All things related to multicast

[Mark Fullmer <>]

> ip msdp peer 134.68.3.1
> ip msdp sa-filter in 134.68.3.1 list 111
> access-list 111 deny   ip any 239.0.0.0 0.255.255.255
> access-list 111 deny   ip any 224.0.1.22 255.255.255.255
> access-list 111 deny   ip any 224.0.1.35 255.255.255.255
> access-list 111 deny   ip any 224.0.1.24 255.255.255.255
> access-list 111 deny   ip any 224.0.1.60 255.255.255.255
> access-list 111 deny   ip any 224.0.1.2 255.255.255.255
> access-list 111 deny   ip any 224.0.2.2 255.255.255.255
> access-list 111 permit ip any any

This is what I ended up using last night.  The list
should probably also get applied in and out.

no access-list 110
access-list 110 deny   ip any host 224.0.1.35
access-list 110 deny   ip any host 224.0.1.22
access-list 110 deny   ip any host 224.0.1.24
access-list 110 deny   ip any host 224.0.1.60
access-list 110 deny   ip any host 224.0.1.1
access-list 110 deny   ip any host 224.0.1.2
access-list 110 deny   ip any host 224.0.1.3
access-list 110 deny   ip any host 224.0.2.2 
access-list 110 deny   ip any host 239.0.0.0
access-list 110 permit ip any any

You can save a few CPU cycles by changing the order
to match activity.

kc2>sh access-list 110
Extended IP access list 110
    deny ip any host 224.0.1.35 (2636998 matches)
    deny ip any host 224.0.1.22 (2781766 matches)
    deny ip any host 224.0.1.24 (458635 matches)
    deny ip any host 224.0.1.60 (193082 matches)
    deny ip any host 224.0.1.1 (65401 matches)
    deny ip any host 224.0.1.2 (451802 matches)
    deny ip any host 224.0.1.3 (103450 matches)
    deny ip any host 224.0.2.2 (685199 matches)

Could someone add this to the mcast wg web page?

--
mark