[c-nsp] problems filtering multicast]

William willay at gmail.com
Thu Nov 6 05:58:51 EST 2008


Thanks James this worked perfectly!

Cheers.

W

2008/11/5 James Slepicka <cisco-nsp at slepicka.net>:
> use the ip multicast boundary command:
> http://www.cisco.com/en/US/docs/ios/12_2/ipmulti/command/reference/1rfmult1.html#wp1058494
>
> e.g.
> ip access-l standard mcast_boundary_vl999
> permit 224.9.9.9
>
> int vl999
> ip multicast boundary mcast_boundary_vl999
>
> James
>
> William wrote:
>>
>> Hi,
>>
>> I'm running multicast routing with sparse-dense-mode and I'd like to
>> filter out some of the addresses, I've created a standard access list
>> permitting the multicast addresses i want to be routed out and then a
>> deny any at the end.
>>
>> I've applied it to the interface using the ip igmp access-group
>> <ACLNAME> command but it doesn't seem to be affective, the end hosts
>> are still receiving the multicast streams which i've attempted to
>> filter out.
>>
>> The hardware is a 6500 (catos) with a sup2, the configuration looks
>> like so on the first switch:
>>
>> interface vlan999
>> ip address 192.168.99.254255.255.255.0
>> ip pim sparse-dense-mode
>> ip igmp access-group multicast
>>
>>
>>  ip access-list standard multicast
>>  permit 239.255.1.1
>>  deny   any
>>
>> The end host is on a 3750, I tried applying the access-list and ip
>> igmp access-group statement to the vlan interface where the end host
>> is and the multicast traffic that I wish to be filtered is still
>> coming over.
>>
>> Am I doing something terribly wrong here for it not to work?
>>
>> Thank you for your time.
>>
>> W
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list