D-Link DGS-6600-48T Product Manual - Page 266
ip igmp access-group
View all D-Link DGS-6600-48T manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 266 highlights
DGS-6604 ip igmp access-group ip igmp access-group Using the ip igmp access-group command in interface configuration restricts a subnet's hosts to join only multicast groups that are permitted by an IP basic access list. It also can be used to restrict hosts (receivers) on a subnet to membership of only the (S,G) channels that are permitted by an IP basic access list. To disable the restrictions, use the no form of this command. ip igmp access-group IP-ACL no ip igmp access-group Syntax Description IP-ACL Specifies an IP basic access list. (not an IP extended access list). There are two types of IP ACL lists. One is the IP basic ACL list used to consider only the packet IP address. The other list is the IP extended ACL which uses the packet's IP address as well as other IP information such as UDP/TCP port number, TOS, etc.. Default Command Mode Usage Guideline Example No access group is set. VLAN interface configuration Use the ip igmp access-group command to filter groups from IGMP reports by using an IP basic access list. It also can filter sources and groups from IGMPv3 reports by using an IP basic access list. This command is used to restrict hosts on a subnet to join only multicast groups that are permitted by an IP basic access list. The command can also restrict hosts on a subnet to membership of only those (S, G) channels that are permitted by an IP basic access list. An IGMP access list accepts only an IP basic access list, allowing membership reports to be filtered based only on multicast group addresses. IGMPv3 allows multicast receivers not only to join to groups, but to groups based on including or excluding sources. For appropriate access control, it is therefore necessary to allow filtering of IGMPv3 messages not only by group addresses reported, but by group and source addresses. This example shows how to restrict the serviced IGMP group for VLAN 1000 to group 226.1.1.1. In the following example, at first, create an IP basic access list named igmp_filter which only permits the packets with destination is group address 226.1.1.1. Then, associate this access group in interface VLAN 1000. CLI Reference Guide 256