I am trying to restrict which IGMP group a host can join and I have it configured like this on all the exit points to the vlan:
access-list 20 permit 239.1.1.1 interface vlan 201 ip igmp access-group 20 However the host can still join any group and when I send a test ping I recieve a reply. Am I doing it wrong? The 3560 switch guide shows it like this: To disable groups on an interface, use the *no* *ip igmp access-group* interface configuration command. This example shows how to configure hosts attached to a port as able to join only group 255.2.2.2: Switch(config)# access-list 1 255.2.2.2 0.0.0.0 Switch(config-if)# interface gigabitethernet0/1 Switch(config-if)# ip igmp access-group 1 * * * * The only difference I can tell is they are using a physical interface where I am using a VLAN interface. Thank you, Marc _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
