(Optional) Configuring an Interface to Join a Multicast Group in a Certain Range
When a host joins a multicast group, you can configure this function on the interface through which the multicast device is connected to the user network segment to limit the range of multicast groups that the host can join.
Procedure
- Access the system view.
- Configure a basic or an advanced ACL as needed.
Configure a basic ACL.
Configure an advanced ACL.
Run the acl [ number ] acl-number [ vpn-instance vpn-instance-name ] command to create an advanced ACL and access its view.
Run the rule [ rule-id ] { permit | deny } protocol [ source { source-ip-address { 0 | source-wildcard } | address-set address-set-name | any } | destination { destination-ip-address { 0 | destination-wildcard } | address-set address-set-name | any } ] * command to configure rules for the advanced ACL.
If a basic ACL is used, run the rule command and set the source parameter to a multicast group address.
If an advanced ACL is used, run the rule command, set the source parameter to the source address that is allowed to send multicast data to multicast groups, and set the destination parameter to a multicast group address.
- Return to the system view.
- Access the interface view.
interface interface-type interface-number
- Configure the range of multicast groups that the interface
is allowed to join.
igmp group-policy acl-number [ 1 | 2 | 3 ]
By default, the interface serves any multicast group.
- If a multicast group matches an ACL rule and the action is permit, the interface allows hosts to join this group.
- If a multicast group matches an ACL rule and the action is deny, the interface does not allow hosts to join this group.
- If a multicast group does not match any ACL rule, the interface does not allow hosts to join this group.
- If a specified ACL does not exist or does not contain rules, the interface does not allow hosts to join any multicast group.