- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
02-MLD Snooping Commands | 186.86 KB |
MLD snooping configuration commands
display mld-snooping statistics
dot1p-priority (MLD-snooping view)
drop-unknown (MLD-snooping view)
fast-leave (MLD-snooping view)
group-policy (MLD-snooping view)
host-aging-time (MLD-snooping view)
host-tracking (MLD-snooping view)
last-listener-query-interval (MLD-snooping view)
max-response-time (MLD-snooping view)
mld-snooping general-query source-ip
mld-snooping last-listener-query-interval
mld-snooping max-response-time
mld-snooping router-aging-time
mld-snooping special-query source-ip
mld-snooping static-router-port
overflow-replace (MLD-snooping view)
report-aggregation (MLD-snooping view)
router-aging-time (MLD-snooping view)
display mld-snooping group
Syntax
display mld-snooping group [ vlan vlan-id ] [ verbose ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vlan vlan-id: Displays the MLD snooping group information in the specified VLAN, where vlan-id is in the range of 1 to 4094. If you do not specify a VLAN, this command displays the MLD snooping group information in all VLANs.
verbose: Displays the detailed MLD snooping group information.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display mld-snooping group to display MLD snooping group information, including both dynamic and static MLD snooping group entries.
Examples
# Display detailed MLD snooping group information in VLAN 2.
<Sysname> display mld-snooping group vlan 2 verbose
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port
Vlan(id):2.
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Router port(s):total 1 port(s).
GE1/0/2 (D) ( 00:01:30 )
IP group(s):the following ip group(s) match to one mac group.
IP group address:FF1E::101
(::, FF1E::101):
Attribute: Host Port
Host port(s):total 1 port(s).
GE1/0/1 (D) ( 00:03:23 )
MAC group(s):
MAC group address:3333-0000-0101
Host port(s):total 1 port(s).
GE1/0/1
Table 1 Command output
Field |
Description |
Total 1 IP Group(s). |
|
Total 1 IP Source(s). |
Total number of IPv6 multicast sources |
Total 1 MAC Group(s). |
Total number of MAC multicast groups |
Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port |
Port flags: · D—A dynamic port · S—A static port · C—A port copied from a (*, G) entry to an (S, G) entry · P—A port that IPv6 PIM snooping adds |
Router port(s) |
Number of router ports |
( 00:01:30 ) |
Remaining time of the aging timer for the dynamic member port or router port |
IP group address |
Address of IPv6 multicast group |
MAC group address |
Address of MAC multicast group |
Attribute |
Attribute of IPv6 multicast group |
Host port(s) |
Number of member ports |
display mld-snooping host
Syntax
display mld-snooping host vlan vlan-id group ipv6-group-address [ source ipv6-source-address ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vlan vlan-id: Displays information about the hosts tracked by MLD snooping in the specified VLAN, where vlan-id is in the range of 1 to 4094.
group ipv6-group-address: Displays information about the hosts tracked by MLD snooping that are in the specified IPv6 multicast group. The value of ipv6-group-address is in the range of FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where x and y represent any hexadecimal number ranging from 0 to F.
source ipv6-source-address: Displays information about the hosts tracked by MLD snooping that are in the specified IPv6 multicast source.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display mld-snooping host to display information about the hosts tracked by MLD snooping.
Examples
# Display information about the hosts tracked by MLD snooping in multicast group FF1E::101 in VLAN 2.
<Sysname> display mld-snooping host vlan 2 group ff1e::101
VLAN(ID) : 2
(::, FF1E::101)
Port : GE1/0/1
Host Uptime Expires
1::1 00:02:20 00:00:40
2::2 00:02:21 00:00:39
Port : GE1/0/2
Host Uptime Expires
3::3 00:02:20 00:00:40
Table 2 Command output
Field |
Description |
VLAN(ID) |
VLAN ID |
(::, FF1E::101) |
(S, G) entry, where "::" indicates all IPv6 multicast sources |
Port |
Member port |
Host |
Host IPv6 address |
Uptime |
Host running duration |
Expires |
Host expiration time, where "timeout" means that the host has expired |
display mld-snooping statistics
Syntax
display mld-snooping statistics [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display mld-snooping statistics to display the statistics information of MLD messages learned through MLD snooping.
