Limiting/Filtering Multicast traffic between VLANs

[amerutoji]

Hello,

I have two VLANs: VLAN 10 and VLAN 20 and looking to block any multicast traffic from one VLAN (10) to another (20) but allow any multicast traffic from VLAN 20 to VLAN 10.

Right now, our router does MC routing in both directions.

I am not sure whether this is advisable (block any MC traffic in one direction) and whether to do this using MAC address filtering or some other type of ACLs?

Thanks,

Amer.

[sfrisby]

Much of this depends upon what your multicast routing topology looks like and whether your using PIM-DM or PIM-SM

If you have multicast routing enabled across a campus ( a large number of switches ) and are using PIM-SM - I believe the best way to manage multicast traffic from the source to destination is through access-lists on the Rendezvous point - stipulating who can join which multicast groups.

Port based ACL's are another option - but you should be able to control who joins what multicast groups with the method described above.