Configuring multicast access control for an IGMP Ethernet port

Configure multicast access control for an IGMP Ethernet port to restrict access to certain multicast streams and to protect multicast streams from spoofing (injecting data to the existing streams).

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Configure multicast access control:

    ip igmp access-list WORD<1–64> {A.B.C.D/X} <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>

  3. Change an existing access list:

    ip igmp access-list WORD<1–64>> {A.B.C.D/X} mode <deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both>

Variable definitions

Use the data in the following table to use the ip igmp access-list command

Variable

Value

{A.B.C.D/X}

Creates an access control group entry for a specific IGMP interface. Specify the IP address of the host and the subnet mask used to determine the host or hosts covered by this configuration. You can use the host subnet mask to restrict access to a portion of the network for the host.

deny-tx|deny-rx|deny-both|allow-only-tx|allow-only-rx|allow-only-both

Indicates the action for the specified IGMP interface. For example, if you specify deny-both, the interface denies both transmitted and received traffic

mode

Changes the access control group configuration.

WORD<1–64>

Specifies the name of the access list from 1–64 characters.