USG60 Broadcast 224.0.0.1

flookyk
flookyk Posts: 3
First Comment
edited April 2021 in Security

The logs on our USG60 appear to be showing that the Firewall is trying to broadcast to 224.0.0.1 every two minutes and being blocked by the Rules.

Can anyone tell me why and what it is trying to do sending to this IP address and is there any way of stopping it trying to do it in the first place?

All Replies

  • Alfonso
    Alfonso Posts: 257  Master Member
    First Anniversary Friend Collector First Answer First Comment
    Hi @flookyk

    224.0.0.1 is a multicast ip address, and it 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). 

    I suppose the USG60 supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the USG60 queries all directly connected networks to gather group membership. After that, the USG60 periodically updates this information.

    IP multicasting can be enabled/disabled on the ZyWALL LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. Use this screen to configure LAN DHCP and TCP/IP settings.
    I suppose configuration on USG60 is very similar.

    Regards
  • If this is the IGMP setting, then the tick is not in the box to enable it??

Security Highlight