From: Moin, Imran (imoin@virtela.net)
Date: Tue Aug 29 2006 - 00:38:01 ART
I believe that both these solutions are correct. You can either permit
just one group or deny all other groups.
Checkout this link:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12114ea1/375
0scg/swigmp.htm#1055584
Here is an excerpt from this article:
<snip>
This example shows how to create IGMP profile 4 allowing access to the
single IP multicast address and how to verify the configuration. If the
action was to deny (the default), it would not appear in the show ip
igmp profile output display.
Switch(config)# ip igmp profile 4
Switch(config-igmp-profile)# permit
Switch(config-igmp-profile)# range 229.9.9.0
Switch(config-igmp-profile)# end
Switch# show ip igmp profile 4
IGMP Profile 4
permit
range 229.9.9.0 229.9.9.0
</snip>
HTH........
- Imran.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Plukkie
Sent: Saturday, August 26, 2006 2:24 AM
To: Guzman, Chris; ccielab
Subject: Re: IGMP profile deny
Just put the range(s) you want to permit, rest will be dropped.
On 8/25/06, Guzman, Chris <Chris.Guzman@mckesson.com> wrote:
>
> What about if you were asked to only PERMIT one group and DENY all
> else would it be
>
>
>
> ip igmp profile 1
>
> permit
> range 239.1.1.1 239.1.1.1
>
> or
>
>
>
> ip igmp profile 1
>
> deny
> range 224.0.0.0 239.1.1.0
>
> range 239.1.1.2 239.255.255.255
>
>
>
>
> I am thinking it would be the second, since in the first we are not
> explicitly denying the rest of the range. I will try to test
>
>
>
>
>
>
> ------------------------------
>
> *From:* Plukkie [mailto:plukkie@gmail.com]
> *Sent:* Friday, August 25, 2006 12:37 AM
> *To:* Guzman, Chris
> *Cc:* xprtofnet; ccielab
> *Subject:* Re: IGMP profile deny
>
>
>
> I tested this one out.
>
> It seems to be that the default action is indeed drop for the
> addresses you specifie!, but the unspecified will then be permitted.
>
> This makes sense, cause in a filter you can only define once an action
> (drop or permit).
>
>
>
> so permit range XX - YY will permit ONLY XX - YY.
>
> and drop range XX - YY will deny XX - YY range, but permit rest.
>
>
>
> On 8/25/06, *Guzman, Chris* <Chris.Guzman@mckesson.com> wrote:
>
> I thought the default action was to deny, so in order to permit the
> other groups you would need to exclude the group that you wanted to
> deny from the permit range...
>
> Permit
> Range 224.0.0.0 239.1.1.0
> Range 239.1.1.2 239.255.255.255
>
>
> I am not 100% sure on this, so I would welcome any comments...
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto: nobody@groupstudy.com] On Behalf
> Of xprtofnet
> Sent: Tuesday, August 22, 2006 8:37 PM
> To: ccielab
> Subject: IGMP profile deny
>
> two questions:
>
> Is this the correct config to deny 1 group say
> 239.1.1.1
> on a switch port f0/9
>
>
> !
> ip igmp profile 1
> range 239.1.1.1 239.1.1.1
> !
> interface FastEthernet0/9
> switchport mode dynamic desirable
> ip igmp filter 1
> end
>
> 2nd:
> how about if i want to permit all others? is that automatically going
> to allow all other groups on this port ?
>
> Thank you,
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:59 ART