Configure Multicast Access Control for an Interface

Configure multicast access control for a selected IGMP interface or VLAN to restrict access to certain multicast streams and to protect multicast streams from spoofing (injecting data to the existing streams).

About this task

You can configure IGMP on a VRF instance the same way you configure the Global Router except that you must first launch the appropriate VRF context.

Procedure

In the navigation pane, expand Configuration > IP.
Select IGMP.
Select the Access Control tab.
Select Insert.
Type the number of the slot and port or the VLAN ID that you want to add as a member or select Port or Vlan and then select a port or VLAN from the graphic display.
Select ... near PrefixListId.
Select a prefix list ID.
Select OK.
Type the host address and host mask.
Select the action mode that you want for the specified host.
Select Insert.

Access Control Field Descriptions

Use the data in the following table to use the Access Control tab.


Name	Description
IfIndex	Specifies the interface where the IGMP entry is enabled.
PrefixListId	Specifies a numeric string that identifies the prefix list.
HostAddr	Specifies the IP address of the host.
HostMask	Specifies the subnet mask that determines the host or hosts covered by this configuration. You can use the host subnet mask to restrict access to a portion of the network for the host.
PrefixListName	Specifies the name of the prefix list.
ActionMode	Specifies the action for the host identified by HostAddr. The options include the following: denied IP multicast transmitted traffic (deny-tx). denied IP multicast received traffic (deny-rx). denied both IP multicast transmitted and received traffic (deny-both). allowed IP multicast transmitted traffic (allow-only-tx). allowed IP multicast received traffic (allow-only-rx). allowed both IP multicast transmitted and received traffic (allow-only-both).