Chapter 1&#160; IGMP Snooping Configuration Commands

# Display the IGMP Snooping configuration information of the switch.

<H3C> display igmp-snooping configuration

Enable IGMP-Snooping.

The router port timeout is 105 second(s).

The max response timeout is 1 second(s).

The host port timeout is 260 second(s).

Enable IGMP-Snooping Non-Flooding.

The information above tells us that: IGMP Snooping is enabled; the router port aging time is set to be 105 seconds; the max response time of a query is set to be 1 seconds; the aging time of a multicast group member is set to be 260 seconds. Non-broadcasting of unknown multicast data packets in a VLAN is enabled.

1.1.3 display igmp-snooping group

display igmp-snooping group [ vlan vlan-id ]

vlan vlan-id: Specifies the VLAN where the multicast group to be viewed is located. When the parameter is omitted, the command will display the information about all the multicast groups on the VLAN.

Use the display igmp-snooping group command to view the IP multicast group and MAC multicast group information of a VLAN or all the VLAN where the Ethernet switch is located. It displays the information such as VLAN ID, router port, IP multicast group address, member ports in the IP multicast group, MAC multicast group, MAC multicast group address, and the member ports in the MAC multicast group.

# Display the multicast group information about VLAN2.

<H3C> display igmp-snooping group vlan 2

***************Multicast group table***************

Vlan(id):2.

Router port(s):Ethernet3/1/1

IP group(s):the following ip group(s) match to one mac group.

IP group address:230.45.45.1

Member port(s):Ethernet3/1/12

MAC group(s):

MAC group address:01-00-5e-2d-2d-01

Member port(s):Ethernet3/1/12

We can know from the information listed above that:

l There is a multicast group in VLAN 2;

l The router port is Ethernet 2/1/1;

l The IP multicast group address is 230.45.45.1;

l The member of the IP multicast group is Ethernet 2/1/2;

l MAC multicast group is 0100-5e2d-2d01;

l The member of the MAC multicast group is Ethernet 2/1/2.

1.1.4 display igmp-snooping statistics

display igmp-snooping statistics

Use the display igmp-snooping statistics command to view the statistics information on IGMP Snooping.

This command displays the information such as the number of received general IGMP query packets, received IGMP group-specific query packets, received IGMP v1 packets, received IGMP v2 packets, received IGMP leave packets and error packets, and sent IGMP group-specific query packets.

Related command: igmp-snooping.

# Display statistics information about IGMP Snooping.

<H3C> display igmp-snooping statistics

Received IGMP general query packet(s) number:0.

Received IGMP specific query packet(s) number:0.

Received IGMP V1 report packet(s) number:0.

Received IGMP V2 report packet(s) number:0.

Received IGMP leave packet(s) number:0.

Received error IGMP packet(s) number:0.

Sent IGMP specific query packet(s) number:0.

The information above shows that:

IGMP Snooping receives:

l 0 IGMP general query packets

l 0 IGMP group-specific query packets

l 0 IGMP v1 report packets

l 0 IGMP v2 report packets

l 0 IGMP leave packets

l o IGMP error packets

IGMP Snooping sends:

l 0 IGMP group-specific query packets

1.1.5 igmp-snooping

igmp-snooping { enable | disable }

System view, VLAN view

enable: Enables IGMP Snooping.

disable: Disables IGMP Snooping;

Use the igmp-snooping enable command to enable IGMP Snooping.

Use the igmp-snooping disable command to disable IGMP Snooping.

By default, the switch disables IGMP Snooping.

Caution:

l When configuring IGMP Snooping, first enable global IGMP Snooping in system view, and then enable IGMP Snooping in VLAN view. Otherwise the IGMP Snooping function will not take effect.

l If the VLAN VPN is enabled on a port, the IGMP Snooping feature cannot be enabled on the VLAN for the port or the IGMP feature cannot be enabled on the corresponding VLAN interface.

l If IGMP Snooping feature is enabled on a VLAN, or IGMP is enabled on the VLAN interface, you cannot add the member port on which VLAN VPN is enabled into the VLAN.

l Isolate-user-VLAN supports the IGMP-Snooping function. After IGMP-Snooping is enabled under isolate-user-VLAN, all secondary VLANs are IGMP-Snooping enabled. It makes no sense to enable IGMP-Snooping for a secondary VLAN.

l In a secondary VLAN, IGMP packets will be directly converted and processed in isolate-user-VLAN, namely all the multicast services are implemented within isolate-user-VLAN.

l Ports in secondary VLANs cannot be used as source addresses of multicast.

