QTECH QSW-2800 Инструкция по настройке User Manual

Page 258

Advertising
background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

244

Like source control configuration, destination control configuration also has three steps.

First, enable destination control globally. Since destination control need to prevent

unauthorized user from receiving multicast data, the swit

ch won’t broadcast the multicast data

it received after configuring global destination control. Therefore, It should be avoided to

connect two or more other Layer 3 switches in the same VLAN on a switch on which

destination control is enabled. The configuration commands are as follows:

Command

Explanation

Global Configuration Mode

[no] multicast destination-control

(required)

Globally enable destination control. The no

operation of this command will globally disable

destination control. All of the other configuration

can only take effect after globally enabled. The

next is configuring destination control rules,

which are similar.

Next is to configure destination control rule. It is similar to source control, except to use ACL

No. of 6000-7999.

Command

Explanation

Global Configuration Mode

[no] access-list <6000-7999> {deny|permit} ip

{{<source>

<source-wildcard>}|{host-source

<source-host-ip>}|any-source} {{<destination>

<destination-wildcard>}|{host-destination

<destination-host-ip>}|any-destination}

The rule used to configure destination

control. This rule does not take effect

until it is applied to source IP or VLAN-

MAC and port. Using the NO form of it

can delete specified rule.

The last is to configure the rule to specified source IP, source VLAN MAC or specified port. It is

noticeable that, due to the above situations, these rules can only be used globally in enabling

IGMP-SNOOPING. And if IGMP-SNOOPING is not enabled, then only source IP rule can be

used under IGMP Protocol. The configuration commands are as follows:

Command

Explanation

Port Configuration Mode

[no] ip multicast destination-control access-

group <6000-7999>

Used to configure the rules destination

control uses to port, the NO form

cancels the configuration.

Global Configuration Mode

[no] ip multicast destination-control <1-4094>

<macaddr> access-group <6000-7999>

Used to configure the rules destination

control uses to specify VLAN-MAC, the

NO form cancels the configuration.

[no] ip multicast destination-control

Used to configure the rules destination

Advertising