From: Scott Morris (swm@emanon.com)
Date: Thu Aug 26 2004 - 15:50:59 GMT-3
Right... But 239 is part of the 224 range with that mask!
224.0.0.0 15.255.255.255 permits from 224.0.0.0 through 239.255.255.255
So if you don't want the private multicasts to be maintained by that RP, it
would be necessary to deny the specific group first (the /8) before
permitting the general group (the /4).
Binary stuff...
11100000 = 224
00001111 = the mask
1110xxxx = allowed
11101111 = 239
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIP, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
gladston@br.ibm.com
Sent: Thursday, August 26, 2004 1:49 PM
To: ccielab@groupstudy.com
Subject: Re: RE: Multicast with Multiple RP
Because of the implicit "deny any" at the end of access-list 1.
But it sounds I am missing something here.
------------------Original
Why would that range be denied by default?
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIP, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
gladston@br.ibm.com
Sent: Thursday, August 26, 2004 10:23 AM
To: ccielab@groupstudy.com
Subject: Multicast with Multiple RP
Is there any reason to explicity deny 239.0.0.0?
(considering that it would be denied anyway by default)
=========================
example from http://www.cisco.com/warp/public/105/48.html#autowithmult
RP 2 Configuration
ip multicast-routing
interface loopback0
ip address <address> <mask>
ip pim sparse-dense-mode
ip pim send-RP-announce loopback0 scope 16 group-list 1 ip pim
send-RP-discovery scope 16
access-list 1 deny 239.0.0.0 0.255.255.255
access-list 1 permit 224.0.0.0 15.255.255.255
=============================
This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:49 GMT-3