PLANET WGSW-52040 User Manual

Page 314

Advertising
background image

[no] access-list <5000-5099>

{deny|permit} ip {{<source>

<source-wildcard>}|{host-source

<source-host-ip>}|any-source}

{{<destination>

<destination-wildcard>}|{host-desti

nation

<destination-host-ip>

}|any-destinat

ion}

The rule used to configure source control. This

rule does not take effect until it is applied to

specified port. Using the NO form of it can delete

specified rule.

The last is to configure the configured rule to specified port.

Note: If the rules being configured will occupy the table entries of hardware, configuring too

many rules will result in configuration failure caused by bottom table entries being full, so we

suggest user to use the simplest rules if possible. The configuration rules are as follows:

Command Explanation

Port Configuration Mode

[no] ip multicast source-control

access-group <5000-5099>

Used to configure the rules source control uses

to port, the NO form cancels the configuration.

2 Destination Control Configuration

Like source control configuration, destination control configuration also has three steps.

First, enable destination control globally. Since destination control need to prevent

unauthorized user from receiving multicast data, the switch won’t broadcast the multicast data

it received after configuring global destination control. Therefore, It should be avoided to

connect two or more other Layer 3 switches in the same VLAN on a switch on which

destination control is enabled. The configuration commands are as follows:

Command Explanation

Global Configuration Mode

[no] multicast destination-control

required

Globally enable destination control.

The no operation of this command will

globally disable destination control. All

of the other configuration can only

take effect after globally enabled. The

next is configuring destination control

rules, which are similar.

38-93

Advertising