32
Step Command
Remarks
3.
Set the 802.1p precedence for
IGMP messages in the VLAN.
igmp-snooping dot1p-priority
priority-number
The default 802.1p precedence for
IGMP messages is 0.
Configuring a multicast user control policy (available only on
the HP 3100 v2 EI)
Multicast user control policies are configured on access switches to allow only authorized users to receive
requested multicast traffic flows. This helps restrict users from ordering certain multicast-on-demand
programs.
In practice, a device first needs to perform authentication (802.1X authentication, for example) on
connected hosts through a RADIUS server. Then, the device uses the configured multicast user control
policy to perform multicast access control on authenticated users as follows:
•
After receiving an IGMP report from a host, the access switch matches the multicast group address
and multicast source address carried in the report with the configured policies. If a match is found,
the host is allowed to join the multicast group. Otherwise, the join report is dropped by the access
switch.
•
After receiving an IGMP leave message from a host, the access switch matches the multicast group
and source addresses with the policies. If a match is found, the host is allowed to leave the group.
Otherwise, the leave message is dropped by the access switch.
A multicast user control policy is functionally similar to a multicast group filter. A difference is that a
control policy can control both multicast joining and leaving of users based on authentication and
authorization, but a multicast group filter is configured on a port to control only multicast joining but not
leaving of users without authentication or authorization.
To configure a multicast user control policy:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a user profile and
enter its view.
user-profile
profile-name
N/A
3.
Configure a multicast user
control policy.
igmp-snooping access-policy
acl-number
No policy is configured by default.
That is, a host can join or leave a
valid multicast group at any time.
4.
Return to system view.
quit
N/A
5.
Enable the created user
profile.
user-profile
profile-name
enable
Disabled by default.
For more information about the
user-profile
and
user-profile enable
commands, see
Security Command
Reference.
Enabling the IGMP snooping host tracking function
With the IGMP snooping host tracking function, the switch can record the information of the member
hosts that are receiving multicast traffic, including the host IP address, running duration, and timeout time.
You can monitor and manage the member hosts according to the recorded information.
