Cisco PIX 525 Especificaciones descargar pdf (Pagina 101)

100

101

8-19

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 8 Configuring IP Routing and DHCP Services

Configuring Multicast Routing

Disabling IGMP on an Interface

You can disable IGMP on specific interfaces. This is useful if you know that you do not have any

multicast hosts on a specific interface and you want to prevent the security appliance from sending host

query messages on that interface.

To disable IGMP on an interface, enter the following command:

hostname(config-if)# no igmp

To reenable IGMP on an interface, enter the following command:

hostname(config-if)# igmp

Note Only the no igmp command appears in the interface configuration.

Configuring Group Membership

You can configure the security appliance to be a member of a multicast group. Configuring the security

appliance to join a multicast group causes upstream routers to maintain multicast routing table

information for that group and keep the paths for that group active.

To have the security appliance join a multicast group, enter the following command:

hostname(config-if)# igmp join-group

group-address

Configuring a Statically Joined Group

Sometimes a group member cannot report its membership in the group, or there may be no members of

a group on the network segment, but you still want multicast traffic for that group to be sent to that

network segment. You can have multicast traffic for that group sent to the segment in one of two ways:

• Using the igmp join-group command (see Configuring Group Membership, page 8-19). This causes

the security appliance to accept and to forward the multicast packets.

• Using the igmp static-group command. The security appliance does not accept the multicast

packets but rather forwards them to the specified interface.

To configure a statically joined multicast group on an interface, enter the following command:

hostname(config-if)# igmp static-group

group-address

Controlling Access to Multicast Groups

To control the multicast groups that hosts on the security appliance interface can join, perform the

following steps:

Step 1 Create an access list for the multicast traffic. You can create more than one entry for a single access list.

You can use extended or standard access lists.

• To create a standard access list, enter the following command:

hostname(config)# access-list

name

standard [permit | deny]

ip_addr

mask

The ip_addr argument is the IP address of the multicast group being permitted or denied.

1 2 ... 96 97 98 99 100 101 102 103 104 105 106 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 101

Comentarios a estos manuales