Fortinet black logo

Administration Guide

Starting an IGMP test

Copy Link
Copy Doc ID 9217125a-7eda-11ec-a0d0-fa163e15d75b:822455
Download PDF

Starting an IGMP test

The IGMP test sends join messages to the device under test (DUT), such as a router or firewall, and the DUT forwards the data stream from the server.

Before starting an IGMP test:

Configure a multicast firewall with multicast-routing protocols. The following shows an example configuration using FortiTester.

FG1K5D3I14801425 # get system settings | grep multicast

multicast-forward : enable

multicast-ttl-notchange: disable

gui-multicast-policy: enable

FG1K5D3I14801425 # get router multicast | grep routing

multicast-routing : disable

FG1K5D3I14801425 # show firewall multicast-policy

config firewall multicast-policy

edit 1

set srcintf "port35"

set dstintf "port33"

set srcaddr "host-19-1-1-100"

set dstaddr "m-226-1-2-3"

next

end

To start an IGMP test:
  1. Go to Cases > Performance Testing > Protocol > IGMP to display the test case summary page.
  2. Click + Create New to display the Select case options dialog box.
  3. In the popup dialog, for the Network Config option, select the network template you have created in Cases > Security Testing > Objects > Networks. Then the network related options will automatically be filled. See Using network configuration templates for how to create a network template.
  4. Select a Certificate Group if applicable.
  5. Click OK to continue.
  6. Configure the test case options as described below.
  7. Click Start to run the test case.

FortiTester saves the configuration automatically so you can run the test again later. You can also click Save to save the test case without running it.

While the test case is running, use the following command on your FortiTester firewall to see the multicast session:

FG1K5D3I14801425 # diagnose sys mcast-session list

Tip 1: You can also copy an existing case, and change its settings to create a new case. In the case list, click Clone to clone the configuration. Only the case name is different from the original case.

Tip 2: You can add or edit a comment when the test is running. This comment can be used to search for the test result in the Results page. This is useful especially when the test runs for a long time.

Protocol Test Case common options

Protocol Test Case configuration specific to IGMP Test

Settings Guidelines
Client Network
Multicast IP Specify a multicast IP. For the example FortiGate configuration shown above, the Muticast IP would be 226.1.2.3.

Starting an IGMP test

The IGMP test sends join messages to the device under test (DUT), such as a router or firewall, and the DUT forwards the data stream from the server.

Before starting an IGMP test:

Configure a multicast firewall with multicast-routing protocols. The following shows an example configuration using FortiTester.

FG1K5D3I14801425 # get system settings | grep multicast

multicast-forward : enable

multicast-ttl-notchange: disable

gui-multicast-policy: enable

FG1K5D3I14801425 # get router multicast | grep routing

multicast-routing : disable

FG1K5D3I14801425 # show firewall multicast-policy

config firewall multicast-policy

edit 1

set srcintf "port35"

set dstintf "port33"

set srcaddr "host-19-1-1-100"

set dstaddr "m-226-1-2-3"

next

end

To start an IGMP test:
  1. Go to Cases > Performance Testing > Protocol > IGMP to display the test case summary page.
  2. Click + Create New to display the Select case options dialog box.
  3. In the popup dialog, for the Network Config option, select the network template you have created in Cases > Security Testing > Objects > Networks. Then the network related options will automatically be filled. See Using network configuration templates for how to create a network template.
  4. Select a Certificate Group if applicable.
  5. Click OK to continue.
  6. Configure the test case options as described below.
  7. Click Start to run the test case.

FortiTester saves the configuration automatically so you can run the test again later. You can also click Save to save the test case without running it.

While the test case is running, use the following command on your FortiTester firewall to see the multicast session:

FG1K5D3I14801425 # diagnose sys mcast-session list

Tip 1: You can also copy an existing case, and change its settings to create a new case. In the case list, click Clone to clone the configuration. Only the case name is different from the original case.

Tip 2: You can add or edit a comment when the test is running. This comment can be used to search for the test result in the Results page. This is useful especially when the test runs for a long time.

Protocol Test Case common options

Protocol Test Case configuration specific to IGMP Test

Settings Guidelines
Client Network
Multicast IP Specify a multicast IP. For the example FortiGate configuration shown above, the Muticast IP would be 226.1.2.3.