Configuring An Igmp User Access Policy; Enabling Per-Session Multicast Forwarding - HP VSR1000 Configuration Manual

Configuring an IGMP user access policy

This feature enables the BRAS to filter IGMP reports by using an ACL that specifies the multicast
groups in a user profile. Use this feature to control the multicast groups that an IGMP user can join.
You can also configure a multicast group list on the RADIUS server to achieve the same purpose. A
user can join a multicast group if the group is in the group list.
If you specify both a multicast group list and a user access policy, a user can join a multicast group
that matches either of them.
To configure an IGMP user access policy:
Step
Enter system view.
1.
Enter ISP domain view.
2.
Configure the default
3.
authorization user profile
for the current ISP domain.
Return to system view.
4.
Enter user profile view.
5.
Configure an IGMP user
6.
access policy.

Enabling per-session multicast forwarding

CAUTION:
This configuration automatically deletes the static multicast forwarding entries created by the
non-VLAN-based static member group configurations.
By default, the BRAS forwards multicast traffic on a per-interface basis. It sends only one copy of
multicast traffic to a downstream interface, and the downstream IGMP snooping device replicates
the multicast traffic to each receiver.
Command
system-view
domain isp-name
authorization-attribute
user-profile profile-name
quit
user-profile profile-name
igmp access-policy
ipv4-acl-number
50
Remarks
N/A
For more information about this
command, see Security Command
Reference.
By default, the default
authorization user profile is not
configured for an ISP domain.
The authorization user profile
configuration on the RADIUS
server takes priority over the
configuration made in an ISP
domain.
For more information about this
command, see Security Command
Reference.
N/A
For more information about this
command, see Security Command
Reference.
By default, no IGMP user access
policies exist. IGMP users are not
authorized to join any multicast
groups.
You can configure multiple IGMP
user access policies by using this
command multiple times. An IGMP
report is permitted if it matches
one of the access policies.