Configuring multicast access control for a VLAN

Configure multicast access control for an IGMP VLAN to restrict access to certain multicast streams and to protect multicast streams from spoofing (injecting data to the existing streams).

Procedure

Enter VLAN Interface Configuration mode:

enable

configure terminal

interface vlan <1–4059>
Configure multicast access control:

ip igmp access-list WORD<1–64> [A.B.C.D/X] <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>
Change an existing access list:

ip igmp access-list WORD<1–64> [A.B.C.D/X] mode <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>

Variable definitions

Use the data in the following table to use the ip igmp access-list command.


Variable	Value
{A.B.C.D/X}	Creates an access control group entry for a specific IGMP interface. Specify the IP address of the host and the subnet mask used to determine the host or hosts covered by this configuration. You can use the host subnet mask to restrict access to a portion of the network for the host.
deny-tx\|deny-rx\|deny-both\|allow-only-tx\|allow-only-rx\|allow-only-both	Indicates the action for the specified IGMP interface. For example, if you specify deny-both, the interface denies both transmitted and received traffic
mode	Changes the access control group configuration.
`WORD<1–64>`	Specifies the name of the access list from 1–64 characters.