USG60 Broadcast 224.0.0.1

flookyk
flookyk Posts: 3  Freshman Member
First Comment
edited April 2021 in Security

The logs on our USG60 appear to be showing that the Firewall is trying to broadcast to 224.0.0.1 every two minutes and being blocked by the Rules.

Can anyone tell me why and what it is trying to do sending to this IP address and is there any way of stopping it trying to do it in the first place?

All Replies

  • Alfonso
    Alfonso Posts: 257  Master Member
    5 Answers First Comment Friend Collector Second Anniversary
    Hi @flookyk

    224.0.0.1 is a multicast ip address, and it 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). 

    I suppose the USG60 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the USG60 queries all directly connected networks to gather group membership. After that, the USG60 periodically updates this information.

    IP multicasting can be enabled/disabled on the ZyWALL LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. Use this screen to configure LAN DHCP and TCP/IP settings.
    I suppose configuration on USG60 is very similar.

    Regards
  • flookyk
    flookyk Posts: 3  Freshman Member
    First Comment
    If this is the IGMP setting, then the tick is not in the box to enable it??

Security Highlight