Edge-Core ECS4610-24F, Management Manual

Page: 907 / 1154

C
HAPTER
39
| Multicast Filtering Commands
IGMP Snooping
– 907 –
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
IGMP snooping querier is not supported for IGMPv3 snooping (see ip
igmp snooping version ).
◆
If enabled, the switch will serve as querier if elected. The querier is
responsible for asking hosts if they want to receive multicast traffic.
E
XAMPLE
Console(config)#ip igmp snooping querier
Console(config)#
ip igmp snooping
router-alert-option-
check
This command discards any IGMPv2/v3 packets that do not include the
Router Alert option. Use the no form to ignore the Router Alert Option
when receiving IGMP messages.
S
YNTAX
[ no ] ip igmp snooping router-alert-option-check
D
EFAULT
S
ETTING
Disabled
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
As described in Section 9.1 of RFC 3376 for IGMP Version 3, the Router
Alert Option can be used to protect against DOS attacks. One common
method of attack is launched by an intruder who takes over the role of
querier, and starts overloading multicast hosts by sending a large number
of group-and-source-specific queries, each with a large source list and the
Maximum Response Time set to a large value.
To protect against this kind of attack, (1) routers should not forward
queries. This is easier to accomplish if the query carries the Router Alert
option. (2) Also, when the switch is acting in the role of a multicast host
(such as when using proxy routing), it should ignore version 2 or 3 queries
that do not contain the Router Alert option.
E
XAMPLE
Console(config)#ip igmp snooping router-alert-option-check
Console(config)#