Examples
# Display the statistics information of all MLD messages learned through MLD snooping.
<Sysname> display mld-snooping statistics
Received MLD general queries:0.
Received MLDv1 specific queries:0.
Received MLDv1 reports:0.
Received MLD dones:0.
Sent MLDv1 specific queries:0.
Received MLDv2 reports:0.
Received MLDv2 reports with right and wrong records:0.
Received MLDv2 specific queries:0.
Received MLDv2 specific sg queries:0.
Sent MLDv2 specific queries:0.
Sent MLDv2 specific sg queries:0.
Received error MLD messages:0.
Table 3 Command output
Field |
Description |
general queries |
General query messages |
specific queries |
Multicast-address-specific query messages |
reports |
Report messages |
dones |
Done messages |
reports with right and wrong records |
Reports containing correct and incorrect records |
specific sg queries |
Multicast-address-and-source-specific queries |
dot1p-priority (MLD-snooping view)
Syntax
dot1p-priority priority-number
undo dot1p-priority
View
MLD-snooping view
Default level
2: System level
Parameters
priority-number: Specifies 802.1p precedence for MLD messages, in the range of 0 to 7. The higher the number, the higher the precedence.
Description
Use dot1p-priority to configure 802.1p precedence for MLD messages globally.
Use undo dot1p-priority to restore the default.
The default 802.1p precedence for MLD messages is 0.
Examples
# Set 802.1p precedence for MLD messages to 3 globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] dot1p-priority 3
drop-unknown (MLD-snooping view)
Syntax
drop-unknown
undo drop-unknown
View
MLD-snooping view
Default level
2: System level
Parameters
None
Description
Use drop-unknown to enable the function of dropping unknown IPv6 multicast data globally.
Use undo drop-unknown to disable the function of dropping unknown IPv6 multicast data globally.
By default, this function is disabled. That is, unknown IPv6 multicast data is flooded in the VLAN.
This command works only on MLD snooping–enabled VLANs.
Related commands: mld-snooping drop-unknown.
Examples
# Enable the device to drop unknown IPv6 multicast data globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] drop-unknown
fast-leave (MLD-snooping view)
Syntax
fast-leave [ vlan vlan-list ]
undo fast-leave [ vlan vlan-list ]
View
MLD-snooping view
Default level
2: System level
Parameters
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command applies to all VLANs. If you specify a VLAN or multiple VLANs, the command applies to the specified VLANs only.
Description
Use fast-leave to enable MLD snooping fast-leave processing globally. When this function is enabled on a port and the access controller receives an MLD done message through the port, it directly removes the port from the forwarding table entry for the specific group.
Use undo fast-leave to disable MLD snooping fast-leave processing globally.
By default, MLD snooping fast-leave processing is disabled.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN, the command takes effect for all VLANs. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs only.
Related commands: mld-snooping fast-leave.
Examples
# Enable MLD snooping fast-leave processing globally in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] fast-leave vlan 2
group-policy (MLD-snooping view)
Syntax
group-policy acl6-number [ vlan vlan-list ]
undo group-policy [ vlan vlan-list ]
View
MLD-snooping view
Default level
2: System level
Parameters
acl6-number: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999.
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command applies to all VLANs. If you specify a VLAN or multiple VLANs, the command applies to the specified VLANs only.
Description
Use group-policy to configure a global IPv6 multicast group filter, namely, to control the IPv6 multicast groups that a host can join.
Use undo group-policy to remove the configured global IPv6 multicast group filter.
By default, no IPv6 multicast group filter is configured globally. Namely, a host can join any IPv6 multicast group.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN, the command takes effect for all VLANs. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs only.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly configured IPv6 ACL rule overrides the existing one.
Related commands: mld-snooping group-policy.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts in VLAN 2 can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] mld-snooping
[Sysname-mld-snooping] group-policy 2000 vlan 2
host-aging-time (MLD-snooping view)
Syntax
host-aging-time interval
undo host-aging-time
View
MLD-snooping view
Default level
2: System level
Parameters
interval: Specifies an aging timer for the dynamic member ports in seconds. The value ranges from 200 to 1000.
Description
Use host-aging-time to configure the aging timer for the dynamic member ports globally.
Use undo host-aging-time to restore the default.
By default, the aging timer of the dynamic member ports is 260 seconds.
