Multicast IP range

This type of address will allow multicast broadcasts to a specified range of addresses.

Creating a multicast IP range address

1. Go to Policy & Objects > Addresses.
2. Select Create New.If you use the down arrow next to Create New, select Address.
3. Choose the Category, Multicast Address
4. Input a Name for the address object.
5. Select the Type,Multicast IP Range from the drop-down menu.
6. Enter the value for the Multicast IP Range
7. Select the Interface from the drop-down menu.
8. Enable the Show in Address List function
9. Input any additional information in the Comments field.
10. Press OK.

Example: Multicast IP range address

The company has a large high tech campus that has monitors in many of its meeting rooms. It is common practice for company wide notifications of importance to be done in a streaming video format with the CEO of the company addressing everyone at once.

The video is High Definition quality so takes up a lot of bandwidth. To minimize the impact on the network the network administrators have set things up to allow the use of multicasting to the monitors for these notifications. Now it has to be set up on the FortiGate firewall to allow the traffic.

1. Go to Policy & Objects> Objects > Addresses and select Create New > Address.

2. Fill out the fields with the following information:

   Category	Multicast Address
   Name	Meeting_Room_Displays
   Type	Multicast IP Range
   Multicast IP Range	239.5.5.10-239.5.5.200
   Interface	port9
   Show in Address List	<enable>
   Comments	<Input into this field is optional>

3. Select OK.
4. Enter the following CLI command:

   config firewall multicast-address

   edit "meeting_room_display"

   set type multicastrange

   set associated-interface "port9"

   set start-ip 239.5.5.10

   set end-ip 239.5.5.200

   set visibility enable

   end

5. To verify that the address range was added correctly, go to Policy & Objects> Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
6. Enter the following CLI command:

   config firewall multicast-address

   edit <the name of the address that you wish to verify>

   Show full-configuration