Configuring multicast access control for a VLAN

Configure multicast access control for an IGMP VLAN to restrict access to certain multicast streams and to protect multicast streams from spoofing (injecting data to the existing streams).

Procedure

  1. Enter VLAN Interface Configuration mode:

    enable

    configure terminal

    interface vlan <1–4059>

  2. Configure multicast access control:

    ip igmp access-list WORD<1–64> [A.B.C.D/X] <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>

  3. Change an existing access list:

    ip igmp access-list WORD<1–64> [A.B.C.D/X] mode <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>

Variable definitions

Use the data in the following table to use the ip igmp access-list command.

Variable

Value

{A.B.C.D/X}

Creates an access control group entry for a specific IGMP interface. Specify the IP address of the host and the subnet mask used to determine the host or hosts covered by this configuration. You can use the host subnet mask to restrict access to a portion of the network for the host.

deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both

Indicates the action for the specified IGMP interface. For example, if you specify deny-both, the interface denies both transmitted and received traffic

mode

Changes the access control group configuration.

WORD<1–64>

Specifies the name of the access list from 1–64 characters.