+7(495) 797-3311 www.qtech.ruМосква, Новозаводская ул., 18, стр. 1245> access-group <6000-7999> control uses to specified IP address/netmask, the NO form cancels theconfiguration.Multicast Strategy ConfigurationMulticast Strategy uses the manner of specifying priority for specified multicast data to achieveand guarantee the effects the specific user requires. It is noticeable that multicast data can notget a special care all along unless the data are transmitted at TRUNK port. The configuration isvery simple, it has only one command, i.e. to set priority for the specified multicast. Thecommands are as follows:Command ExplanationGlobal Configuration Mode[no] ip multicast policy <IPADDRESS/M> cos <priority>Configure multicast strategy, specifypriority for sources and groups inspecific range, and the range is <0-7>.34.2.3 DCSCM Configuration ExamplesSource ControlIn order to prevent an Edge Switch from putting out multicast data ad asbitsium, we configureEdge Switch so that only the switch at port Ethernet1/5 is allowed to transmit multicast, andthe data group must be 225.1.2.3. Also, switch connected up to port Ethernet1/10 can transmitmulticast data without any limit, and we can make the following configuration.EC(config)#access-list 5000 permit ip any host 225.1.2.3EC(config)#access-list 5001 permit ip any anyEC(config)#ip multicast source-controlEC(config)#interface ethernet1/5EC(Config-If-Ethernet1/5)#ip multicast source-control access-group 5000EC(config)#interface ethernet1/10EC(Config-If-Ethernet1/10)#ip multicast source-control access-group 5001Destination ControlWe want to limit users with address in 10.0.0.0/8 network segment from entering the group of238.0.0.0/8, so we can make the following configuration:Firstly enable IGMP snooping in the VLAN it is located (Here it is assumed to be in VLAN2)EC(config)#ip igmp snoopingEC(config)#ip igmp snooping vlan 2After that, configure relative destination control access-list, and configure specified IPaddress to use that access-list.Switch(config)#access-list 6000 deny ip any 238.0.0.0 0.255.255.255
