mld-snooping group-policy
Use mld-snooping group-policy to configure an IPv6 multicast group policy on a port to control the IPv6 multicast groups that hosts attached to the port can join.
Use undo mld-snooping group-policy to delete IPv6 multicast group policies on a port.
Syntax
mld-snooping group-policy ipv6-acl-number [ vlan vlan-list ]
undo mld-snooping group-policy [ vlan vlan-list ]
Default
No IPv6 multicast group policies exist. Hosts attached to the port can join any IPv6 multicast groups.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
Parameters
ipv6-acl-number: Specifies an IPv6 basic or advanced ACL number in the range of 2000 to 3999. Hosts can join only the IPv6 multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, hosts cannot join IPv6 multicast groups.
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The VLAN ID is in the range of 1 to 4094. If you do not specify a VLAN, this command takes effect on all VLANs.
Usage guidelines
An IPv6 multicast group policy filters MLD reports to control the IPv6 multicast groups that hosts can join.
This command does not take effect on static member ports, because static member ports do not send MLD reports.
You can configure an IPv6 multicast group policy for a port in interface view or globally for all ports in MLD-snooping view. For a port, the port-specific configuration takes priority over the global configuration.
When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:
For the rule to take effect, do not specify the vpn-instance vpn-instance option.
In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.
In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.
To match MLDv1 and MLDv2 reports, set the source source-address source-prefix option to 0::0.
Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
You can configure different ACLs for different VLANs on a port. If you configure multiple ACLs for the same VLANs on a port, the most recent configuration takes effect.
Examples
# On HundredGigE 1/0/1, configure an IPv6 multicast group policy for VLAN 2 so that hosts attached to the port in VLAN 2 can join only the group FF03::101.
<Sysname> system-view [Sysname] acl ipv6 basic 2000 [Sysname-acl-ipv6-basic-2000] rule permit source ff03::101 128 [Sysname-acl-ipv6-basic-2000] quit [Sysname] interface hundredgige 1/0/1 [Sysname-HundredGigE1/0/1] mld-snooping group-policy 2000 vlan 2
Related commands
group-policy (MLD-snooping view)