All things related to multicast

["Lee, Kang" <>]

Title: Re: dynamic access controll on multicast groups

I will send you some doc that related along with my summary.

--------------------------
Sent using BlackBerry


-----Original Message-----
From: <>
To: Lee, Kang; <>
Sent: Sun Nov 11 15:13:07 2007
Subject: RE: dynamic access controll on multicast groups

Hi Kang,

Thanks for your responds. I seem to believe also this is far from easy.
Nevertheless on basis of your answer, i will continue to investigate the possibilities here.

Anyhow this document would be nice to have to start with at first.

regards,

Ruud Toonders

---- "Lee schreef:
> In Cisco case, there are no well defined mechanism but still have few
> method to achieve  your goal.
>
> 
>
> IGMP runs on switch level and that is last mile for the users. So if you
> control access to IGMP group, you can do some level of access control
> but this is pretty tough to do on each user based. In Cisco, these are
> called multicast profiling and igmp access-group.  I can send you more
> detail doc. It is not intuitive.
>
> 
>
> Then you can control which rp is hadnlding what groups by putting some
> more filter. Again this does not work as way as typical access list.
>
> 
>
> To control each user, it is possible but it is almost impractical. That
> is how much I know.
>
> 
>
> Thanks
>
> 
>
> From: Ruud Toonders []
> Sent: Sunday, November 11, 2007 4:06 AM
> To:
> Subject: dynamic access controll on multicast groups
>
> 
>
> Hi All,
>
> 
>
> I am bit of a newbie in this, but does anybody know how I can
> dynamically do access control on multicast group reception?
>
> 
>
> For example:
>
> I have different multicast groups A,B,C for usergroups gA, gB, gC.
>
> Normally I can assign VLANs and setup ACL's in such a way that for
> example:
>
> -users to gA can only see Group A
>
> -users to gB can only see Group A,B
>
> -users to gC can only see Group B,C
>
> 
>
> However as soon as a user belonging to gB gets the new access right to
> belong to group gC, then manually we need to reassign the VLAN again for
> him.
>
> Is there a simpler/easier way of doing this preferably from an external
> piece of software or software interface?
>
> 
>
> Regards,
>
> 
>
> Ruud Toonders
>
> 
>
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.5.503 / Virus Database: 269.15.28/1123 - Release Date:
> 10/11/2007 15:47
>