The following example shows a typical static multicast route: [Incoming interface, Source, Group] > [Setof downstream interfaces] - ip multicast-static-route {} [] vrf If the SSDP service is not enabled in the network, best practices is to disable SSDP either through VLANACLs or through a policy, as shown in the following examples: ACL - switch(config)# access-list ip switch(config-acl-ip)#10 deny udp any 239.255.255.250 eq 1900 switch(config)# vlan switch(config-vlan-id)# apply access-list ip in switch(config)# interface switch(config-if)# no shutdown switch(config-if)# no routing switch(config-if)# vlan access switch(config)# interface vlan switch(config-if-vlan)# ip address switch(config-if-vlan)# ip igmp enable switch(config-if-vlan)# ip pim-sparse enable switch(config)# router pim switch(config-pim)# enable Policy - switch(config)# class ip switch(config-class-ip)# 10 match any any 239.255.255.250 switch(config)# policy switch(config-policy)# 10 class ip action drop switch(config)# vlan switch(config-vlan-id)# apply policy in switch(config)# interface switch(config-if)# no shutdown switch(config-if)# no routing switch(config-if)# vlan access switch(config)# interface vlan switch(config-if-vlan)# ip address switch(config-if-vlan)# ip igmp enable switch(config-if-vlan)# ip pim-sparse enable switch(config)# router pim switch(config-pim)# enable Impact: In networks where there is a need to control, drop, or minimize SSDP traffic, summarized static multicast routes can be configured to save network resources and to avoid denial of services.

Detections

Analytics

Item Search