Configuring a Multicast Forwarding Boundary

A multicast forwarding boundary can be configured for a multicast group on a multicast FW interface to limit the range within which multicast data for the multicast group can be forwarded.

Prerequisites

Before configuring a multicast forwarding boundary, complete the following tasks:

Configuring a unicast routing protocol
Configuring basic multicast functions

Context

A multicast forwarding boundary can be defined in either of the following modes:

Based on a multicast group address range: A multicast forwarding boundary is configured based on group addresses and mask lengths that are configured on an interface. An interface on which a multicast forwarding boundary is configured filters multicast information based only on multicast group addresses.
Based on a multicast boundary policy: A multicast forwarding boundary is configured based on an ACL on an interface. An interface on which a multicast forwarding boundary is configured filters multicast information based on source addresses, group addresses, or multicast boundary policies in one direction.

Procedure

Access the system view.
system-view
Configure a basic or an advanced ACL as required.
- Configure a basic ACL.
  1. Run the acl [ number ] acl-number [ vpn-instance vpn-instance-name ] command to create a basic ACL and access its view.
  2. Run the rule [ rule-id ] { deny | permit } source { source-ip-address { 0 | source-wildcard } | address-set address-set-name | any } command to configure rules for the basic ACL.
- Configure an advanced ACL.
  1. Run the acl [ number ] acl-number [ vpn-instance vpn-instance-name ] command to create an advanced ACL and access its view.
  2. Run the rule [ rule-id ] { permit | deny } protocol [ source { source-ip-address { 0 | source-wildcard } | address-set address-set-name | any } | destination { destination-ip-address { 0 | destination-wildcard } | address-set address-set-name | any } ] ^* command to configure rules for the advanced ACL.
If a basic ACL is used, run the rule command and set the source parameter to a multicast group address.

If an advanced ACL is used, run the rule command, set the source parameter to the source address of multicast packets, and set the destination parameter to a multicast group address.
Return to the system view.
quit
Access the interface view.
interface interface-type interface-number
Configure a multicast forwarding boundary.
multicast boundary group-address { mask | mask-length }