This command works only on MLD snooping–enabled VLANs.
Related commands: mld-snooping host-aging-time.
Examples
# Set the aging timer for the dynamic member ports to 300 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] host-aging-time 300
host-tracking (MLD-snooping view)
Syntax
host-tracking
undo host-tracking
View
MLD-snooping view
Default level
2: System level
Parameters
None
Description
Use host-tracking to enable the MLD snooping host tracking function globally.
Use undo host-tracking to disable the MLD snooping host tracking function globally.
By default, this function is disabled.
This command works on MLD snooping–enabled VLAN.
Related commands: mld-snooping host-tracking.
Examples
# Enable the MLD snooping host tracking function globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] host-tracking
last-listener-query-interval (MLD-snooping view)
Syntax
last-listener-query-interval interval
undo last-listener-query-interval
View
MLD-snooping view
Default level
2: System level
Parameters
interval: Specifies an MLD last listener query interval in seconds, namely, the length of time that the device waits between sending MLD multicast-address-specific queries. The value ranges from 1 to 5.
Description
Use last-listener-query-interval to configure the MLD last listener query interval globally.
Use undo last-listener-query-interval to restore the default.
By default, the MLD last listener query interval is 1 second.
This command works only on MLD snooping–enabled VLANs.
Related commands: mld-snooping last-listener-query-interval.
Examples
# Set the MLD last listener query interval to 3 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] last-listener-query-interval 3
max-response-time (MLD-snooping view)
Syntax
max-response-time interval
undo max-response-time
View
MLD-snooping view
Default level
2: System level
Parameters
interval: Specifies the maximum response time for MLD general queries, in seconds. The value ranges from 1 to 25.
Description
Use max-response-time to configure the maximum response time for MLD general queries globally.
Use undo max-response-time to restore the default.
By default, the maximum response time for MLD general queries is 10 seconds.
This command works only on MLD snooping–enabled VLANs.
Related commands: mld-snooping max-response-time and mld-snooping query-interval.
Examples
# Set the maximum response time for MLD general queries to 5 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] max-response-time 5
mld-snooping
Syntax
mld-snooping
undo mld-snooping
View
System view
Default level
2: System level
Parameters
None
Description
Use mld-snooping to enable MLD snooping globally and enter MLD-snooping view.
Use undo mld-snooping to disable MLD snooping globally.
By default, MLD snooping is disabled.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping globally and enter MLD-snooping view.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping]
mld-snooping done source-ip
Syntax
mld-snooping done source-ip { ipv6-address | current-interface }
undo mld-snooping done source-ip
View
VLAN view
Default level
2: System level
Parameters
ipv6-address: Specifies a source IPv6 address for the MLD done messages sent by the MLD snooping proxy, which can be any legal IPv6 link-local address.
current-interface: Specifies the IPv6 link-local address of the current VLAN interface as the source address of MLD done messages sent by the MLD snooping proxy. If no IPv6 address has been assigned to the current interface, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used.
Description
Use mld-snooping done source-ip to configure the source IPv6 address of the MLD done messages sent by the MLD snooping proxy.
Use undo mld-snooping done source-ip to restore the default.
By default, the source IPv6 address of the MLD done messages sent by the MLD snooping proxy is FE80::02FF:FFFF:FE00:0001.
Before you configure this command in a VLAN, enable MLD snooping for the VLAN.
The source IPv6 address configured in the mld-snooping done source-ip command also applies when the simulated host sends MLD done messages.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping in VLAN 2 and configure the source IPv6 address of MLD done messages sent by the MLD snooping proxy in VLAN 2 to FE80:0:0:1::1.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping done source-ip fe80:0:0:1::1
mld-snooping dot1p-priority
Syntax
mld-snooping dot1p-priority priority-number
undo mld-snooping dot1p-priority
View
VLAN view
Default level
2: System level
Parameters
priority-number: Specifies 802.1p precedence for MLD messages, in the range of 0 to 7. The higher the number, the higher the precedence.
Description
Use mld-snooping dot1p-priority to configure 802.1p precedence for MLD messages in a VLAN.
Use undo mld-snooping dot1p-priority to restore the default.
The default 802.1p precedence for MLD messages is 0.