# Enable IGMP Snooping in system view.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping enable

# Enable IGMP Snooping on VLAN 10

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 10

[H3C-vlan10] igmp-snooping enable

1.1.6 igmp-snooping fast-leave

Syntax

igmp-snooping fast-leave [ vlan { vlan-id [ to vlan-id ] }&<1-10> ]

undo igmp-snooping fast-leave [ vlan { vlan-id [ to vlan-id ] } &<1-10> ]

View

System view, Ethernet port view

Parameter

vlan { vlan-id [ to vlan-id ] }&<1-10>: Specifies any VLAN or VLAN scope for port you want to enable/disable the IGMP Snooping fast leave feature on. The vlan-id argument ranges from 1 to 4094.

Description

Use the igmp-snooping fast-leave command to enable IGMP Snooping fast leave on ports or VLANs.

Use the undo igmp-snooping fast-leave command to disable IGMP Snooping fast leave.

An IGMP Snooping-enabled Layer 2 switch directly removes a fast leave–enabled port from the list of member ports of the multicast group when the port receives a leave packet. That is, the switch peels off the port from the multicast group immediately and does not forward multicast data to the port any longer.

You can optionally specify multiple vlan keywords for the igmp-snooping fast-leave command, through which you can enable IGMP Snooping fast leave in corresponding VLANs. If you do not specify the vlan keyword, IGMP Snooping fast leave is enabled in all VLANs. As mentioned earlier, the igmp-snooping fast-leave command can be executed in both system view and Ethernet port view. When you execute the command in system view, fast leave is enabled on all ports of the specified VLANs, otherwise, it is only enabled on the current port in the specified VLANs.

& Note:

l Fast leaves that are configured in system view and Ethernet port view operate separately.

l Fast leave works on all ports of the specified VLANs if you configure it in system view. However, it only works on the current port (e.g., a port operates as a trunk of multiple VLANs) in the specified VLANs if you configure it in Ethernet port view.

Caution:

l Fast leave configured for a port takes effect only when the VLAN it belongs to is IGMP Snooping-enabled.

l Fast leave does not work if the corresponding specified VLANs do not exist, the port does not belongs to any of the specified VLANs, or the VLANs do not have IGMP Snooping enabled.

l A newly configured IGMP Snooping clears all existing fast leave configurations.

l The igmp-snooping fast-leave command is useless if you do not enable IGMP Snooping globally. (You can enable IGMP Snooping globally by executing the igmp-snooping enable command in system view.)

l When you configure IGMP Snooping fast leave on aggregation ports, the configuration takes effect only on primary aggregation ports.

l If you add an IGMP V1 host of the same multicast group to the port, the switch does not remove the port when the port receives an IGMP Leave packet of the multicast group even you enable IGMP Snooping fast leave for the port.

Fast leave is disabled by default.

Related command: igmp-snooping.

Example

# Enable IGMP Snooping fast leave on the Ethernet2/1/1 port in VLAN 5 only.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/1/1

[H3C-Ethernet2/1/1] igmp-snooping fast-leave vlan 5

# Enable IGMP Snooping fast leave on the Ethernet2/1/1 port in VLAN 5, VLAN 7, VLAN 8, VLAN 30 through VLAN 40, VLAN 50, VLAN 55, VLAN 60, and VLAN 61.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/1/1

[H3C-Ethernet2/1/1] igmp-snooping fast-leave vlan 5 7 to 8 30 to 40 50 55 60 to 61

# Enable IGMP Snooping fast leave on the Ethernet2/1/1 port in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface Ethernet2/1/1

[H3C-Ethernet2/1/1] igmp-snooping fast-leave

# Enable IGMP Snooping fast leave on the Ethernet2/1/1 port in all VLANs. Then disable the feature in VLAN 3.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/1/1

