diff --git a/doc/bridging.md b/doc/bridging.md index c751b90c..187cb980 100644 --- a/doc/bridging.md +++ b/doc/bridging.md @@ -183,6 +183,48 @@ In this setup we have a lot more going on. Multiple multicast router ports have been detected, and behind the scenes someone has also added an IGMP/MLD fast-leave port. +### Static Multicast Filters + +When IGMP/MLD snooping is in use, traffic for an unregistered group is +flooded to all ports until a receiver joins. For MAC multicast groups, +or for groups where snooping cannot learn membership automatically, you +can add static entries to the MDB that immediately restrict forwarding +to a given set of ports. + +> [!NOTE] +> Snooping must be enabled on the bridge (or per VLAN) before static +> multicast filters can be configured. + +On a plain (non-VLAN) bridge, add a static IPv4 or MAC multicast filter +like this: + +
admin@example:/> configure
+admin@example:/config/> edit interface br0
+admin@example:/config/interface/br0/> set bridge multicast-filters multicast-filter 224.1.1.1 ports e2
+admin@example:/config/interface/br0/> set bridge multicast-filters multicast-filter 224.1.1.1 ports e3
+admin@example:/config/interface/br0/> set bridge multicast-filters multicast-filter 01:00:5e:01:01:01 ports e2
+admin@example:/config/interface/br0/> leave
+admin@example:/> copy running-config startup-config
+
+ +Each `ports` entry for the same group adds one port to the filter. +Receivers on all other ports will not see traffic for that group. + +On a VLAN-filtering bridge the filter is scoped per VLAN: + +
admin@example:/config/interface/br1/> set bridge vlans vlan 10 multicast-filters multicast-filter 224.2.2.2 ports e5
+admin@example:/config/interface/br1/> set bridge vlans vlan 10 multicast-filters multicast-filter 224.2.2.2 ports e6
+
+ +To verify the MDB — both statically configured and dynamically learned +entries — use: + +
admin@example:/> show bridge mdb
+BRIDGE   VID  GROUP                 PORTS                              
+br0           224.1.1.1             e2, e3
+br0           01:00:5e:01:01:01     e2
+
+ ### Terminology & Abbreviations - **IGMP**: Internet Group Membership Protocol, multicast subscription