Cisco ASA 5512-X Cli Configuration Guide

1-8
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Multicast Routing
Customizing Multicast Routing
Controlling Access to Multicast Groups
To control the multicast groups that hosts on the ASA interface can join, perform the following steps:
Detailed Steps
Limiting the Number of IGMP States on an Interface
You can limit the number of IGMP states resulting from IGMP membership reports on a per-interface
basis. Membership reports exceeding the configured limits are not entered in the IGMP cache, and traffic
for the excess membership reports is not forwarded.
To limit the number of IGMP states on an interface, enter the following command:
Modifying the Query Messages to Multicast Groups
Note The igmp query-timeout and igmp query-interval commands require IGMP Version 2.
Command Purpose
Step 1
Do one of the following to create a standard or extended access list:
access-list name standard [permit | deny]
ip_addr mask
Example:
hostname(config)# access-list acl1
standard permit 192.52.662.25
Creates a standard access list for the multicast traffic.
You can create more than one entry for a single access list. You
can use extended or standard access lists.
The ip_addr mask argument is the IP address of the multicast
group being permitted or denied.
access-list name extended [permit | deny]
protocol src_ip_addr src_mask dst_ip_addr
dst_mask
Example:
hostname(config)# access-list acl2
extended permit protocol src_ip_addr
src_mask dst_ip_addr dst_mask
Creates an extended access list.
The dst_ip_addr argument is the IP address of the multicast group
being permitted or denied.
Step 2
igmp access-group acl
Example:
hostname(config-if)# igmp access-group acl
Applies the access list to an interface.
The acl argument is the name of a standard or extended IP access
list.
Command Purpose
igmp limit number
Example:
hostname(config-if)# igmp limit 50
Limits the number of IGMP states on an interface.
Valid values range from 0 to 500, with 500 being the default value. Setting
this value to 0 prevents learned groups from being added, but manually
defined memberships (using the igmp join-group and igmp static-group
commands) are still permitted. The no form of this command restores the
default value.

Cisco ASA 5512-X Specifications

General

Brand	Cisco
Model	ASA 5512-X
Category	Firewall
Language	English