Accton Technology ES4626 - Manual (Page 659)

659
[no] access-list <5000-5099>
{deny|permit} ip {{<source>
<source-wildcard>}|{host
<source-host-ip>}|any}
{{<destination>
<destination-wildcard>}|{host-de
stination
<destination-host-ip>}|any-destin
ation}
The rule used to configure source control.
This rule does not take effect until it is applied
to specified port. Using the NO form of it can
delete specified rule.
The last is to configure the configured rule to specified port.
Note: If the rules being configured will occupy the table entries of hardware, configuring
too many rules will result in configuration failure caused by bottom table entries being full,
so we suggest user to use the simplest rules if possible. The configuration rules are as
follows
Command Explanation
Port Configuration Mode
[no] ip multicast source-control
access-group <5000-5099>
Used to configure the rules source control
uses to port, the NO form cancels the
configuration.
Destination Control Configuration
Like source control configuration, destination control configuration also has three
steps.
First, enable destination control globally. Since destination control need to prevent
unauthorized user from receiving multicast data, the switch won’t broadcast the multicast
data it received after configuring global destination control. Therefore, It should be
avoided to connect two or more other Layer 3 switches in the same VLAN on a switch on
which destination control is enabled. The configuration command are as follows
Command Explanation
Global Configuration Mode
[no] ip multicast destination-control
（Requied）
Enable destination control globally,
the “no ip multicast
destination-control
” command
disables destination control globally.
All other configuration do not take
effect until it is globally enabled.
Next is to configure destination control rule. It is similar to source control, except to
use ACL No. of 6000-7999.
Command Explanation