Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

Dell EMC Configuration Guide for the S4048T–ON System 9.14.2.4

PDF

Preventing a Host from Joining a Group

You can prevent a host from joining a particular group by blocking specific IGMP reports using an extended access list containing the permissible source-group pairs.

NOTE For rules in IGMP access lists, source is the multicast source, not the source of the IGMP packet. For IGMPv2, use the keyword any for source (as shown in the following example) because the IGMPv2 hosts do not know in advance who the source is for the group in which they are interested.

To apply the access list, use the following command.

Apply the access list.
INTERFACE mode
ip igmp access-group access-list-name
Dell EMC Networking OS Behavior: Do not enter the ip igmp access-group command before creating the access-list. If you do, after entering your first deny rule, the Dell EMC Networking OS clears the multicast routing table and re-learns all groups, even those not covered by the rules in the access-list, because there is an implicit deny all rule at the end of all access-lists. Therefore, configuring an IGMP join request filter in this order might result in data loss. If you must enter the ip igmp access-group command before creating the access-list, prevent the Dell EMC Networking OS from clearing the routing table by entering a permit any rule with a high sequence number before you enter any other rules.

In the following example, virtual local area network (VLAN) 400 is configured with an access list to permit only IGMP reports for group 239.0.0.1. Though Receiver 2 sends a membership report for groups 239.0.0.1 and 239.0.0.2, a multicast routing table entry is created only for group 239.0.0.1. VLAN 300 has no access list limiting Receiver 1, so both IGMP reports are accepted and two corresponding entries are created in the routing table.

Figure 1. Preventing a Host from Joining a Group
Illustration of preventing a host from joining a group.

The following table lists the location and description shown in the previous illustration.

Table 1. Preventing a Host from Joining a Group — DescriptionPreventing a Host from Joining a Group
LocationDescription
1/21
  • Interface TenGigabitEthernet 1/21
  • ip pim sparse-mode
  • ip address 10.11.12.1/24
  • no shutdown
1/31
  • Interface TenGigabitEthernet 1/31
  • ip pim sparse-mode
  • ip address 10.11.13.1/24
  • no shutdown
2/1
  • Interface TenGigabitEthernet 2/1
  • ip pim sparse-mode
  • ip address 10.11.1.1/24
  • no shutdown
2/11
  • Interface TenGigabitEthernet 2/11
  • ip pim sparse-mode
  • ip address 10.11.12.2/24
  • no shutdown
2/31
  • Interface TenGigabitEthernet 2/31
  • ip pim sparse-mode
  • ip address 10.11.23.1/24
  • no shutdown
3/1
  • Interface TenGigabitEthernet 3/1
  • ip pim sparse-mode
  • ip address 10.11.5.1/24
  • no shutdown
3/11
  • Interface TenGigabitEthernet 3/11
  • ip pim sparse-mode
  • ip address 10.11.13.2/24
  • no shutdown
3/21
  • Interface TenGigabitEthernet 3/21
  • ip pim sparse-mode
  • ip address 10.11.23.2/24
  • no shutdown
Receiver 1
  • Interface VLAN 300
  • ip pim sparse-mode
  • ip address 10.11.3.1/24
  • untagged TenGigabitEthernet1/1
  • no shutdown
Receiver 2
  • Interface VLAN 400
  • ip pim sparse-mode
  • ip address 10.11.4.1/24
  • untagged TenGigabitEthernet 1/2
  • ip igmp access-group igmpjoinfilR2G2
  • no shutdown

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\