Command Manual – Multicast Protocol 
Quidway S3900 Series Ethernet Switches-Release 1510 
Chapter 1  IGMP Snooping Configuration 
Commands
 
Huawei Technologies Proprietary  
1-8 
filtering ACL configured on the access port to determine if the port can join the 
corresponding multicast group or not. If yes, it adds the port to the forward port list of 
the multicast group. If not, it drops the IGMP host report message and does not forward 
the corresponding data stream to the port. In this way, you can control the multicast 
streams that users can access. 
An ACL rule defines a multicast address or a multicast address range (for example 
224.0.0.1 to 239.255.255.255) and is used to. 
z  Allow the port(s) to join only the multicast group(s) defined in the rule by a permit 
statement. 
z  Inhibit the port(s) from joining the multicast group(s) defined in the rule by a deny 
statement. 
 
  Note: 
z  One port can belong to multiple VLANs. But for each VLAN on the port, you can 
configure only one ACL. 
z  If no ACL rule is configured or the port does not belong to the specified VLAN, the 
filter ACL you configured does not take effect on the port. 
z  Since most devices broadcast unknown multicast packets, this function is often 
used together with the unknown multicast packet drop function to prevent multicast 
streams from being broadcasted to a filtered port as unknown multicast. 
 
Example 
# Configure ACL 2000 to allow users under port Ethernet 1/0/1 to access the multicast 
streams in groups 225.0.0.0 to 225.255.255.255. 
z  Configure ACL 2000. 
<Quidway>system-view 
System View: return to User View with Ctrl+Z. 
[Quidway] acl number 2000 
[Quidway-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255 
[Quidway-acl-basic-2000] quit 
z  Create VLAN 2 and add Ethernet 1/0/1 port to VLAN 2. 
[Quidway] vlan 2 
[Quidway-vlan2] port Ethernet 1/0/1 
Gigabit[Quidway-vlan2] quit 
z  Configure ACL 2000 on Ethernet 1/0/1 to allow this VLAN 2 port to join only the 
IGMP multicast groups defined in the rule of ACL 2000. 
[Quidway] interface Ethernet 1/0/1 
[Quidway-Ethernet1/0/1] igmp-snooping group-policy 2000 vlan 2 
[Quidway-Ethernet1/0/1] quit