From: Plukkie (plukkie@gmail.com)
Date: Sat Aug 26 2006 - 05:24:19 ART
Just put the range(s) you want to permit, rest will be dropped.
On 8/25/06, Guzman, Chris <Chris.Guzman@mckesson.com> wrote:
>
> What about if you were asked to only PERMIT one group and DENY all else
> would it be
>
>
>
> ip igmp profile 1
>
> permit
> range 239.1.1.1 239.1.1.1
>
> or
>
>
>
> ip igmp profile 1
>
> deny
> range 224.0.0.0 239.1.1.0
>
> range 239.1.1.2 239.255.255.255
>
>
>
>
> I am thinking it would be the second, since in the first we are not
> explicitly denying the rest of the range. I will try to test
>
>
>
>
>
>
> ------------------------------
>
> *From:* Plukkie [mailto:plukkie@gmail.com]
> *Sent:* Friday, August 25, 2006 12:37 AM
> *To:* Guzman, Chris
> *Cc:* xprtofnet; ccielab
> *Subject:* Re: IGMP profile deny
>
>
>
> I tested this one out.
>
> It seems to be that the default action is indeed drop for the
> addresses you specifie!, but the unspecified will then be permitted.
>
> This makes sense, cause in a filter you can only define once an action
> (drop or permit).
>
>
>
> so permit range XX - YY will permit ONLY XX - YY.
>
> and drop range XX - YY will deny XX - YY range, but permit rest.
>
>
>
> On 8/25/06, *Guzman, Chris* <Chris.Guzman@mckesson.com> wrote:
>
> I thought the default action was to deny, so in order to permit the
> other groups you would need to exclude the group that you wanted to deny
> from the permit range...
>
> Permit
> Range 224.0.0.0 239.1.1.0
> Range 239.1.1.2 239.255.255.255
>
>
> I am not 100% sure on this, so I would welcome any comments...
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto: nobody@groupstudy.com] On Behalf Of
> xprtofnet
> Sent: Tuesday, August 22, 2006 8:37 PM
> To: ccielab
> Subject: IGMP profile deny
>
> two questions:
>
> Is this the correct config to deny 1 group say
> 239.1.1.1
> on a switch port f0/9
>
>
> !
> ip igmp profile 1
> range 239.1.1.1 239.1.1.1
> !
> interface FastEthernet0/9
> switchport mode dynamic desirable
> ip igmp filter 1
> end
>
> 2nd:
> how about if i want to permit all others? is that
> automatically going to allow all other groups on this
> port ?
>
> Thank you,
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:58 ART