>
    Strata Copilot
    Network > Routing > Logical Routers > Multicast
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Network
    4. Network > Routing > Logical Routers
    5. Network > Routing > Logical Routers > Multicast
    Download PDF
    Next-Generation Firewall

    Network > Routing > Logical Routers > Multicast

    Table of Contents

    Network > Routing > Logical Routers > Multicast

    Descriptions of IPv4 multicast fields (PIM and IGMP) for a logical router on an Advanced Routing Engine.
    The table describes the settings to configure IPv4 multicast for a logical router on an Advanced Routing Engine.
    IPv4 Multicast Settings
    Description
    enable multicast protocol
    Select to enable multicast protocol for the logical router.
    Static
    Name
    Add an mroute by name (maximum of 31 characters). The name must start with an alphanumeric character, underscore (_), or hyphen (-), and contain zero or more alphanumeric characters, underscore (_) or hyphen(-). No dot (.) or space is allowed.
    Destination
    Enter the destination (IPv4 address/mask), which is the multicast source to which you are doing an RPF check.
    Interface
    Select the egress interface for a unicast route to the multicast source.
    Next Hop
    Enter the IPv4 address of the next hop toward the source.
    Preference
    Enter a preference for the mroute; range is 1 to 255.
    PIM - General
    Enable
    Enable PIM.
    RPF Lookup Mode
    Select the Reverse-Path Forwarding (RPF) lookup mode, which determines where the logical router looks to find the outgoing interface to reach the source address contained in the multicast packet. If the outgoing interface stored in the RIB matches the interface on which the multicast packet arrived, the logical router accepts and forwards the packet; otherwise, it drops the packet.
    • mrib-then-urib—Look in the multicast RIB first, and then the unicast RIB.
    • mrib-only—Look in the multicast RIB only.
    • urib-only—Look in the unicast RIB only.
    Interface General Timer
    Select an Interface Timer Profile or create a new one.
    Route Age Out Time (sec)
    Specify the number of seconds that a multicast route remains in the mRIB after the session ends between a multicast group and a source; range is 210 to 7,200; default is 210.
    Multicast SSM Range
    To configure Source-Specific Multicast (SSM), select a prefix list that specifies the source addresses allowed to deliver multicast traffic to the receiver; default is None (no prefix list).
    Group Address
    To configure the Shortest-Path Tree (SPT) threshold for a multicast group or prefix, Add a group address (multicast group or prefix for which you are specifying the distribution tree) by selecting a prefix list or creating a new one.
    Threshold
    Specify the SPT threshold for the group or prefix:
    • 0 (switch on first data packet)—(default) The logical router switches from shared tree to SPT for the group/prefix when the logical router receives the first data packet for the group/prefix.
    • Enter the total number of kilobits per second that can arrive for the multicast group/prefix at any interface and over any time period, upon which the logical router switches to SPT distribution for that multicast group/prefix; range is 0 to 4,294,967,295.
    • never (do not switch to SPT)—The PIM router continues to use the shared tree to forward packets to the multicast group/prefix.
    PIM - Group Permissions
    Source Group List
    To grant permission for multicast packets from certain sources and/or multicast packets to certain destination multicast groups to transit the logical router, select an access list. Default is None (no access list), meaning no specific source or multicast groups are subject to PIM group permissions.
    PIM - Interfaces
    Name
    Enter a name for the interface (maximum of 31 characters). The name must start with an alphanumeric character, underscore (_), or hyphen (-), and contain zero or more alphanumeric characters, underscore (_) or hyphen(-). No dot (.) or space is allowed.
    Description
    Enter a description of the interface.
    DR Priority
    Specify the Designated Router priority of the interface to control which router forwards PIM Join message, PIM Register messages, and Prune messages to the Rendezvous Point (RP); range is 1 to 4,294,967,295; default is 1. Of the PIM devices on a LAN, if DR Priority is configured, the device with the highest priority value is elected the DR.
    Send BSM
