Security enhancement for IGMP

Syntax:[no] ip igmp max-response-time num

The num variable specifies the number of seconds and can be a value from 1 to 25. The default is 10.

Security enhancement for IGMP

A security enhancement was made to IGMPv2 to comply with the following recommendation of RFC 2236: “Ignore the Report if you cannot identify the source address of the packet as belonging to a subnet assigned to the interface on which the packet was received.”

NOTE

When used in applications such as IP-TV (or any multicast application in general), the administrator should ensure that the set-top box (or multicast client) is configured on the same subnet as the v.e. configured on the device. This is typically the case but is emphasized here to ensure correct operation. Without this configuration, IGMP messages received by the device are ignored, which causes an interruption in any multicast traffic directed towards the set-top box (multicast client).

Adding an interface to a multicast group

You can manually add an interface to a multicast group. This is useful in the following cases:

Hosts attached to the interface are unable to add themselves as members of the group using IGMP.

There are no members for the group attached to the interface.

When you manually add an interface to a multicast group, the device forwards multicast packets for the group but does not itself accept packets for the group.

You can manually add a multicast group to individual ports only. If the port is a member of a virtual routing and forwarding (VRF) interface, you must add the ports to the group individually.

To manually add a port to a multicast group, enter a command such as the following at the configuration level for the port.

Device(config-if-e10000-1/1)# ip igmp static-group 224.2.2.2

This command adds port 1/1 to multicast group 224.2.2.2.

To add a port that is a member of a VRF interface to a multicast group, enter a command such as the following at the configuration level for the virtual routing interface.

Device(config-vif-1)# ip igmp static-group 224.2.2.2 ethernet 5/2

This command adds port 5/2 in VRF interface 1 to multicast group 224.2.2.2.

Syntax: [no] ip igmp static-group ip-addr[ ethernet slot/portnum ]

The ip-addrvariable specifies the group number.

The ethernet slot/portnum parameter specifies the port number. Use this parameter if the port is a member of a VRF interface, and you are entering this command at the configuration level for the VRF interface.

Manually added groups are included in the group information displayed by the following commands:

show ip igmp group

show ip pim group

FastIron Ethernet Switch IP Multicast Configuration Guide

75

53-1003085-02

 

Page 77
Image 77
Brocade Communications Systems IPMC5000PEF manual Adding an interface to a multicast group, Security enhancement for Igmp