Manual

[phone] www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
281
2. Destination Control Configuration
Like source control configuration, destination control configuration also has three steps.
First, enable destination control globally. Since destination control need to prevent
unauthorized user from receiving multicast data, the switch won’t broadcast the multicast data
it received after configuring global destination control. Therefore, It should be avoided to
connect two or more other Layer 3 switches in the same VLAN on a switch on which
destination control is enabled. The configuration commands are as follows:
Command
Explanation
Global Configuration Mode
[no] multicast destination-control
(required)
Globally enable destination control. The
no operation of this command will
globally disable destination control. All of
the other configuration can only take
effect after globally enabled. The next is
configuring destination control rules,
which are similar.
Next is to configure destination control rule. It is similar to source control, except to use ACL
No. of 6000-7999.
Command
Explanation
Global Configuration Mode
[no] access-list <6000-7999> {deny|permit} ip
{{<source> <source-wildcard>}|{host-source
<source-host-ip>}|any-source} {{<destination>
<destination-wildcard>}|{host-destination
<destination-host-ip>}|any-destination}
The rule used to configure destination
control. This rule does not take effect
until it is applied to source IP or VLAN-
MAC and port. Using the NO form of it
can delete specified rule.
The last is to configure the rule to specified source IP, source VLAN MAC or specified port. It is
noticeable that, due to the above situations, these rules can only be used globally in enabling
IGMP-SNOOPING. And if IGMP-SNOOPING is not enabled, then only source IP rule can be
used under IGMP Protocol. The configuration commands are as follows:
Command
Explanation
Port Configuration Mode
[no] ip multicast destination-control access-
group <6000-7999>
Used to configure the rules destination
control uses to port, the NO form cancels
the configuration.
Global Configuration Mode