HP A5120 EI Series Command Reference Manual page 57

View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
acl6-number: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999. The IPv6
source address or address range specified in the advanced IPv6 ACL rule is the IPv6 multicast source
addresses specified in MLDv2 reports, rather than the source address in the IPv6 packets. The system
assumes that an MLDv1 report or an MLDv2 IS_EX or TO_EX report that does not carry an IPv6 multicast
source address carries an IPv6 multicast source address of 0::0.
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you
can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-
vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID
is 1 to 4094.
Description
Use the mld-snooping group-policy command to configure an IPv6 multicast group filter on the current
port, namely, to control the multicast groups that the hosts on the port can join.
Use the undo mld-snooping group-policy command to remove the configured IPv6 multicast group filter.
By default, no IPv6 multicast group filter is configured on a port. Namely, a host can join any valid IPv6
multicast group.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2
aggregate interface view, the command takes effect in all VLANs that the interface belongs to. If you
specify a VLAN or multiple VLANs, the command takes effect in the specified VLANs that the interface
belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect
on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on
those ports in this group that belong to the specified VLANs.
If the specified ACL does not exist or the ACL rule is null, all IPv6 multicast groups are filtered out.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly
configured IPv6 ACL rule overrides the existing one.
Related commands: group-policy.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts on GigabitEthernet 1/0/1 in VLAN 2
can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping group-policy 2000 vlan 2
52