4000 Router Series IP Multicast Command Reference

Use undo group-policy to remove the configured global multicast group filter.

Syntax

group-policy acl-number [ vlan vlan-list ]

undo group-policy [ vlan vlan-list ]

Default

No global multicast group filter is configured. A host can join any valid multicast group.

Views

IGMP-snooping view

Predefined user roles

network-admin

Parameters

acl-number: Specifies an IPv4 basic or advanced ACL by its number in the range of 2000 to 3999. A

host can join only the multicast groups that match the permit statement in the specified ACL. The source

addresses in the basic ACL rule are the multicast group addresses specified in IGMP reports. The source

and destination addresses in the advanced ACL rule are the multicast source addresses and multicast

group addresses specified in IGMP reports, respectively. The system assumes that 0.0.0.0 is the multicast

source address of an IGMPv1 or IGMPv2 report or an IGMPv3 IS_EX and TO_EX report that does not

carry a multicast source address.

vlan vlan-list: Specifies a space-separated list of up to ten VLAN items. Each item specifies a VLAN by its

ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The VLAN ID is in the range of 1 to

4094. If this option is not specified, this command takes effect for all VLANs.

Usage guidelines

If the specified ACL does not exist or the ACL rule is null, all multicast groups are filtered out.

You can configure different ACL rules on a port in different VLANs. However, for a given VLAN, a newly

configured ACL rule overrides the existing one.

This command takes effect on the multicast groups that a port joins dynamically. If you configure the port

as a static member port for a multicast group, this command does not take effect on the multicast group.

The global configuration takes effect on all ports, but has a lower priority than the configuration made on

a specific port.

Examples

# Apply ACL 2000 as a multicast group filter for VLAN 2 so that the hosts in this VLAN can join only the

m u l t i c a s t g r o u p 2 2 5 .1.1.1.

<Sysname> system-view

[Sysname] acl number 2000

[Sysname-acl-basic-2000] rule permit source 225.1.1.1 0

[Sysname-acl-basic-2000] quit

[Sysname] igmp-snooping

[Sysname-igmp-snooping] group-policy 2000 vlan 2

Related commands

igmp-snooping group-policy