H3C IE4300 Command Reference Manual page 1598

Usage guidelines
You can repeat this command to configure multiple MLD snooping access control policies. An IPv6
multicast user can join or leave an IPv6 multicast group if its MLD report or done message is
permitted by one of the MLD snooping access control policies.
When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:
•
In a basic ACL, the
multicast group address.
•
In an advanced ACL, the
IPv6 multicast source address. The
specifies an IPv6 multicast group address.
To match the following MLD messages, set the
source-prefix
MLDv1 report and done messages.

MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry IPv6 multicast source

addresses.
•
Among the other optional parameters, only the
time-range-name
•
If the
vpn-instance vpn-instance
effect. If the
applies to both VPN packets and non-VPN packets.
Examples
# In user profile abc, configure an MLD snooping access control policy to allow IPv6 multicast users
to join or leave only IPv6 multicast group FF03::101.
<Sysname> system-view
[Sysname] acl ipv6 basic 2001
[Sysname-acl6-basic-2001] rule permit source ff03::101 16
[Sysname-acl6-basic-2001] quit
[Sysname] user-profile abc
[Sysname-user-profile-abc] mld-snooping access-policy 2001
mld-snooping done source-ip
Use mld-snooping done source-ip
messages.
Use
undo mld-snooping done source-ip
Syntax
mld-snooping done source-ip ipv6-address
undo mld-snooping done source-ip
Default
In a VLAN, the source IPv6 address of MLD done messages is the IPv6 link-local address of the
current VLAN interface. If the current VLAN interface does not have an IPv6 link-local address, the
source IPv6 address is FE80::02FF:FFFF:FE00:0001.
Views
VLAN view
source source-address source-prefix
source source-address source-prefix
option to 0::0:
option take effect.
vpn-instance vpn-instance
destination dest-address dest-prefix
source source-address
fragment
option is specified in the rule, the rule does not take
option is not specified in the rule, the rule
to configure the source IPv6 address for MLD done
to restore the default.
26
option specifies an IPv6
option specifies an
keyword and the
time-range
option