H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – Multicast
H3C S7500 Series Ethernet Switches
Chapter 2 IGMP Snooping Configuration
Commands
2-8
An ACL rule defines a multicast address or a multicast address range (for example
224.0.0.1 to 239.255.255.255) and is used to:
z Allow the port(s) to join only the multicast group(s) defined in the permit rule.
z Inhibit the port(s) from joining the multicast group(s) defined in the deny rule.
Note:
z A port can belong to multiple VLANs. But for each VLAN on the port, you can
configure only one ACL.
z If the port does not belong to the specified VLAN, the filtering ACL configured for the
VLAN does not take effect on the port.
z If no ACL rule is configured in the command, the system will reject the multicast
packets addressed to all the multicast groups.
z Since most devices broadcast unknown multicast packets, this feature is often used
together with the unknown multicast packet drop feature to prevent multicast
streams from being broadcasted to a filtered port as unknown multicast streams.
Examples
# Configure ACL 2000 to allow users on Ethernet 1/0/1 to access the multicast streams
in multicast groups ranging from 225.0.0.0 to 225.255.255.255.
z Configure ACL 2000.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
[H3C-acl-basic-2000] quit
z Create VLAN 2 and add Ethernet 1/0/1 port to VLAN 2.
[H3C] vlan 2
[H3C-vlan2] port Ethernet 1/0/1
Gigabit[H3C-vlan2] quit
z Configure ACL 2000 on Ethernet 1/0/1 to allow VLAN 2 to join only the IGMP
multicast groups defined in ACL 2000.
[H3C] interface Ethernet 1/0/1
[H3C-Ethernet1/0/1] igmp-snooping group-policy 2000 vlan 2
[H3C-Ethernet1/0/1] quit
# Configure ACL 2001 to allow users on Ethernet 1/0/2 to access the multicast streams
in any multicast group except multicast groups ranging from 225.0.0.0 to 225.0.0.255.
z Configure ACL 2001.
[H3C] acl number 2001