Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Enable group access to IGMP snooping and multicast using the GUI

Updated: April 17, 2026

Want to summarize with AI?

Log in

Configure group access to IGMP snooping and multicast traffic for statically assigned EPG ports through the GUI interface.

This task enables you to create and assign access groups of users that are permitted or denied access to IGMP snooping and multicast traffic on statically assigned EPG ports.

After you enable IGMP snooping and multicasting on ports that have been statically assigned to an EPG, you can then create and assign access groups of users that are permitted or denied access to the IGMP snooping and multicast traffic enabled on those ports.

Before you begin

Before you enable access to IGMP snooping and multicasting for an EPG, Identify the interfaces to enable this function and statically assign them to that EPG.

Note
For details on static port assignment, see Deploying an EPG on a Specific Node or Port Using the GUI in the Cisco APIC Layer 2 Networking Configuration Guide.

Follow these steps to enable group access to IGMP snooping and multicast using the GUI:

Procedure

  1. Click Tenant > tenant_name > Application Profiles > application_name > Application EPGs > epg_name > Static Ports.

    Navigating to this spot displays all the ports you have statically assigned to the target EPG.

  2. Click the port to which you intend to assign multicast group access, to display the Static Port Configuration page.

  3. Click Actions > Create IGMP Access Group to display the IGMP Snoop Access Group table.

  4. Locate the IGMP Snoop Access Group table and click + to add an access group entry.

    Adding an IGMP Snoop Access Group entry creates a user group with access to this port, associates it with a multicast IP address, and permits or denies that group access to the IGMP snoop traffic received at that address.

    1. Select Create Route Map Policy for Multicast to display the Create Route Map Policy for Multicast window.
    2. In the Name field assign the name of the group that you want to allow or deny multicast traffic.
    3. In the Route Maps table click + to display the route map dialog.
    4. In the Order field, if multiple access groups are being configured for this interface, select a number that reflects the order in which this access group will be permitted or denied access to the multicast traffic on this interface. Lower-numbered access groups are ordered before higher-numbered access groups.
    5. In the Group IP field enter the multicast IP address whose traffic is to be allowed or blocked for this access group.
    6. In the Source IP field, enter the IP address of the source if applicable.
    7. In the Action field, choose Deny to deny access for the target group or Permit to allow access for the target group.
    8. Click OK.
    9. Click Submit.
    When the configuration is complete, the configured IGMP snoop access group is assigned a multicast IP address through the target static port and permitted or denied access to the multicast streams that are received at that address.
    Note

    • You can repeat this step to configure and associate additional access groups with multicast IP addresses through the target static port.

    • To review the settings for the configured access groups, click to the following location: Tenant > tenant_name > Policies > Protocol > Route Maps for Multicast > route_map_access_group_name.

  5. Click Submit.

The IGMP snoop access groups are now configured and associated with multicast IP addresses, controlling user access to multicast traffic on the specified static ports.