HP VSR1000 Configuration Manual page 75

Configure multicast access control on the BRAS:
5.
# Enable IGMP and multicast access control, and enable per-session multicast forwarding on
GigabitEthernet 1/0/5.1.
[RouterA] interface gigabitethernet 1/0/5.1
[RouterA-GigabitEthernet1/0/5.1] igmp enable
[RouterA-GigabitEthernet1/0/5.1] igmp authorization-enable
[RouterA-GigabitEthernet1/0/5.1] igmp join-by-session
[RouterA-GigabitEthernet1/0/5.1] quit
# Configure GigabitEthernet 1/0/5.2 in the same way GigabitEthernet 1/0/5.1 is configured.
(Details not shown.)
# Configure an access policy in user profile profile1 to authorize IGMP users to join multicast
groups 224.1.1.1 and 225.1.1.1.
[RouterA] acl basic 2000
[RouterA-acl-ipv4-basic-2000] rule permit source 224.1.1.1 0
[RouterA-acl-ipv4-basic-2000] rule permit source 225.1.1.1 0
[RouterA-acl-ipv4-basic-2000] quit
[RouterA] user-profile profile1
[RouterA-user-profile-profile1] igmp access-policy 2000
[RouterA-user-profile-profile1] quit
# Specify user profile profile1 for users in ISP domain isp1.
[RouterA] domain isp1
[RouterA-isp-isp1] authorization-attribute user-profile profile1
[RouterA-isp-isp1] quit
# Configure an access policy in user profile profile2 to authorize IGMP users to join multicast
groups 225.1.1.1 and 226.1.1.1.
[RouterA] acl basic 2001
[RouterA-acl-ipv4-basic-2001] rule permit source 225.1.1.1 0
[RouterA-acl-ipv4-basic-2001] rule permit source 226.1.1.1 0
[RouterA-acl-ipv4-basic-2001] quit
[RouterA] user-profile profile2
[RouterA-user-profile-profile2] igmp access-policy 2001
[RouterA-user-profile-profile2] quit
# Specify user profile profile2 for users in ISP domain isp2.
[RouterA] domain isp2
[RouterA-isp-isp2] authorization-attribute user-profile profile2
[RouterA-isp-isp2] quit
Verifying the configuration
# Display authorized IGMP user information on Router A after Host A and Host C log in.
[RouterA] display igmp user-authorization
Authorized users in total: 2
User name: user1@isp1
Access type: IPoE
Interface: Multicast-UA1
Access interface: GigabitEthernet1/0/5.1
VLAN ID: 1
Second VLAN ID: 2
Maximum programs for order: 4
67