RE: Client/PC Based Multicast Filtering

From: Salau, Yemi (yemi.salau@siemens.com)
Date: Thu Sep 20 2007 - 15:04:16 ART

Hello mate,
 
I thought about this also, but this command basically tells what group I
can/can't join... Doesn't tell who can/can't join a group ... This
command is slightly similar to ip igmp access-group on Layer 3 Boxes.

Also, I'm slightly put off on this methodology, even if it fulfill my
need, I will have to deploy this on all the switches and all the ports
within the global network.

Thanks for mentioning this though ... Any other ideas?
 
Many Thanks
 
Yemi Salau
 
________________________________

From: Ben [mailto:bmunyao@gmail.com]
Sent: Thursday, September 20, 2007 6:26 PM
To: Salau, Yemi
Cc: Matthew Long; Joseph Brunner; ccielab@groupstudy.com
Subject: Re: Client/PC Based Multicast Filtering

Hi Yemi

Sounds like the solution lies with IGMP profiles on a switch.

ip igmp profile 10
 deny
 range 224.24.24.24
int f0/5
  ip igmp filter 10

f0/5 would be the L2 interface where the PC is connected.

HTH

Ben

On 9/20/07, Salau, Yemi <yemi.salau@siemens.com> wrote:

        I was faced with a task to prevent some PCs(Clients) from
joining 2
        particular multicast groups. IGMPv2 is in use ...
        
        How would you go about this, considering the fact that there are
some
        Clients in same subnet, connected at same layer2 point on the
network,
        who should be able to receive the multicast traffic.
        
        I was thinking of ip igmp access-group, but this will only
prevent (S,G)
        feeds, as in, it only controls access based on the source of the
feed
        and also the destination multicast address. But my headache is
around
        prevent certain PCs from joining certain groups, if I implement
ip igmp
        access-group, all pcs would potentially be prevented from
joining the
        group.
        
        Another one I'm thinking is mac access-list, but then I will
have to do
        this on all vlans across 3 different sites. What's the simplest
way of
        doing this?
        
        Any Fresh ideas will be appreciated as my head is just too hot
at the
        moment!
        
        Many Thanks
        
        Yemi Salau
        
        

This archive was generated by hypermail 2.1.4 : Sat Oct 06 2007 - 12:01:14 ART