[c-nsp] Preventing host with lower ip to become IGMP querier

Tarko Tikan tarko at lanparty.ee
Mon Oct 25 14:35:42 EDT 2010


hey,

> Forgot to say, it's Cisco 3560.

What you are looking for is called "multicast router guard"

http://www.cisco.com/web/about/security/intelligence/multicast_toolkit.html

I've pushed cisco to make it available on platforms smaller than 6500 but no success so far. Their general reasoning is that if you deal with insecure endpoints, use MVR.

-- 
tarko


More information about the cisco-nsp mailing list