Hello,
I am looking for a way to block a specific multicast group on the network that does not entail me touching all my devices to update an ACL or somthing. I was thinking, if the multicast group didnt have an RP, it would keep it off the WAN and limit it to a local segment, which is OK.
I'm trying to block 239.255.255.200, Printers and a few other things are babbling across it and there's no need for it to go across the WAN. I'm using PIM-SM and was using a static Anycast RP (with MSDP between them). So... I fired up GNS3, setup our network and started monkeying with AutoRP. AutoRP would seem to do the trick because it will recognize negative statements in the ACL. I have it setup and running in the "lab". I hae a mapping agent and the candidate RP. Assume PIM is working as expected.
Candidate RP:
R1= Candidate RP:
R1(config-std-nacl)#do sh access-list 1
Standard IP access list 1
5 deny 239.255.255.200
10 permit 224.0.0.0, wildcard bits 15.255.255.255
ip pim send-rp-announce 10.10.250.1 scope 25 group-list 1 interval 5
R2= Mapping Agent:
ip pim autorp listener
ip pim send-rp-discovery Loopback0 scope 200
R3= A Branch Router:
R4#sh ip pim rp mapping
PIM Group-to-RP Mappings
Group(s) 224.0.0.0/4
RP 10.10.250.1 (?), v2v1
Info source: 192.168.250.37 (?), elected via Auto-RP
Uptime: 00:16:46, expires: 00:02:33
Group(s) (-)239.255.255.200/32
RP 10.10.250.1 (?), v2v1
Info source: 192.168.250.37 (?), elected via Auto-RP
Uptime: 00:08:33, expires: 00:02:36
So AutoRP seems to be working, my RP mappings are getting to my branch... What does the ( - ) next to the group i want to deny signify? will it not use that RP for that group?
