2 access-list (multicast source control) – PLANET WGSW-50040 User Manual

Page 278

Advertising
background image

Commands for Security Function Chapter 6 Commands for TACACS+

Example:

Switch(config)#access-list 6000 permit ip 10.1.1.0 0.0.0.255 232.0.0.0 0.0.0.255

Switch(config)#

18.1.2 access-list (Multicast Source Control)

Command:

access-list <5000-5099> {deny|permit} ip {{<source> <source-wildcard>}|{host

<source-host-ip>}|any-source} {{<destination> <destination-wildcard>}|{host-destination

<destination-host-ip>}|any-destination}

no access-list <5000-5099> {deny|permit} ip {{<source> <source-wildcard>}|{host

<source-host-ip>}|any} {{<destination> <destination-wildcard>}|{host-destination

<destination-host-ip>}|any-destination}

Function:

Configure source control multicast access-list; the “no access-list <5000-5099> {deny|permit} ip

{{<source> <source-wildcard>}|{host <source-host-ip>}|any-source} {{<destination>

<destination-wildcard>}|{host-destination <destination-host-ip>}|any-destination}” command

deletes the access-list.

Parameter:

<5000-5099>: source control access-list number.

{deny|permit}: deny or permit.

<source>: multicast source address..

<source-wildcard>: multicast source address wildcard character.

<source-host-ip>: multicast source host address.

<destination>: multicast destination address.

<destination-wildcard>: multicast destination address wildcard character.

<destination-host-ip>: multicast destination host address.

Command Mode:

Global Mode

Usage Guide:

ACL of Multicast source control list item is controlled by specifical ACL number from 5000 to 5099,

the command applies to configure this ACL. ACL of Multicast source control only needs to configure

source IP address and destination IP address controlled (group IP address), the configuration mode

is basically the same to other ACLs, and use wildcard character to configure address range, and

also specify a host address or all address. Remarkable, “all address” is 224.0.0.0/4 according to

group IP address, not 0.0.0.0/0 in other access-list.

Example:

Advertising