Before you configure this command in a VLAN, enable MLD snooping for the VLAN.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping in VLAN 2 and set 802.1p precedence for MLD messages in the VLAN to 3.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping dot1p-priority 3
mld-snooping drop-unknown
Syntax
mld-snooping drop-unknown
undo mld-snooping drop-unknown
View
VLAN view
Default level
2: System level
Parameters
None
Description
Use mld-snooping drop-unknown to enable the function of dropping unknown IPv6 multicast data in the current VLAN.
Use undo mld-snooping drop-unknown to disable the function of dropping unknown IPv6 multicast data in the current VLAN.
By default, this function is disabled. That is, unknown IPv6 multicast data is flooded in the VLAN.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: drop-unknown and mld-snooping enable.
Examples
# Enable MLD snooping and the function for dropping unknown IPv6 multicast data in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping drop-unknown
mld-snooping enable
Syntax
mld-snooping enable
undo mld-snooping enable
View
VLAN view
Default level
2: System level
Parameters
None
Description
Use mld-snooping enable to enable MLD snooping in the current VLAN.
Use undo mld-snooping enable to disable MLD snooping in the current VLAN.
By default, MLD snooping is disabled in a VLAN.
MLD snooping must be enabled globally before it can be enabled in a VLAN
Related commands: mld-snooping.
Examples
# Enable MLD snooping in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
mld-snooping fast-leave
Syntax
mld-snooping fast-leave [ vlan vlan-list ]
undo mld-snooping fast-leave [ vlan vlan-list ]
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094.
Description
Use mld-snooping fast-leave to enable MLD snooping fast-leave processing on the current port. When this function is enabled on a port and the access controller receives an MLD done message through the port, it directly removes the port from the forwarding table entry for the specific group.
Use undo mld-snooping fast-leave to disable MLD snooping fast-leave processing on the current port.
By default, MLD snooping fast-leave processing is disabled.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect for all VLANs that the interface belongs to. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs that the interface belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Related commands: fast-leave.
|
NOTE: Support for this command depends on the device model. For the command matrixes, see About the WX Series Access Controllers Command References. |
Examples
# Enable MLD snooping fast-leave processing on GigabitEthernet 1/0/1 in VLAN 2.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping fast-leave vlan 2
mld-snooping general-query source-ip
Syntax
mld-snooping general-query source-ip { ipv6-address | current-interface }
undo mld-snooping general-query source-ip
View
VLAN view
Default level
2: System level
Parameters
ipv6-address: Specifies the source IPv6 address of MLD general queries, which can be any legal IPv6 link-local address.
current-interface: Sets the source IPv6 link-local address of MLD general queries to the IPv6 address of the current VLAN interface. If the current VLAN interface does not have an IPv6 address, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used as the source IPv6 address of MLD general queries.
Description
Use mld-snooping general-query source-ip to configure the source IPv6 address of MLD general queries.
Use undo mld-snooping general-query source-ip to restore the default configuration.
By default, the source IPv6 address of MLD general queries is FE80::02FF:FFFF:FE00:0001.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: mld-snooping enable.
Examples
# In VLAN 2, enable MLD snooping and specify FE80:0:0:1::1 as the source IPv6 address of MLD general queries.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping general-query source-ip fe80:0:0:1::1
mld-snooping group-limit
Syntax
mld-snooping group-limit limit [ vlan vlan-list ]
undo mld-snooping group-limit [ vlan vlan-list ]
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
limit: Specifies the maximum number of IPv6 multicast groups that a port can join. The value ranges from 1 to 256.
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094. If the vlan vlan-list option is not provided, this configuration limits the maximum number of multicast groups that a port can join in each VLAN that the port belongs to.
Description
Use mld-snooping group-limit to configure the maximum number of IPv6 multicast groups that a port can join.
Use undo mld-snooping group-limit to restore the default.
The default upper limit is 256.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect for all VLANs the interface belongs to. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs that the interface belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
|
NOTE: Support for this command depends on the device model. For the command matrixes, see About the WX Series Access Controllers Command References. |
Examples
# Configure to allow GigabitEthernet 1/0/1 in VLAN 2 to join up to 10 IPv6 multicast groups.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping group-limit 10 vlan 2
mld-snooping group-policy
Syntax
mld-snooping group-policy acl6-number [ vlan vlan-list ]
undo mld-snooping group-policy [ vlan vlan-list ]
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
acl6-number: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999.
