By default, Source-Specific Multicast (SSM) group addresses range from 232.0.0.0 to 232.255.255.255. If a user joins a multicast group with an IP address out of this range, configure an SSM group policy in the VLAN to add the group address to the SSM group address range. The SSM group policy must be used together with an ACL. For details on how to configure an ACL, see ACL Configuration in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - Security.
By default, the ACL applied to an SSM group policy denies all multicast groups. To exclude specific group addresses from the SSM group address range, use a rule permit source any rule with deny rules in the ACL.