[H3C-Ethernet2/1/1] igmp-snooping fast-leave

[H3C-Ethernet2/1/1] undo igmp-snooping fast-leave vlan 3

# Disable IGMP Snooping fast leave on the Ethernet2/1/1 port in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/1/1

[H3C-Ethernet2/1/1] undo igmp-snooping fast-leave

# Enable IGMP Snooping fast leave on all Ethernet ports in VLAN 5.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping fast-leave vlan 5

# Enable IGMP Snooping fast leave on all Ethernet ports in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping fast-leave

# Enable IGMP Snooping fast leave for all Ethernet ports except those in VLAN 5.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping fast-leave

[H3C] undo igmp-snooping fast-leave vlan 5

# Disable IGMP Snooping fast leave in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] undo igmp-snooping fast-leave

1.1.7 igmp-snooping group-policy

Syntax

igmp-snooping group-policy acl-number

undo igmp-snooping group-policy

View

VLAN view

Parameter

acl-number: Number of basic ACL, in the range of 2,000 to 2,999.

Description

Use the igmp-snooping group-policy command to configure the filtering rule of multicast groups on a specified VLAN so as to control the access to IP multicast groups. You can configure only one ACL rule for each VLAN, and the new configured rule will replace the old one.

Use the undo igmp-snooping group-policy command to cancel the configuration.

By default, no filtering rule is set in a VLAN. In this case, a host can join any multicast group.

Example

# Create ACL2001 and configure the flow rule for basic ACL, using the source IP address serves as the destination multicast address.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]acl number 2001

[H3C-acl-basic-2001]rule 0 permit source 224.1.1.1 0

[H3C-acl-basic-2001]quit

# Create VLAN 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]vlan 2

# Configure the filtering rule of multicast groups in VLAN2.

[H3C-vlan2]igmp-snooping group-policy 2001

# Cancel the filtering rule in VLAN2.

[H3C-vlan2]undo igmp-snooping group-policy

1.1.8 igmp-snooping host-aging-time

igmp-snooping host-aging-time seconds

undo igmp-snooping host-aging-time

seconds: Port aging time for the multicast group member, ranging from 200 to 1000 seconds. By default, it is 260 seconds.

Use the igmp-snooping host-aging-time command to configure the port aging time of the multicast group members.

Use the undo igmp-snooping host-aging-time command to restore the default value.

This command is used to set the aging time of the multicast group member so that the refresh frequency can be controlled. When the group members change frequently, the aging time should be comparatively short, and vice versa.

Related command: igmp-snooping.

# Set the aging time to 300 seconds.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping host-aging-time 300

1.1.9 igmp-snooping max-response-time

igmp-snooping max-response-time seconds

undo igmp-snooping max-response-time

seconds: Maximum response time for a query, ranging from 1 to 25 seconds. By default, it is 1 second.

Use the igmp-snooping max-response-time command to configure the maximum response time for a query.

Use the undo igmp-snooping max-response-time command to restore the default value.

The set maximum response time decides the time limit for the switch to respond to IGMP Snooping query packets.

Related command: igmp-snooping and igmp-snooping router-aging-time.

# Set the maximum response time for the IGMP Snooping packet to 15s.

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping max-response-time 15

1.1.10 igmp-snooping nonflooding-enable

Syntax

igmp-snooping nonflooding-enable

undo igmp-snooping nonflooding-enable

View

System view

Parameter

None

Description

Use the igmp-snooping nonflooding-enable command to enable unknown multicast data packets not to be broadcasted within a VLAN.

Use the undo igmp-snooping nonflooding-enable command to disable unknown multicast data packets not to be broadcasted within a VLAN.

Note that if IGMP snooping is not enabled on the VLAN (nor Layer 3 multicast), unknown multicast packets are broadcasted within the VLAN no matter whether this function is enabled or not. To make unknown multicast data packets not be broadcasted within the VLAN, you need to enable igmp-snooping in this VLAN and enable igmp-snooping nonflooding-enable globally.

By default, unknown multicast data packets are broadcasted within the VLAN.

Example

# Enable multicast packets not to be broadcasted within the VLAN.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping nonflooding-enable

1.1.11 igmp-snooping router-aging-time

igmp-snooping router-aging-time seconds

undo igmp-snooping router-aging-time

seconds: Specifies the router port aging time, ranging from 1 to 1000 measured in seconds; By default, it is 105.

