QTECH QSW-3400 Инструкция по настройке User Manual

Page 282

Advertising
background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

281

2. Destination Control Configuration

Like source control configuration, destination control configuration also has three steps.

First, enable destination control globally. Since destination control need to prevent
unauthorized user from receiving multicast data, the switch won’t broadcast the multicast data

it received after configuring global destination control. Therefore, It should be avoided to

connect two or more other Layer 3 switches in the same VLAN on a switch on which

destination control is enabled. The configuration commands are as follows:

Command

Explanation

Global Configuration Mode

[no] multicast destination-control

(required)

Globally enable destination control. The

no operation of this command will

globally disable destination control. All of

the other configuration can only take

effect after globally enabled. The next is

configuring destination control rules,

which are similar.

Next is to configure destination control rule. It is similar to source control, except to use ACL

No. of 6000-7999.

Command

Explanation

Global Configuration Mode

[no] access-list <6000-7999> {deny|permit} ip

{{<source> <source-wildcard>}|{host-source

<source-host-ip>}|any-source} {{<destination>

<destination-wildcard>}|{host-destination

<destination-host-ip>}|any-destination}

The rule used to configure destination

control. This rule does not take effect

until it is applied to source IP or VLAN-

MAC and port. Using the NO form of it

can delete specified rule.

The last is to configure the rule to specified source IP, source VLAN MAC or specified port. It is

noticeable that, due to the above situations, these rules can only be used globally in enabling

IGMP-SNOOPING. And if IGMP-SNOOPING is not enabled, then only source IP rule can be

used under IGMP Protocol. The configuration commands are as follows:

Command

Explanation

Port Configuration Mode

[no] ip multicast destination-control access-

group <6000-7999>

Used to configure the rules destination

control uses to port, the NO form cancels

the configuration.

Global Configuration Mode

Advertising