Mld-Snooping Group-Policy - H3C S3100 Series Command Manual

Hide thumbs Also See for S3100 Series:

Table of Contents

Acl6-number: Basic or advanced IPv6 ACL number, in the range of 2000 to 3999. The source address

or address range specified in the advanced IPv6 ACL rule is used to match the IPv6 multicast source

address(es) specified in MLDv2 reports, rather than the source address in the IPv6 packets. The

system assumes that an MLDv1 report or an MLDv2 IS_EX or TO_EX report that does not carry an IPv6

multicast source address carries an IPv6 multicast source address of 0::0.

vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists, by each of which

you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to

end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a

VLAN ID is 1 to 4094.

Use the group-policy command to configure a global IPv6 multicast group filter, namely to control the

IPv6 multicast groups a host can join.

Use the undo group-policy command to remove the configured global IPv6 multicast group filter.

By default, no IPv6 multicast group filter is configured globally, namely any host can join any valid IPv6

multicast group.

If you do not specify any VLAN, the command will take effect for all VLANs; if you specify a VLAN or

multiple VLANs, the command will take effect for the specified VLAN(s) only.

If the specified IPv6 ACL does not exist or the ACL rule is null, all IPv6 multicast groups will be

filtered out.

You can configure different IPv6 ACL rules for each port in different VLANs; for a given VLAN, a

newly configured IPv6 ACL rule will override the existing one.

Related commands: mld-snooping group-policy.

# Apply ACL 2000 as an IPv6 multicast group filter so that hosts in VLAN 2 can join FF03::101 only.

<Sysname> system-view

[Sysname] acl ipv6 number 2000

[Sysname-acl6-basic-2000] rule permit source ff03::101 16

[Sysname-acl6-basic-2000] quit

[Sysname] mld-snooping

[Sysname-mld-snooping] group-policy 2000 vlan 2

mld-snooping group-policy

mld-snooping group-policy acl6-number [ vlan vlan-list ]

undo mld-snooping group-policy [ vlan vlan-list ]

Ethernet port view

Default Level

2: System level

Table of Contents