From: Koen Zeilstra (koen@koenzeilstra.com)
Date: Tue May 16 2006 - 16:47:24 ART
Exactly. So why would there be a deny action then? If default would be
deny and you specifiy I range to be denied. That would be denied anyway?
-----------------------
I predict that today will be remembered until tomorrow!
On Tue, 16 May 2006, Bajo wrote:
| Yes, there is an implicit deny (like any ACL). The problem I have with igmp
| profile is, u can not have deny/permit combo (say deny xxxx followed by
| permit yyyy). Does not make sense to use an explicit deny while they do not
| allow u a permit to be followed.
|
| On 5/16/06, Koen Zeilstra <koen@koenzeilstra.com> wrote:
| >
| > so if you use the deny action (default) the range will be denied and
| > anything else will pass trough?
| >
| > i.e. there is no implicit deny any?
| >
| > -----------------------
| > Andrea: Unhappy the land that has no heroes.
| > Galileo: No, unhappy the land that _____needs heroes.
| > -- Bertolt Brecht, "Life of Galileo"
| >
| > On Tue, 16 May 2006, Bajo wrote:
| >
| > | Hi Koen,
| > |
| > | It is both :)
| > |
| > | A profile will have one or more ranges and it performs either permit or
| > | deny(remember deny will not show up under sh run) on the specified
| > range.
| > |
| > | Pls correct me if I am wrong.
| > |
| > |
| > http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_1_12/config/mu
| > | lti.htm
| > |
| > |
| > | On 5/16/06, Koen Zeilstra <koen@koenzeilstra.com> wrote:
| > | >
| > | > Hi Group,
| > | >
| > | > I noticed that this topic has been discussed before however afaik no
| > clear
| > | > answers were to be found.
| > | >
| > | > If one wants to drop igmp join messages voor the multicast group
| > | > 239.100.100.5 on f0/10 of a 3550.
| > | >
| > | >
| > | >
| > | > Option 1:
| > | >
| > | > ip igmp filter
| > | > ip igmp profile 1
| > | > permit
| > | > range 224.0.0.0 239.100.100.4
| > | > range 224.100.100.6 239.255.255.255
| > | > !
| > | >
| > | > int f0/10
| > | > ip igmp filter 1
| > | > !
| > | >
| > | >
| > | > Option 2:
| > | > ip igmp filter
| > | > ip igmp profile 1
| > | > ! deny (which is default)
| > | > range 239.100.100.5 239.100.100.5
| > | > !
| > | >
| > | > int f0/10
| > | > ip igmp filter 1
| > | > !
| > | >
| > | > The question rather is the following. Does the action (permit/deny)
| > | > specify the DEFAULT ACTION or the ACTION for the SPECIFIED range?
| > | >
| > | > thanks,
| > | >
| > | > Koen
| > | >
| > | >
| > _______________________________________________________________________
| > | > Subscription information may be found at:
| > | > http://www.groupstudy.com/list/CCIELab.html
| > | >
| > |
| > |
| > |
| > | --
| > | Kind Regards,
| > |
| > | Bajo
| > |
| > | _______________________________________________________________________
| > | Subscription information may be found at:
| > | http://www.groupstudy.com/list/CCIELab.html
| > |
| >
|
|
|
| --
| Kind Regards,
|
| Bajo
|
This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:21 ART