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094.
Description
Use mld-snooping group-policy to configure an IPv6 multicast group filter on the current port, namely, to control the multicast groups that the port can join.
Use undo mld-snooping group-policy to remove the configured IPv6 multicast group filter on the current port.
By default, no IPv6 multicast group filter is configured on a port. Namely, a host can join any valid IPv6 multicast group.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect for all VLANs the interface belongs to. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs that the interface belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly configured IPv6 ACL rule overrides the existing one.
Related commands: group-policy.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts on GigabitEthernet 1/0/1 in VLAN 2 can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping group-policy 2000 vlan 2
mld-snooping host-aging-time
Syntax
mld-snooping host-aging-time interval
undo mld-snooping host-aging-time
View
VLAN view
Default level
2: System level
Parameters
interval: Specifies an aging timer for the dynamic member ports in seconds. The value ranges from 200 to 1000.
Description
Use mld-snooping host-aging-time to configure the aging timer for the dynamic member ports in the current VLAN.
Use undo mld-snooping host-aging-time to restore the default.
By default, the aging timer of the dynamic member ports is 260 seconds.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: host-aging-time and mld-snooping enable.
Examples
# Enable MLD snooping and set the aging timer for the dynamic member ports to 300 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping host-aging-time 300
mld-snooping host-join
Syntax
mld-snooping host-join ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
undo mld-snooping host-join ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
ipv6-group-address: Specifies the address of the IPv6 multicast group that the simulated host will join. The value ranges from FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal number between 0 and F, inclusive.
ipv6-source-address: Specifies the address of the IPv6 multicast source that the simulated host will join.
vlan vlan-id: Specifies a VLAN that comprises the port, where vlan-id is in the range of 1 to 4094.
Description
Use mld-snooping host-join to configure the current port as member host for the specified IPv6 multicast group or source and group.
Use undo mld-snooping host-join to remove the current port from the specified IPv6 multicast group or IPv6 source and group.
By default, no ports are configured as static member ports for any IPv6 multicast group or source and group.
This command works on MLD snooping–enabled VLANs
The source-ip ipv6-source-address option in the command is meaningful only for MLDv2 snooping. If MLDv1 snooping is running, the source-ip ipv6-source-address option does not take effect although you can include source-ip ipv6-source-address in the command.
In Layer 2 Ethernet interface view or Layer 2 aggregate interface view, this command takes effect only if the interface belongs to the specified VLAN. In port group view, this command takes effect only on those ports in this port group that belong to the specified VLAN.
Examples
# Configure GigabitEthernet 1/0/1 in VLAN 2 to join (2002::22, FF3E::101) as a simulated host.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
[Sysname-vlan2] quit
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping host-join ff3e::101 source-ip 2002::22 vlan 2
mld-snooping host-tracking
Syntax
mld-snooping host-tracking
undo mld-snooping host-tracking
View
VLAN view
Default level
2: System level
Parameters
None
Description
Use mld-snooping host-tracking to enable the MLD snooping host tracking function in a VLAN.
Use undo mld-snooping host-tracking to disable the MLD snooping host tracking function in a VLAN.
By default, this function is disabled.
Before you configure this command, enable MLD snooping for the VLAN first.
Related commands: host-tracking and mld-snooping enable.
Examples
# Enable MLD snooping and the MLD snooping host tracking function for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping host-tracking
mld-snooping last-listener-query-interval
Syntax
mld-snooping last-listener-query-interval interval
undo mld-snooping last-listener-query-interval
View
VLAN view
Default level
2: System level
Parameters
interval: Specifies an MLD last listener query interval in seconds, namely, the length of time that the device waits between sending MLD multicast-address-specific queries. The value ranges from 1 to 5.
Description
Use mld-snooping last-listener-query-interval to configure the MLD last-listener query interval in the VLAN.
Use undo mld-snooping last-listener-query-interval to restore the default.
By default, the MLD last listener query interval is 1 second.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: last-listener-query-interval and mld-snooping enable.
Examples
# Enable MLD snooping and set the MLD last-listener query interval to 3 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping last-listener-query-interval 3
mld-snooping max-response-time
Syntax
mld-snooping max-response-time interval
undo mld-snooping max-response-time
View
VLAN view
Default level
2: System level
Parameters
interval: Specifies the maximum response time for MLD general queries, in seconds. The value ranges from 1 to 25.