Use the igmp-snooping router-aging-time command to configure the router port aging time of IGMP Snooping.

Use the undo igmp-snooping router-aging-time command to restore the default value.

The port here refers to the Ethernet switch port connected to the multicast router. The Layer-2 Ethernet switch receives general query packets from the router via this port. The timer should be set to about 2.5 times of the general query period of the router.

Related command: igmp-snooping and igmp-snooping max-response-time.

# Set the aging time of the IGMP Snooping router port to 500 seconds.

System View: return to User View with Ctrl+Z.

[H3C] igmp-snooping router-aging-time 500

1.1.12 reset igmp-snooping statistics

reset igmp-snooping statistics

Using reset igmp-snooping statistics command, you can reset the IGMP Snooping statistic information.

Related command: igmp-snooping.

# Clear IGMP Snooping statistic information.

<H3C> reset igmp-snooping statistics

1.2 Multicast Static Routing Port Configuration Commands

1.2.1 igmp-snooping mrouter port

Syntax

igmp-snooping mrouter port port-number

undo igmp-snooping mrouter port port-number

View

VLAN view

Parameter

port-number: Port number of the port to be configured as a static routing port. Provide this argument in the format of interface-type interface-number, where the interface-type argument can only be Ethernet port type.

Description

Use the igmp-snooping mrouter port command to configure a port in a VLAN as a static routing port, through which IGMP packets can be transparently transmitted, so as to meet the requirements of specific networks.

Use the undo igmp-snooping mrouter port command to remove static routing port configuration.

By default, no static routing port is configured.

Caution:

l You will fail to configure a port to be a static routing port if the port identified by the port-number argument does not exist or does not belong to the VLAN.

l You can configure multiple ports in a VLAN to be static routing ports by executing the igmp-snooping mrouter port command repeatedly. The newly configured ports do not replace the existing static routing ports.

l The configuration of a static routing port takes effect on the current port only, no matter whether the current port is an aggregated port or not. To configure all ports in an aggregation group as static routing ports, you can enable the static routing port function on all the ports in the aggregation group.

Related command: igmp-snooping mrouter vlan.

Example

# Configure GigabitEthernet 5/1/1 port to be a static routing port (assuming that GigabitEthernet 5/1/1 port belongs to VLAN 1).

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 10

[H3C-vlan10] igmp-snooping mrouter port GigabitEthernet 5/1/1

# Cancel the static routing port GigabitEthernet 5/1/1 port in VLAN10.

[H3C-vlan10] undo igmp-snooping mrouter port GigabitEthernet 5/1/1

1.2.2 igmp-snooping mrouter vlan

Syntax

igmp-snooping mrouter vlan vlan-id

undo igmp-snooping mrouter vlan vlan-id

View

Ethernet port view

Parameter

vlan-id: ID of the VLAN to which the static routing port belongs.

Description

Use the igmp-snooping mrouter vlan command to configure the port to be a static routing port of the specified VLAN, through which IGMP packets can be transparently transmitted, so as to meet the requirements of specific networks.

Use the undo igmp-snooping mrouter vlan command to remove static routing port configuration.

By default, no static routing port is configured.

Caution:

l You will fail to configure a port to be a static routing port if the VLAN identified by the vlan-id argument does not exist or the port does not belong to the VLAN.

Related command: igmp-snooping mrouter port

Example

# Configure Ethernet5/1/1 port to be a static routing port (assuming that Ethernet5/1/1 port belongs to VLAN 1).

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface Ethernet 5/1/1

[H3C-Ethernet5/1/1]igmp-snooping mrouter vlan 1

# Cancel the static routing port GigabitEthernet 5/1/1 port in VLAN1.

[H3C-Ethernet5/1/1]undo igmp-snooping mrouter vlan 1

Chapter 2 Multicast VLAN Configuration Commands

2.1 Multicast VLAN Configuration Commands

2.1.1 service-type multicast

Syntax

service-type multicast

undo service-type multicast

View

VLAN view

Parameter

None

Description

Use the service-type multicast command to configure the current VLAN as multicast VLAN.

