Re: ACL to permit Multicast

From: Mohamed El Henawy <m.henawy_at_link.net>
Date: Sun, 13 Sep 2009 15:11:04 +0300

Thanks Steve...so I think I can assume they wont mix the security part with
multicast part in the lab :) bcz most of the time we permit only routing
updates and sometimes ICMP before we start to put the deny rules

still if we are permitting ip bet the source /destination then everything
should be working

Thanks

  ----- Original Message -----
  From: Steve Lyons
  To: Mohamed El Henawy
  Cc: Cisco certification
  Sent: Sunday, September 13, 2009 3:58 PM
  Subject: Re: ACL to permit Multicast

  Copying Group:

  PIM is only one protocol within the suite of protocols. Keep in mind there
is also CGMP, IGMP, MSDP, MOSPF, Auto-RP, BSR, Anycast-RP, and in IPV6 MLD.
There are also a range of multicast addresses you could allow:

  http://www.iana.org/assignments/multicast-addresses/

  Steve Lyons

  On Sun, Sep 13, 2009 at 7:43 AM, Mohamed El Henawy <m.henawy_at_link.net>
wrote:

    Assuming that the Source ip is already permitted ofcourse

     ----- Original Message -----
     From: Mohamed El Henawy
     To: Cisco certification
     Sent: Sunday, September 13, 2009 2:32 PM
     Subject: ACL to permit Multicast

     Hello Group ,

     short question...
     if I need to permit multicast on the interface is access-list x permit
pim
    any any is enough ?

     Thanks :)

    Blogs and organic groups at http://www.ccie.net

    _______________________________________________________________________
    Subscription information may be found at:
    http://www.groupstudy.com/list/CCIELab.html

-----------------------------------------------------------------------------
-

  No virus found in this incoming message.
  Checked by AVG - www.avg.com
  Version: 8.5.409 / Virus Database: 270.13.94/2367 - Release Date: 09/13/09
05:50:00

Blogs and organic groups at http://www.ccie.net
Received on Sun Sep 13 2009 - 15:11:04 ART

This archive was generated by hypermail 2.2.0 : Sun Oct 04 2009 - 07:42:03 ART