Amer Networks SS2R48G4i V2 - Manual (Page 125)

SS2R24G4i/SS2R48G4i
114
[no] ip multicast destination-control
<source> <source-wildcard>
access-group <6000-7999>
To configure the rule used in source
control to specified source IP
address/MASK, prefixing the
command with “NO” will cancel the
configuration.
3. Configuration of mulicast policy
mulicast policy satisfies the demand of special users by designating priority for specified multicast
data. What calls for attention is that multicast data can only be taken special care when it is transmitted
on TRUNK . The following is the command to configure(set a priority for the specified multgicast)
Command Explantation
Global configuration mode
[no] ip multicast policy <source>
<source-wildcard> <destination>
<destination-wildcard> cos <priority>
Configure the multicast policy, set
priority for source within a special
range. The range of priority is <0-7>.
13.3 DCSCM Typical Examples
1. Souce control
To prevent a boundary switch to send multicast data freely, we configure on the boundary switch
that, only the switch connected to port Ethernet0/0/5 is allowed to send multicast data, and the group of
the data has to be 225.1.2.3. But the uplink port Ethernet0/0/25 can forward multicast data without
limitation. The following is the configuration we can make
Switch(Config)#access-list 5000 permit ip any host 225.1.2.3
Switch(Config)#access-list 5001 permit ip any any
Switch(Config)#ip multicast source-control
Switch(Config)#interface Ethernet0/0/5
Switch(Config-If-Ethernet0/0/5)#ip multicast source-control access-group 5000
Switch(Config)#interface Ethernet0/0/25
Switch(Config-If-Ethernet0/0/25)#ip multicast source-control access-group 5001
Destination control
We can confiure as follows if we want to prevent the users in 10.0.0.0/8 segment to join the group
238.0.0.0/8
Firstly, to enable IGMP snooping in the VLAN it is in(assumed to be VLAN2)
Switch(Config)#ip igmp snooping
Switch(Config)#ip igmp snooping vlan 2
Then, configure the relative detination control ACL, and configure the specified IP to use the ACL.
Switch(Config)#access-list 6000 deny ip any 238.0.0.0 0.255.255.255
Switch(Config)#access-list 6000 permit ip any any
Switch(Config)#ip
multicast destination-control
Switch(Config)#ip multicast destination-control 10.0.0.0 0.255.255.255 access-group 6000
Thus, the users of this segment can only join the groups other than 238.0.0.0/8
3. Multicast policy