From: Koen Zeilstra (koen@koenzeilstra.com)
Date: Wed May 17 2006 - 03:38:52 ART
Hi there,
I labbed it up. Best thing to do anyways I guess...
SW1
ip igmp filter
ip igmp profile 1
deny (=default)
range 239.2.2.2 239.2.2.2
int g1/0/1
ip igmp filter 1
!
On a router (without PIM!) I did a join 239.1.1.1 and 239.2.2.2
With debug ip igmp filter I see:
16:14:25: IGMPFILTER: igmp_filter_process_pkt(): checking group 239.1.1.1
from Gi1/0/1: permit
16:14:26: IGMPFILTER: igmp_filter_process_pkt(): checking group 239.2.2.2
from Gi1/0/1: deny
Then I changed the profile to permit and joined to groups again:
16:15:46: IGMPFILTER: igmp_filter_process_pkt(): checking group 239.1.1.1
from Gi1/0/1: deny
W2C1#
16:15:47: IGMPFILTER: igmp_filter_process_pkt(): checking group 239.2.2.2
from Gi1/0/1: permit
So to sum up:
A permit action permits the specified range with an implicit deny.
A deny action denies the specified range with an implicit permit.
Hope this helps.
regards,
Koen
-----------------------
Ask your boss to reconsider -- it's so difficult to take "Go to hell"
for an answer.
On Tue, 16 May 2006, Koen Zeilstra wrote:
| Exactly. So why would there be a deny action then? If default would be
| deny and you specifiy I range to be denied. That would be denied anyway?
|
|
|
| -----------------------
| I predict that today will be remembered until tomorrow!
|
| On Tue, 16 May 2006, Bajo wrote:
|
| | Yes, there is an implicit deny (like any ACL). The problem I have with igmp
| | profile is, u can not have deny/permit combo (say deny xxxx followed by
| | permit yyyy). Does not make sense to use an explicit deny while they do not
| | allow u a permit to be followed.
| |
| | On 5/16/06, Koen Zeilstra <koen@koenzeilstra.com> wrote:
| | >
| | > so if you use the deny action (default) the range will be denied and
| | > anything else will pass trough?
| | >
| | > i.e. there is no implicit deny any?
| | >
| | > -----------------------
| | > Andrea: Unhappy the land that has no heroes.
| | > Galileo: No, unhappy the land that _____needs heroes.
| | > -- Bertolt Brecht, "Life of Galileo"
| | >
| | > On Tue, 16 May 2006, Bajo wrote:
| | >
| | > | Hi Koen,
| | > |
| | > | It is both :)
| | > |
| | > | A profile will have one or more ranges and it performs either permit or
| | > | deny(remember deny will not show up under sh run) on the specified
| | > range.
| | > |
| | > | Pls correct me if I am wrong.
| | > |
| | > |
| | > http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_1_12/config/mu
| | > | lti.htm
| | > |
| | > |
| | > | On 5/16/06, Koen Zeilstra <koen@koenzeilstra.com> wrote:
| | > | >
| | > | > Hi Group,
| | > | >
| | > | > I noticed that this topic has been discussed before however afaik no
| | > clear
| | > | > answers were to be found.
| | > | >
| | > | > If one wants to drop igmp join messages voor the multicast group
| | > | > 239.100.100.5 on f0/10 of a 3550.
| | > | >
| | > | >
| | > | >
| | > | > Option 1:
| | > | >
| | > | > ip igmp filter
| | > | > ip igmp profile 1
| | > | > permit
| | > | > range 224.0.0.0 239.100.100.4
| | > | > range 224.100.100.6 239.255.255.255
| | > | > !
| | > | >
| | > | > int f0/10
| | > | > ip igmp filter 1
| | > | > !
| | > | >
| | > | >
| | > | > Option 2:
| | > | > ip igmp filter
| | > | > ip igmp profile 1
| | > | > ! deny (which is default)
| | > | > range 239.100.100.5 239.100.100.5
| | > | > !
| | > | >
| | > | > int f0/10
| | > | > ip igmp filter 1
| | > | > !
| | > | >
| | > | > The question rather is the following. Does the action (permit/deny)
| | > | > specify the DEFAULT ACTION or the ACTION for the SPECIFIED range?
| | > | >
| | > | > thanks,
| | > | >
| | > | > Koen
| | > | >
| | > | >
| | > _______________________________________________________________________
| | > | > Subscription information may be found at:
| | > | > http://www.groupstudy.com/list/CCIELab.html
| | > | >
| | > |
| | > |
| | > |
| | > | --
| | > | Kind Regards,
| | > |
| | > | Bajo
| | > |
| | > | _______________________________________________________________________
| | > | Subscription information may be found at:
| | > | http://www.groupstudy.com/list/CCIELab.html
| | > |
| | >
| |
| |
| |
| | --
| | Kind Regards,
| |
| | Bajo
| |
|
| _______________________________________________________________________
| Subscription information may be found at:
| http://www.groupstudy.com/list/CCIELab.html
|
This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:21 ART