We know that we can use the command "multicast-source-deny" discards multicast data packets sent from specified VLANs on an interface. But this command only discards the UDP multicast data packets, how to discard TCP multicast data packets?
We can use traffic policy do it.
1. Check the MAC address of the destination multicast data packets, The destination MAC address is an IP multicast MAC address (IPv4 MAC address starting with 0x01-00-5e);
2.Create a ACL 4000 match this MAC address.(ACL 4000-4999)
acl 4000
rule permit destination-mac 0100-5e00-0000 mac-address-mask ffff-ff00-0000
3.Create traffic policy
traffic classifier deny-multicast
if-match acl 4000
traffic behavior deny-multicast
deny
traffic policy deny-mulitcast
classifier deny-multicast behavior deny-multicast
4. Apply this traffic policy to the interface
interface xxx
traffic-policy deny-multicast inbound
traffic-policy deny-multicast outbound
Notes: if you configure inbound, this interface will still received the multicast data packets, but it will discards those multicast data packets.
