Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 960 / 2620

960 ExtremeWare 7.7 Command Reference Guide
Security Commands
create access-list igmp destination source igmp-type
ipmc-group ports
create access-list <access-list name> igmp destination [<dest_ipaddress>/
<mask> | any] source [<src_ipaddress>/<mask> | any] igmp-type
[membership-query | leave-group | v1-membership-report |
v2-membership-report | <number> | any] ipmc-group [<multicast ip address>/
<mask> | any] [permit | deny] ports [<portlist> | any] {ignore-overlap}
{precedence <prec_number>}
Description
Creates a named IP access list that applies to IGMP traffic on an “ i ” series switch.
NOTE
This command is available only on the “i” series switches. To create an access list for IGMP traffic on
an “i” series switch, use the XREF command.
Syntax Description
Default
N/A
Usage Guidelines
The access list is applied to all IGMP ingress packets.
Example
The following command creates an access-list rule named igmp_acl1 with precedence 30 that drops all
IGMP v2-membership reports for groups 224.10.1.x received on any port:
access-list name Specifies the name of the access list.
destination Specifies the destination IP address with mask.
any
specifies that any address matches.
source Specifies the source IP address with mask.
any
specifies that any address matches.
igmp-type Specifies the IGMP type. The IGMP type can be membership-query, leave-group,
v1-membership-report, v2-membership-report, or any; or a number between 0 and 255.
ipmc-group Specifies the IP multicast group and the mask.
permit Specifies that packets that match the access list description are permitted to be accepted
by this switch.
deny Specifies that packets that match the access list description are filtered (dropped) by the
switch.
ports Specifies one or more ingress ports on which this rule is applied.
prec_number Specifies the access list precedence number. The range is 1 to 25,600.