A Networker Blog.-

If your action is permit then everything else is going to be denied, if your action is deny then everything else would be permitted

Lets then test the above

The topology looks like

R3 is acting like a Server, running in ip pim dense for simplicity only on R3 Ethernet

R4 is configured to Join the 224.1.1.1 and the 224.2.2.2 Multicast Groups

R3#show ip pim neigh
PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR
Priority,
      S - State Refresh Capable
Neighbor          Interface                Uptime/Expires    Ver   DR
Address
Prio/Mode
R3#

R4#show ip pim inter
Address          Interface                Ver/   Nbr    Query  DR     DR
                                          Mode   Count  Intvl  Prior
R4#show ip igmp grou
IGMP Connected Group Membership
Group Address    Interface                Uptime    Expires   Last
Reporter
224.1.1.1        FastEthernet0/0          00:01:58  stopped 150.34.34.4
224.2.2.2        FastEthernet0/0          00:01:57  stopped 150.34.34.4

With out any IGMP Profile Configured at the Switch1, let’s see if it works

R3#clear ip mroute *
R3#ping 224.1.1.1

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.1.1.1, timeout is 2 seconds:

Reply to request 0 from 150.34.34.4, 8 ms
R3#ping 224.2.2.2

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.2.2.2, timeout is 2 seconds:

Reply to request 0 from 150.34.34.4, 8 ms

Cool it works

Now With this configuration at Sw1

Sw1(config)#ip igmp profile 6
Sw1(config-igmp-profile)#permit
Sw1(config-igmp-profile)#range 224.1.1.1
Sw1(config-igmp-profile)#end
Sw1(config)#do show ip igmp profile 6
IGMP Profile 6
    permit
    range 224.1.1.1 224.1.1.1
Sw1(config)#int f0/3
Sw1(config-if)#ip igmp filter 6

Now let’s test at R3 Again

R3#clear ip mroute *
R3#ping 224.1.1.1

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.1.1.1, timeout is 2 seconds:

Reply to request 0 from 150.34.34.4, 4 ms
R3#ping 224.2.2.2

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.2.2.2, timeout is 2 seconds:
.
R3#

Now with the Deny Action:

Sw1(config)#ip igmp profile 2
Sw1(config-igmp-profile)#deny
Sw1(config-igmp-profile)#range 224.2.2.2
Sw1(config-igmp-profile)#end
Sw1(config)#do show ip igmp profile 2
IGMP Profile 2
    range 224.2.2.2 224.2.2.2
Sw1(config)#int f0/3
Sw1(config-if)#ip igmp fil 2

Let’s try it again:

R3#clear ip mroute *
R3#ping 224.1.1.1   

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.1.1.1, timeout is 2 seconds:

Reply to request 0 from 150.34.34.4, 8 ms
R3#ping 224.2.2.2   

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.2.2.2, timeout is 2 seconds:
.
R3#

And this works very nice!!