H3C S3600 Series Command Manual page 12

Command Manual – Multicast
H3C S3600 Series Ethernet Switches-Release 1510
that the users can access. With this function, you can treat different VoD users in
different ways by allowing them to access the multicast streams in different multicast
groups.
In practice, when a user orders a multicast program, an IGMP host report message is
generated. When the message arrives at the switch, the switch examines the multicast
filtering ACL configured on the access port to determine if the port can join the
corresponding multicast group or not. If yes, it adds the port to the forward port list of
the multicast group; if not, it drops the IGMP host report message and does not forward
the corresponding data stream to the port. In this way, you can control the multicast
streams that users can access.
An ACL rule defines a multicast address or a multicast address range (for example
224.0.0.1 to 239.255.255.255) and is used to:
Allow the port(s) to join only the multicast group(s) defined in the rule by a permit
statement.
Inhibit the port(s) from joining the multicast group(s) defined in the rule by a deny
statement.
Note:
One port can belong to multiple VLANs. But for each VLAN on the port, you can
configure only one ACL.
If no ACL rule is configured or the port does not belong to the specified VLAN, the
filter ACL you configured does not take effect on the port.
Since most devices broadcast unknown multicast packets, this function is often
used together with the unknown multicast packet drop function to prevent multicast
streams from being broadcast to a filtered port as unknown multicast packets.
Example
# Configure ACL 2000 to allow users under Ethernet1/0/1 to access the multicast
streams in groups 225.0.0.0 to 225.255.255.255.
Configure ACL 2000.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
[H3C-acl-basic-2000] quit
Create VLAN 2 and add Ethernet1/0/1 to VLAN 2.
[H3C] vlan 2
[H3C-vlan2] port Ethernet 1/0/1
Chapter 1 IGMP Snooping Configuration
1-9
Commands