SGS-6341-Series User Manual

38.2.3 DCSCM Configuration Examples
1． Source Control
In order to prevent an Edge Switch from putting out multicast data ad asbitsium, we configure
Edge Switch so that only the switch at port Ethernet1/5 is allowed to transmit multicast, and the
data group must be 225.1.2.3. Also, switch connected up to port Ethernet1/10 can transmit
multicast data without any limit, and we can make the following configuration.
EC(config)#access-list 5000 permit ip any host 225.1.2.3
EC(config)#access-list 5001 permit ip any
EC(config)#ip multicast source-control
EC(config)#interface ethernet1/5
EC(Config-If-Ethernet1/5)#ip multicast source-control access-group 5000
EC(config)#interface ethernet1/10
EC(Config-If-Ethernet1/10)#ip multicast source-control access-group 5001
2． Destination Control
We want to limit users with address in 10.0.0.0/8 network segment from entering the group of
238.0.0.0/8, so we can make the following configuration:
Firstly enable IGMP snooping in the VLAN it is located (Here it is assumed to be in VLAN2)
EC(config)#ip igmp snooping
EC(config)#ip igmp snooping vlan 2
After that, configure relative destination control access-list, and configure specified IP address
to use that access-list.
Switch(config)#access-list 6000 deny ip any 238.0.0.0 0.255.255.255
Switch(config)#access-list 6000 permit ip any
Switch(config)#multicast destination-control
Switch(config)#ip multicast destination-control 10.0.0.0/8 access-group 6000
In this way, users of this network segment can only join groups other than 238.0.0.0/8.
3． Multicast strategy
Server 210.1.1.1 is distributing important multicast data on group 239.1.2.3, we can configure
on its join-in switch as follows:
Switch(config)#ip multicast policy 210.1.1.1/32 239.1.2.3/32 cos 4
38-32
User’s Manual of SGS-6341 series