Multicast Filtering - Help
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-08-2009 01:20 AM - edited 03-06-2019 06:38 AM
Hi,
I'm new to multicasting so please bear with me. I'm employing multicast in a new environment with lot's of vlan's and wan connections. My question is how do I lock down a multicast group to only two of the vlan's?
Here's what I have so far:
conf t
ip multicast-routing.
ip pim rp-address 10.49.100.103
int vlan 80
exit
int vlan 81
exit
What do I need to do to restrict the multicast group 239.255.2.20 to only these two vlans i.e. 80 and 81.
Thanks
Dan
- Labels:
-
Other Switching
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-08-2009 01:33 AM
Hello Dan ,
You can use igmp multicast filtering assuming its a igmp traffic:
sw1#sh run int
09:06:02: %SYS-5-CONFIG_I: Configured from console by consolevlan 80
Building configuration...
Current configuration : 63 bytes
!
interface Vlan80
no ip address
ip igmp access-group 1
end
sw1#sh run int vlan 81
Building configuration...
Current configuration : 63 bytes
!
interface Vlan81
no ip address
ip igmp access-group 1
end
sw1#sh access-lists 1
Standard IP access list 1
10 permit 239.255.2.20
and for rest of the vlan's just create another access-list 2 and deny all multicast traffic by using the same command ip igmp access-group under the vlan interface..
Please feel free to contact me should you need any further assistance.
HTH
Anant
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-08-2009 01:51 AM
Thank you very much for that detailed explanation. I for got to add I will also add the following in the vlan's:
int vlan 80
ip pim sparse-mode
exit
int vlan 81
ip pim sparse-mode
exit
Will this make a difference?
Also can you please write me a short filter example using some sort of restriction to limit the multicast group 239.255.2.20 to only join with the rp-address 10.49.100.103 and not allow any other multicast group to connect to it? It's the first time I'm doing this.
Thanks very much.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-26-2009 06:11 AM
i also need the ability to control what multicast group uses which RP-address so if you found a way to do so please share
