Configuring multicast boundaries, Standard acl to permit multicast traffic, Extended acl to deny multicast traffic – Brocade FastIron Ethernet Switch IP Multicast Configuration Guide User Manual

Page 82: Extended acl to permit multicast traffic, Displaying multicast boundaries

Advertising
background image

When a boundary is applied to an ingress interface, all packets destined to a multicast group that
is filtered out will be dropped by software. Currently, there is no support to drop such packets in
hardware.

The ip multicast-boundary command may not stop clients from receiving multicast traffic if the
filter is applied on the egress interface up-stream from RP.

Configuring multicast boundaries

To define boundaries for PIM enabled interfaces, enter a commands such as the following.

device(config)# interface ve 40

device(config-vif-40)#ip multicast-boundary MyBrocadeAccessList

Syntax: [no] ip multicast-boundary acl-spec

Use the acl-spec parameter to define the number or name identifying an access list that controls the
range of group addresses affected by the boundary.

Use the no ip multicast boundary command to remove the boundary on a PIM enabled interface.

The ACL, MyBrocadeAccessList can be configured using standard ACL syntax. Some examples of
how ACLs can be used to filter multicast traffic are as follows:

Standard ACL to permit multicast traffic

To permit multicast traffic for group 225.1.0.2 and deny all other traffic, enter the following command.

device(config)# access-list 10 permit host 225.1.0.2

device(config)# access-list 10 deny any

Extended ACL to deny multicast traffic

To deny multicast data traffic from group 225.1.0.1 and permit all other traffic, enter the following
command.

device(config)# access-list 101 deny ip any host 225.1.0.1

device(config)# access-list 101 permit ip any any

Extended ACL to permit multicast traffic

To permit multicast data traffic from source 97.1.1.50 for group 225.1.0.1 and deny all other traffic,
enter the following commands:

Device(config)# access-list 102 permit ip host 97.1.1.50 host 225.1.0.1

Device(config)# access-list 102 deny ip any any

Displaying multicast boundaries

To display multicast boundary information, enter the show ip pim interface command.

device# show ip pim interface ethernet 1/1/7

Flags : SM - Sparse Mode v2, DM - Dense Mode v2, P - Passive Mode

---------+---------------+----+---+-----------------------+---+---------+-------

+------+---------+

Interface|Local |Mode|St | Designated Router |TTL|Multicast| VRF |

DR | Override

Configuring multicast boundaries

80

FastIron Ethernet Switch IP Multicast Configuration Guide

53-1003085-02

Advertising