H3C Technologies H3C S3100 Series Switches - Manual (Page 345)

5-1
5
Multicast User Control Policy Configuration
Only the S3100-EI series support multicast user control policy configuration.
IPv4 Multicast User Control Policy Configuration
Configuring IPv4 Multicast User Control Policy
Multicast user control policies are configured on access switches to allow only authorized users to
receive requested multicast traffic flows. This helps restrict users from ordering certain
multicast-on-demand programs.
In practice, a device first needs to perform 802.1x authentication, on connected hosts through a
RADIUS server. Then, the device uses the configured multicast user control policy to perform multicast
access control on authenticated users as follows.
z Upon receiving an IGMP report from a host, the access switch checks the multicast group address
and multicast source address carried in the report against the configured policies. If a match is
found, the host is allowed to join the multicast group; otherwise, the join report is dropped by the
access switch.
z Upon receiving an IGMP leave message from a host, the access switch matches the multicast
group and source addresses with the policies. If a match is found, the host is allowed to leave the
group; otherwise, the leave message is dropped by the access switch.
Follow these steps to configure a IPv4 multicast user control policy
To do... Use the command... Remarks
Enter system view system-view —
Create a QoS profile and enter its view qos-profile profile-name —
Configure a multicast user control policy
igmp-snooping
access-policy acl-number
Required
No policy is configured by default,
that is, a host can join or leave a
valid multicast group at any time.
Return to system view quit —
Enter Ethernet port view
interface interface-type
interface-number
—
Apply a QoS
profile
Configure the
mode to apply a
QoS profile as
port-based
qos-profile port-based
Required
By default, the mode to apply a
QoS profile is user-based.