    Select to allow propagation of Bootstrap Messages (enabled by default).
    Timer Profile
    The Timer Profile for the interface is inherited from the General PIM section unless you override that by selecting a Timer Profile for the interface; default is None.
    Neighbor Filter
    Use an access list to specify the prefixes of devices that are allowed to become or denied from becoming PIM neighbors of the logical router. Default is None (no access list).
    PIM - Rendezvous Point
    RP Type
    Configure a Static RP and/or a Candidate RP; they are not mutually exclusive.
    • Static RP—Establishes a static mapping of an RP to multicast groups. You must explicitly configure the same RP on other PIM routers in the PIM domain.
    • Candidate RP
    • None
    Interface
    Select the RP interface where the RP receives and sends multicast packets. Valid interface types are Layer3 interfaces (which include Ethernet, loopback, VLAN, Aggregate Ethernet (AE), tunnel, and subinterfaces).
    Address
    Select an address/prefix length of the interface; IP addresses of the RP interface you selected populate the list.
    Override learned RP for the same group
    (Static RP only) Select to have this static RP serve as RP (instead of the RP elected for the groups in the Group List).
    Group List
    Select or create an access list to specify the multicast groups for which the static RP acts as the RP. Default is None (no access list).
    Priority
    (Candidate RP only) Specify the priority of the candidate RP; range is 0 to 255; default is 192. A lower priority value indicates a higher priority.
    Advertisement Interval
    (Candidate RP only) Specify the frequency (in seconds) at which the candidate RP sends advertisements to other routers; range is 1 to 26,214; default is 60.
    IPv4 Address
    Add an interface by selecting the IPv4 Address of the interface.
    Group List
    To control the groups that the candidate RP accepts, select or create a group list, which is an IPv4 access list. Default is None (no access list). If no access list is applied, the logical router starts advertising itself as the RP for all groups.
    Override
    Select if you want the remote RP you configured statically to serve as RP, instead of an RP that is dynamically learned (elected) for groups in the Group List. Default is disabled.
    IGMP
    enable IGMP
    Enable IGMP.
    Dynamic
    Interface
    Add an interface.
    Version
    Select IGMP version 2 or 3.
    Robustness
    Select a robustness value; range is 1 to 7; default is 2. Increase the value if the subnet on which this firewall is located is prone to losing packets.
    The (Robustness * QueryInterval) + MaxQueryResponseTime determines how long a Join message is valid on the logical router. If the logical router receives a Leave Group message, Robustness * LastMemberQueryInterval is the length of time that the logical router waits before deleting the Leave Group entry. For Join messages, a Robustness value of 1 is ignored. For Leave Group messages, the logical router uses the Robustness value as the Last Member Query Count also.
    Group Filter
    Select or create an access list to control which prefixes use dynamic IGMP. Default is None (no access list).
    Max Groups
    Enter the maximum number of groups that IGMP can process simultaneously for the interface; range is 1 to 65,525; default is unlimited, which means the highest value in the range.
    Max Sources
    Enter the maximum number of sources that IGMP can process simultaneously for the interface; range is 1 to 65,525; default is unlimited, which means the highest value in the range.
    Query Profile
    Select an IGMP Interface Query Profile that you created or create a new one to apply to the interface.
    drop IGMP packets without Router Alert option
    Select to require that incoming IGMPv2 or IGMPv3 packets have the IP Router Alert Option, RFC 2113, or they will be dropped. Default is disabled.
    Static
    Name
    Add a static IGMP interface by name (maximum of 31 characters). The name must start with an alphanumeric character, underscore (_), or hyphen (-), and contain zero or more alphanumeric characters, underscore (_) or hyphen(-). No dot (.) or space is allowed.
    Interface
    Select the interface to be a static IGMP interface.
    Group Address
    Enter the multicast group address of the static IGMP members.
    Source Address
    Enter the source address from which the static IGMP members receive multicasts.

    © 2026 Palo Alto Networks, Inc. All rights reserved.