Description
Use mld-snooping max-response-time to configure the maximum response time for MLD general queries in the VLAN.
Use undo mld-snooping max-response-time to restore the default.
By default, the maximum response time for MLD general queries is 10 seconds.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: max-response-time, mld-snooping enable, and mld-snooping query-interval.
Examples
# Enable MLD snooping and set the maximum response time for MLD general queries to 5 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping max-response-time 5
mld-snooping overflow-replace
Syntax
mld-snooping overflow-replace [ vlan vlan-list ]
undo mld-snooping overflow-replace [ vlan vlan-list ]
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094.
Description
Use mld-snooping overflow-replace to enable the IPv6 multicast group replacement function on the current port.
Use undo mld-snooping overflow-replace to disable the IPv6 multicast group replacement function on the current port.
By default, the IPv6 multicast group replacement function is disabled.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect for all VLANs that the interface belongs to. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs that the interface belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Related commands: overflow-replace.
Examples
# Enable the IPv6 multicast group replacement function on GigabitEthernet 1/0/1 in VLAN 2.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping overflow-replace vlan 2
mld-snooping proxying enable
Syntax
mld-snooping proxying enable
undo mld-snooping proxying enable
View
VLAN view
Default level
2: System level
Parameters
None
Description
Use mld-snooping proxying enable to enable the MLD snooping proxying function in a VLAN.
Use undo mld-snooping proxying enable to disable the MLD snooping proxying function in a VLAN.
By default, MLD snooping proxying is disabled in all VLANs.
Before you configure this command in a VLAN, enable MLD snooping for the VLAN.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping and then MLD snooping proxying in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping proxying enable
mld-snooping querier
Syntax
mld-snooping querier
undo mld-snooping querier
View
VLAN view
Default level
2: System level
Parameters
None
Description
Use mld-snooping querier to enable the MLD snooping querier function.
Use undo mld-snooping querier to disable the MLD snooping querier function.
By default, the MLD snooping querier function is disabled.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping and the MLD snooping querier function in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping querier
mld-snooping query-interval
Syntax
mld-snooping query-interval interval
undo mld-snooping query-interval
View
VLAN view
Default level
2: System level
Parameters
interval: Specifies an MLD query interval in seconds, namely, the length of time that the device waits between sending MLD general queries. The value ranges from 2 to 300.
Description
Use mld-snooping query-interval to configure the MLD query interval.
Use undo mld-snooping query-interval to restore the default.
By default, the MLD query interval is 125 seconds.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: max-response-time, mld-snooping enable, mld-snooping max-response-time, and mld-snooping querier.
Examples
# Enable MLD snooping and set the MLD query interval to 20 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping query-interval 20
mld-snooping report source-ip
Syntax
mld-snooping report source-ip { ipv6-address | current-interface }
undo mld-snooping report source-ip
View
VLAN view
Default level
2: System level
Parameters
ipv6-address: Specifies a source IPv6 address for the MLD reports that the MLD snooping proxy send, which can be any legal IPv6 link-local address.
current-interface: Specifies the IPv6 link-local address of the current VLAN interface as the source address of MLD reports that the MLD snooping proxy sends. If no IPv6 address has been assigned to the current interface, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used.
Description
Use mld-snooping report source-ip to configure the source IPv6 address of the MLD reports that the MLD snooping proxy sends.
Use undo mld-snooping report source-ip to restore the default.
By default, the source IPv6 address of the MLD reports that the MLD snooping proxy sends is FE80::02FF:FFFF:FE00:0001.
Before you configure this command in a VLAN, enable MLD snooping for the VLAN.
The source IPv6 address configured in the mld-snooping report source-ip command also applies when the simulated host sends MLD reports.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping in VLAN 2 and configure the source IPv6 address of MLD reports that the MLD snooping proxy sends in VLAN 2 to FE80:0:0:1::1.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping report source-ip fe80:0:0:1::1
mld-snooping router-aging-time
Syntax
mld-snooping router-aging-time interval
undo mld-snooping router-aging-time
View
VLAN view
Default level
2: System level
Parameters
interval: Specifies an aging timer for the dynamic router ports in seconds. The value ranges from 1 to 1000.
