correct.
Enter the following CLI command:
config firewall multicast-address
edit <the name of the address that you wish to verify>
Show full-configuration