SNR S2940-8G-v2, Руководство по настройке

Страница: 262 / 420

SNR S2940-8G-v2 Switch Configuration Guide
IPv4 Multicast Protocol
Once the configured rules are matched, the following rules won't take effect, so rules of globally
allow must be put at the end. The commands are as follows:
Command Explanation
Global Configuration Mode
[no] access-list <5000-5099> { deny | permit } ip
{ { <source> <source-wildcard> } | { host-source
<source-host-ip> } | any-source } { { <destina-
tion> <destination-wildcard> } | { host-destination
<destination-host-ip> } | any-destination } The rule used to configure source control.
This rule does not take effect until it is ap-
plied to specified port. Using the NO form
of it can delete specified rule.
The last is to configure the configured rule to specified port.
Note: If the rules being configured will occupy the table entries of hardware, configuring too
many rules will result in configuration failure caused by bottom table entries being full, so we
suggest user to use the simplest rules if possible. The configuration rules are as follows:
Command Explanation
Port Configuration Mode
[no] ip multicast source-control
access-group <5000-5099> Used to configure the rules source control uses to port, the
NO form cancels the configuration.
2. Destination Control Configuration
Like source control configuration, destination control configuration also has three steps.
First, enable destination control globally. Since destination control need to prevent unautho-
rized user from receiving multicast data, the switch won't broadcast the multicast data it received
after configuring global destination control. Therefore, It should be avoided to connect two or more
other Layer 3 switches in the same VLAN on a switch on which destination control is enabled. The
configuration commands are as follows:
Command Explanation
Global Configuration Mode
[no] multicast destination-control
(required) Globally enable IPv4 and IPv6destination control. The no
operation of this command will globally disable destination
control. All of the other configuration can only take effect
after globally enabled. The next is configuring destination
control rules, which are similar.
Next is to configure destination control rule. It is similar to source control, except to use ACL
No. of 6000-7999.
Command Explanation
Global Configuration Mode
[no] access-list <6000-7999> { deny | permit }
ip { { <source> <source-wildcard> } | { host-
source <source-host-ip> { range<2-65535> | }
} | any-source } { { <destination> <destination-
wildcard> } | { host-destination <destination-host-
ip> { range<2-255> | } } | any-destination } The rule used to configure destination con-
trol. This rule does not take effect until it
is applied to source IP or VLAN-MAC and
port. Using the NO form of it can delete
specified rule.
262