Guest

Preview Tool

Cisco Bug: CSCul65863 - ASA IGMP receiver-specific filter blocks all multicast receivers

Last Modified

Apr 16, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

8.2(5)

Description (partial)

Symptom:
No igmp group membership entries

ASA-5580# sh igmp group
No groups found.

Conditions:
Access-rule applied to inside interface to deny all IGMP traffic from single host eg A.B.2.11  

ASA-5580# conf t
ASA-5580(config)# access-list IGMP_inside_0 line 1 extended deny udp host A.B.2.11 224.0.0.0 224.0.0.0
ASA-5580(config)# access-list IGMP_inside_0 line 2 extended permit udp any any
ASA-5580(config)# end

ASA-5580# sh nameif
Interface                Name                     Security
Management0/0            MGMT                     100
TenGigabitEthernet5/0    outside                    0
TenGigabitEthernet5/1    inside                   100
ASA-5580# conf t
ASA-5580(config)# int te5/1
ASA-5580(config-if)# igmp access-group IGMP_inside_0
ASA-5580(config-if)# end
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.