Cisco ASA Series Cli Configuration Manual page 720

Customizing Multicast Routing
Controlling Access to Multicast Groups
To control the multicast groups that hosts on the ASA interface can join, perform the following steps:
Detailed Steps
Command
Step 1
Do one of the following to create a standard or extended access list:
access-list name standard [permit | deny]
ip_addr mask
Example:
hostname(config)# access-list acl1
standard permit 192.52.662.25
access-list name extended [permit | deny]
protocol src_ip_addr src_mask dst_ip_addr
dst_mask
Example:
hostname(config)# access-list acl2
extended permit protocol src_ip_addr
src_mask dst_ip_addr dst_mask
Step 2
igmp access-group acl
Example:
hostname(config-if)# igmp access-group acl
Limiting the Number of IGMP States on an Interface
You can limit the number of IGMP states resulting from IGMP membership reports on a per-interface
basis. Membership reports exceeding the configured limits are not entered in the IGMP cache, and traffic
for the excess membership reports is not forwarded.
To limit the number of IGMP states on an interface, enter the following command:
Command
igmp limit number
Example:
hostname(config-if)# igmp limit 50
Modifying the Query Messages to Multicast Groups
Note
The igmp query-timeout and igmp query-interval commands require IGMP Version 2.
Cisco ASA Series CLI Configuration Guide
1-8
Purpose
Creates a standard access list for the multicast traffic.
You can create more than one entry for a single access list. You
can use extended or standard access lists.
The ip_addr mask argument is the IP address of the multicast
group being permitted or denied.
Creates an extended access list.
The dst_ip_addr argument is the IP address of the multicast group
being permitted or denied.
Applies the access list to an interface.
The acl argument is the name of a standard or extended IP access
list.
Purpose
Limits the number of IGMP states on an interface.
Valid values range from 0 to 500, with 500 being the default value. Setting
this value to 0 prevents learned groups from being added, but manually
defined memberships (using the igmp join-group and igmp static-group
commands) are still permitted. The no form of this command restores the
default value.
Chapter 1 Configuring Multicast Routing