Keep in mind that access lists are very flexible: there are many combinations of permit and deny statements
one could use in an access list to filter multicast traffic. The examples in this section simply provide a few
examples of how it can be done.
Note
Example: Denying All States for a Group G
The following example shows how to deny all states for a group G. In this example, Fast Ethernet interface
0/0/0 is configured to filter all sources for SSM group 232.2.2.2 in IGMPv3 reports, which effectively denies
this group.
ip access-list extended test1
deny igmp any host 232.2.2.2
permit igmp any any
!
interface FastEthernet0/0/0
ip igmp access-group test1
Example: Denying All States for a Source S
The following example shows how to deny all states for a source S. In this example, Gigabit Ethernet interface
1/1/0 is configured to filter all groups for source 10.2.1.32 in IGMPv3 reports, which effectively denies this
source.
ip access-list extended test2
deny igmp host 10.2.1.32 any
permit igmp any any
!
interface GigabitEthernet1/1/0
ip igmp access-group test2
Example: Permitting All States for a Group G
The following example shows how to permit all states for a group G. In this example, Gigabit Ethernet interface
1/2/0 is configured to accept all sources for SSM group 232.1.1.10 in IGMPv3 reports, which effectively
accepts this group altogether.
ip access-list extended test3
permit igmp any host 232.1.1.10
!
interface GigabitEthernet1/2/0
ip igmp access-group test3
Example: Permitting All States for a Source S
The following example shows how to permit all states for a source S. In this example, Gigabit Ethernet
interface 1/2 is configured to accept all groups for source 10.6.23.32 in IGMPv3 reports, which effectively
accepts this source altogether.
ip access-list extended test4
permit igmp host 10.6.23.32 any
!
IP Multicast Routing Configuration Guide, Cisco IOS XE Release 3.6E (Catalyst 3850 Switches)
OL-32598-01 97
Configuring IGMP
Controlling Access to an SSM Network Using IGMP Extended Access Lists