Dell Force10 C150 Configuration Manual page 667

Prevent a Host from Joining a Group
You can prevent a host from joining a particular group by blocking specific IGMP reports. Create an
extended access list containing the permissible source-group pairs. Use the command
from INTERFACE mode to apply the access li
access-list-name
Note: For rules in IGMP access lists,
For IGMPv2, use the keyword
in advance who the source is for the group in which they are interested.
FTOS Behavior: Do not enter the command
you do, upon entering your first deny rule, FTOS clears multicast routing table and re-learns all groups,
even those not covered by the rules in the access-list, because there is an implicit deny all rule at the
end of all access-lists. Therefore, configuring an IGMP join request filter in this order might result in
data loss. If you must enter the command
FTOS from clearing the routing table by entering a permit any rule with high sequence number before
you enter any other rules.
In Figure 30-2, VLAN 400 is configured with an access list to permit only IGMP reports for group
239.0.0.1. Though Receiver 2 sends a membership report for groups 239.0.0.1 and 239.0.0.2, a multicast
routing table entry is created only for group 239.0.0.1. VLAN 300 has no access list limiting Receiver 1, so
both IGMP reports are accepted, and two corresponding entries are created in the routing table.
is the multicast source, not the source of the IGMP packet.
source
for (as shown in
any
source
ip igmp access-group
ip igmp access-group
st.
Figure 30-2), since IGMPv2 hosts do not know
before creating the access-list. If
before creating the access-list, prevent
ip igmp access-group
Multicast Features | 667