Configuring a multicast filter

Syntax: 


filter
no filter
[multicast <mac-address>]

Specifies a multicast address. Inbound traffic received (on any port) with this multicast address will be filtered. (Default: Forward on all ports.)

The no form of the command deletes the multicast filter for the <mac-address > multicast address and returns the destination ports for that filter to the Forward action.

[<forward|drop> <port-list>]

Specifies whether the designated destination port(s) should forward or drop the filtered traffic.

Example:

Suppose you wanted to configure the filters in the following table on a switch. (For more on source-port filters, see Configuring a source-port traffic filter.
Table 27: Filter example

Filter type

Filter value

Action

Destination ports

source-port

Inbound ports: 1, 21

Drop

1-4

multicast

010000-123456

Drop

5-8, 9-12

multicast

010000-224466

Drop

13-15

1

Because the switch allows one inbound port in a source-port filter, the requirement to filter ports 1 and 2 means you will configure two separate source-port filters.

The following commands configure the filters listed above:

Configuring various traffic/security filters

switch(config)# filter source-port 1 drop e 1-4
switch(config)# filter source-port 2 drop 1-4
switch(config)# filter multicast 010000-123456 drop e 5-8,9-12
switch(config)# filter multicast 010000-224466 drop e 13-15