beautypg.com

Ip igmp source-address-check – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 767

background image

IGMP Snooping Commands

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

TM

Operating System - Version 5.4.4C

31.29

ip igmp source-address-check

This command enables the checking of the Source Address for an IGMP Report, rejecting
any IGMP Reports originating on devices outside of the local subnet.

Use the no variant of this command to disable the checking of the Source Address for an
IGMP Report, which allows IGMP Reports from devices outside of the local subnet.

Syntax

ip igmp source-address-check

no ip igmp source-address-check

Default

Source address checking for IGMP Reports is enabled by default.

Mode

Interface Configuration for a VLAN interface.

Usage

This is a security feature, and should be enabled unless IGMP Reports from outside the
local subnet are expected, for example, if Multicast VLAN Registration is active in the
network.

The no variant of this command is required to disable the IGMP Report source address
checking feature in networks that use Multicast VLAN Registration to allow IGMP Reports
from devices outside of the local subnet.

To ensure your VLAN is configured first, see

Chapter 16, Configuring VLANs

.

Examples

To deny IGMP Reports from outside the current subnet for the VLAN interface vlan2, use
the following commands:

To allow IGMP Reports from outside the current subnet for the VLAN interface vlan2, use
the following commands:

Validation

Commands

show ip igmp interface
show running-config

awplus#

configure terminal

awplus(config)#

interface vlan2

awplus(config-if)#

ip igmp source-address-check

awplus#

configure terminal

awplus(config)#

interface vlan2

awplus(config-if)#

no ip igmp source-address-check