Ipv6 Multicast User Control Policy Configuration Commands; Mld-Snooping Access-Policy - H3C S3100 Series Command Manual

Hide thumbs Also See for S3100 Series:

Table of Contents

acl6-number: Basic or advanced IPv6 ACL number, in the range of 2000 to 3999. The IPv6 source

address or address range specified in the advanced IPv6 ACL rule is the IPv6 multicast source

address(es) specified in MLDv2 reports, rather than the source address in the IPv6 packets. The

system assumes that an MLDv1 report or an MLDv2 IS_EX or TO_EX report that does not carry an IPv6

multicast source address carries an IPv6 multicast source address of 0::0.

vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists, by each of which

you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to

end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a

VLAN ID is 1 to 4094.

Use the mld-snooping group-policy command to configure an IPv6 multicast group filter on the

current port(s), namely to control the multicast groups hosts on the port(s) can join.

Use the undo mld-snooping group-policy command to remove the configured IPv6 multicast group

filter on the current port(s).

By default, no IPv6 multicast group filter is configured on a port, namely a host can join any valid IPv6

multicast group.

If you do not specify any VLAN when using this command in Ethernet port view, the command will

take effect for all VLANs the interface belongs to; if you specify a VLAN or multiple VLANs, the

command will take effect for the specified VLAN(s) the interface belongs to.

If the specified ACL does not exist or the ACL rule is null, all IPv6 multicast groups will be filtered

You can configure different IPv6 ACL rules for each port in different VLANs; for a given VLAN, a

newly configured IPv6 ACL rule will override the existing one.

Related commands: group-policy.

# Apply ACL 2000 as an IPv6 multicast group filter so that hosts on Ethernet 1/0/1 in VLAN 2 can join

FF03::101 only.

<Sysname> system-view

[Sysname] acl ipv6 number 2000

[Sysname-acl6-basic-2000] rule permit source ff03::101 16

[Sysname-acl6-basic-2000] quit

[Sysname] interface ethernet 1/0/1

[Sysname-Ethernet1/0/1] mld-snooping group-policy 2000 vlan 2

IPv6 Multicast User Control Policy Configuration Commands

mld-snooping access-policy acl6-number

undo mld-snooping access-policy { acl6-number | all }

Table of Contents