Description
Use mld-snooping router-aging-time to configure the aging timer for the dynamic router ports in the current VLAN.
Use undo mld-snooping router-aging-time to restore the default.
By default, the aging timer of the dynamic router ports is 260 seconds.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: mld-snooping enable and router-aging-time.
Examples
# Enable MLD snooping and set the aging time of dynamic router ports to 100 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping router-aging-time 100
mld-snooping router-port-deny
Syntax
mld-snooping router-port-deny [ vlan vlan-list ]
undo mld-snooping router-port-deny [ vlan vlan-list ]
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094.
Description
Use mld-snooping router-port-deny to disable a port from becoming a dynamic router port.
Use undo mld-snooping router-port-deny to restore the default.
By default, a port can become a dynamic router port.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect for all VLANs the interface belongs to. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs that the interface belongs to.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify a VLAN or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Examples
# Disable GigabitEthernet 1/0/1 from changing into a dynamic router port in VLAN 2.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping router-port-deny vlan 2
mld-snooping special-query source-ip
Syntax
mld-snooping special-query source-ip { ipv6-address | current-interface }
undo mld-snooping special-query source-ip
View
VLAN view
Default level
2: System level
Parameters
ipv6-address: Specifies an IPv6 link-local address as the source IPv6 address of MLD multicast-address-specific queries.
current-interface: Specifies the source IPv6 link-local address of the VLAN interface of the current VLAN as the source IPv6 address of MLD multicast-address-specific queries. If the current VLAN interface does not have an IPv6 address, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used as the source IPv6 address of MLD multicast-address-specific queries.
Description
Use mld-snooping special-query source-ip to configure the source IPv6 address of MLD multicast-address-specific queries.
Use undo mld-snooping special-query source-ip to restore the default configuration.
By default, the source IPv6 address of MLD multicast-address-specific queries is FE80::02FF:FFFF:FE00:0001.
This command takes effect only if MLD snooping is enabled for the VLAN.
Related commands: mld-snooping enable.
Examples
# In VLAN 2, enable MLD snooping and specify FE80:0:0:1::1 as the source IPv6 address of MLD multicast-address-specific queries.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping special-query source-ip fe80:0:0:1::1
mld-snooping static-group
Syntax
mld-snooping static-group ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
undo mld-snooping static-group ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
ipv6-group-address: Specifies the address of the IPv6 multicast group that the port will join as static member port. The value ranges from FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal number between 0 and F, inclusive.
ipv6-source-address: Specifies the address of the IPv6 multicast source that the port will join as static member port.
vlan vlan-id: Specifies the VLAN that comprises the Ethernet port, where vlan-id is in the range of 1 to 4094.
Description
Use mld-snooping static-group to configure the port as a static member of an IPv6 multicast group or source-group.
Use undo mld-snooping static-group to remove the port.
By default, no ports are static member ports.
This command works on MLD snooping–enabled VLANs.
The source-ip ipv6-source-address option in the command is meaningful only for MLDv2 snooping. If MLDv1 snooping is running, the source-ip ipv6-source-address option does not take effect although you can include source-ip ipv6-source-address in the command.
In Layer 2 Ethernet interface view, this command takes effect only if the interface belongs to the specified VLAN. In port group view, this command takes effect only on those ports in this port group that belong to the specified VLAN.
|
NOTE: Support for this command depends on the device model. For the command matrixes, see About the WX Series Access Controllers Command References. |
Examples
# Configure GigabitEthernet 1/0/1 in VLAN 2 to be a static member port for (2002::22, FF1E::101).
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
[Sysname-vlan2] quit
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping static-group ff1e::101 source-ip 2002::22 vlan 2
mld-snooping static-router-port
Syntax
mld-snooping static-router-port vlan vlan-id
undo mld-snooping static-router-port vlan vlan-id
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
vlan vlan-id: Specifies a VLAN, where vlan-id is in the range of 1 to 4094.
Description
Use mld-snooping static-router-port to configure the current port as a static router port.
Use undo mld-snooping static-router-port to cancel the configuration.
By default, no ports are static router ports.
