From: Tom Holloway (Tom_holloway@xxxxxxxxxxxxxx)
Date: Mon Aug 06 2001 - 13:21:39 GMT-3
remember access lists are only applied to traffic transiting the router not
originating in the router!!!
cheers Tom
> -----Original Message-----
> From: Piperw222@aol.com [SMTP:Piperw222@aol.com]
> Sent: Monday, August 06, 2001 4:40 PM
> To: ccielab@groupstudy.com
> Subject: Muticast boundry filtering
>
> I have placed a multicast boundary filter going out of r3. r4 is the hub
> on
> frame relay and r3,r5,r6 are spokes. The vlans on each router are joining
> group 224.8.8.4,224.8.8.5, 224.8.8.6, 224.8.8.3 respectively. I am trying
> to
> filter so that r3 can ping all groups except r4. I have placed a boundary
> filter on s0 denying 224.8.8.4 and permitting all others. the debug output
> on
> r3 shows that packets were denied from 224.8.8.4 however when I ping the
> group I do get a reply.
> Below is the output from various debug and show commands on r3
>
> ----------------
>
> 00:25:02: %SEC-6-IPACCESSLOGS: list 10 permitted 224.0.1.40 1 packet
> 00:25:14: %SEC-6-IPACCESSLOGS: list 10 permitted 224.8.8.6 1 packet
> 00:25:18: %SEC-6-IPACCESSLOGS: list 10 permitted 224.8.8.3 1 packet
> 00:30:02: %SEC-6-IPACCESSLOGS: list 10 denied 224.8.8.4 5 packets
>
>
>
> r3#ping 224.8.8.4
>
> Type escape sequence to abort.
> Sending 1, 100-byte ICMP Echos to 224.8.8.4, timeout is 2 seconds:
>
> Reply to request 0 from 170.150.150.4, 64 ms
>
> --------------------
>
> Standard IP access list 10
> deny 224.8.8.4 log
> permit any log
>
> --------------------
> r3#sh ip pim rp
> Group: 224.0.1.40
> Group: 224.8.8.3, RP: 170.150.6.1, v2, uptime 00:02:57, expires never
> Group: 224.8.8.4, RP: 170.150.6.1, v2, uptime 00:02:50, expires 00:00:09
> Group: 224.8.8.6, RP: 170.150.4.1, v2, uptime 00:02:05, expires never
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:46 GMT-3