NACLs and Multicast

[jthomp7626]

   Hello,

I am trying to see if the following can work.

access-list extended Out

     permit udp host 239.10.10.1 range 1020 1030 any

access-list extended In

     permit udp any host 239.10.10.1 range 1020 1030

int vlan 10

     ip access-group Out out

     ip access-group In in

So far no luck. Any ideas? thank you

[Richard Burts]

Especially as far as your Out access list is concerned - the source address of an IP packet will never the be multicast address. The source is always a unicast host.

HTH

Rick

[margalla]

As already said, a multicast address shouled never be a source address so the Out ACL is wrong on its face.

The In ACL should allow udp traffic to destinaton 239.10.10.1 and ports 1020-1030 into the router on vlan 10. Is that what you are trying to do?