In Layer 2 Ethernet interface view or Layer 2 aggregate interface view, this command takes effect only if the interface belongs to the specified VLAN. In port group view, this command takes effect only on those ports in this port group that belong to the specified VLAN.
|
NOTE: Support for this command depends on the device model. For the command matrixes, see About the WX Series Access Controllers Command References. |
Examples
# Enable the static router port function on GigabitEthernet 1/0/1 in VLAN 2.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping static-router-port vlan 2
mld-snooping version
Syntax
mld-snooping version version-number
undo mld-snooping version
View
VLAN view
Default level
2: System level
Parameters
version-number: Specifies an MLD snooping version, in the range of 1 to 2.
Description
Use mld-snooping version to configure the MLD snooping version.
Use undo mld-snooping version to restore the default.
By default, the MLDv1 snooping is used.
This command can take effect only if MLD snooping is enabled for the VLAN.
Related commands: mld-snooping enable.
Examples
# Enable MLD snooping in VLAN 2, and specify MLDv2 snooping.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
overflow-replace (MLD-snooping view)
Syntax
overflow-replace [ vlan vlan-list ]
undo overflow-replace [ vlan vlan-list ]
View
MLD-snooping view
Default level
2: System level
Parameters
vlan vlan-list: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you can specify an individual VLAN in the form of vlan-id, or a VLAN range in the form of start-vlan-id to end-vlan-id, where the end VLAN ID must be greater than the start VLAN ID. The effective range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command applies to all VLANs. If you specify a VLAN or multiple VLANs, the command applies to the specified VLANs only.
Description
Use overflow-replace to enable the IPv6 multicast group replacement function globally.
Use undo overflow-replace to disable the IPv6 multicast group replacement function globally.
By default, the IPv6 multicast group replacement function is disabled globally.
This command works on MLD snooping–enabled VLANs.
If you do not specify any VLAN, the command takes effect for all VLANs. If you specify a VLAN or multiple VLANs, the command takes effect for the specified VLANs only.
Related commands: mld-snooping overflow-replace.
Examples
# Enable the IPv6 multicast group replacement function globally in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] overflow-replace vlan 2
report-aggregation (MLD-snooping view)
Syntax
report-aggregation
undo report-aggregation
View
MLD-snooping view
Default level
2: System level
Parameters
None
Description
Use report-aggregation to enable MLD report suppression.
Use undo report-aggregation to disable MLD report suppression.
By default, MLD report suppression is enabled.
This command works on MLD snooping–enabled VLANs.
Examples
# Disable MLD report suppression.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] undo report-aggregation
reset mld-snooping group
Syntax
reset mld-snooping group { ipv6-group-address | all } [ vlan vlan-id ]
View
User view
Default level
2: System level
Parameters
ipv6-group-address: Specifies an IPv6 multicast group. The effective range of ipv6-group-address is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal number between 0 and F, inclusive.
all: Specifies all IPv6 multicast groups.
vlan vlan-id: Specifies a VLAN. The effective range of vlan-id is 1 to 4094.
Description
Use reset mld-snooping group to remove the dynamic group entries of a specified MLD snooping group or all MLD snooping groups.
This command works only on MLD snooping–enabled VLANs.
This command cannot remove the static group entries of MLD snooping groups.
Examples
# Remove the dynamic group entries of all MLD snooping groups.
<Sysname> reset mld-snooping group all
reset mld-snooping statistics
Syntax
reset mld-snooping statistics
View
User view
Default level
2: System level
Parameters
None
Description
Use reset mld-snooping statistics to clear the statistics information of MLD messages learned through MLD snooping.
Examples
# Clear the statistics information of all kinds of MLD messages learned through MLD snooping.
<Sysname> reset mld-snooping statistics
router-aging-time (MLD-snooping view)
Syntax
router-aging-time interval
undo router-aging-time
View
MLD-snooping view
Default level
2: System level
Parameters
interval: Specifies an aging timer for the dynamic router ports in seconds. The value ranges from 1 to 1000.
Description
Use router-aging-time to configure the aging timer for the dynamic router ports globally.
Use undo router-aging-time to restore the default.
By default, the aging timer of the dynamic router ports is 260 seconds.
This command works only on MLD snooping–enabled VLANs.
Related commands: mld-snooping router-aging-time.
Examples
# Set the aging timer for the dynamic router ports to 100 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] router-aging-time 100