Use the undo service-type multicast command to remove the configuration.

By default, all VLANs are not multicast VLANs.

If you configure multicast VLAN, add the corresponding switch ports to the multicast VLAN and enable IGMP Snooping, users in different VLANs can share one multicast VLAN, and multicast flow can be transmitted in the multicast VLAN only, thus saving bandwidth. The completely isolated multicast VLAN and user VLAN can effectively ensure security.

& Note:

l A port can belong to only one multicast VLAN.

l The type of port connected with user terminals must be hybrid untagged.

l The current system supports up to three multicast VLANs.

Example

# Configure VLAN 2 as multicast VLAN.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 2

[H3C-vlan2] service-type multicast

Chapter 3 Multicast Common Configuration Commands

3.1 Multicast Common Configuration Commands

3.1.1 broadcast-suppression

Syntax

broadcast-suppression { ratio | bandwidth bandwidth }

undo broadcast-suppression

View

Ethernet port view

Parameter

ratio: Specifies the maximum wire speed ratio of the broadcast traffic allowed on the port. The value range is 1 to 100, and the default value is 50. The smaller the ratio is, the smaller the broadcast traffic is allowed to pass.

bandwidth: Specifies broadcast suppression bandwidth on the port. The value range is 1 to the maximum value of port bandwidth.

Description

Use the broadcast-suppression command to set the broadcast suppression ratio or broadcast suppression bandwidth.

Use the undo broadcast-suppression command to disable the broadcast suppression function.

The default broadcast suppression ratio is 50%.

You can use the broadcast-suppression command repeatedly. The effective broadcast suppression ratio value is the one last updated.

Caution:

You cannot enable both broadcast suppression and multicast suppression simultaneously on the same card. Namely, once you have enabled broadcast suppression on some ports of a card, you cannot enable multicast suppression on the other ports of the card, and vice versa.

If multicast suppression is enabled, broadcast packets are also suppressed at the same time, while broadcast suppression does not work on multicast packets.

No distinction is made between known multicast and unknown multicast for multicast suppression.

Related command: multicast-suppression.

Example

# Set the broadcast suppression ratio to 40%.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet 2/1/1

[H3C-Ethernet2/1/1] broadcast-suppression 40

# Set the broadcast suppression bandwidth to 40Mbit.

[H3C-Ethernet2/1/1] broadcast-suppression bandwidth 40

# Disable broadcast suppression.

[H3C-Ethernet2/1/1] undo broadcast-suppression

3.1.2 debugging multicast forwarding

debugging multicast forwarding

undo debugging multicast forwarding

Use the debugging multicast forwarding command to enable multicast packet forwarding debugging functions.

Use the undo debugging multicast forwarding command to disable the debugging functions.

By default, the debugging function is disabled.

<H3C> debugging multicast forwarding

# Enable multicast packet forwarding debugging functions.

3.1.3 debugging multicast kernel-routing

debugging multicast kernel-routing

undo debugging multicast kernel-routing

Use the debugging multicast kernel-routing command to enable multicast kernel routing debugging functions.

Use the undo debugging multicast kernel-routing command to disable the debugging functions.

By default, the multicast kernel routing debugging is disabled.

<H3C> debugging multicast kernel-routing

# Enable multicast kernel routing debugging functions.

3.1.4 debugging multicast status-forwarding

debugging multicast status-forwarding

undo debugging multicast status-forwarding

Use the debugging multicast status-forwarding command to enable multicast forwarding status debugging functions.

Use the undo debugging multicast status-forwarding command to disable the debugging functions.

By default, the multicast forwarding status debugging is disabled.

<H3C> debugging multicast status-forwarding

# Enable multicast forwarding status debugging functions.

3.1.5 display mpm forwarding-table

Syntax

display mpm forwarding-table [ group-address | source-address ]

View

Any view

Parameter

group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255.

source-address: IP address of the multicast source.

Description

Use the display mpm forwarding-table command to view the port-carrying multicast forwarding table information.

When a group address or a source address is specified, this command shows only the matched (S, G) entry; otherwise, this command shows all entries.

Related command: display multicast forwarding-table

Example

# View the port-carrying multicast forwarding table information.

<H3C> display mpm forwarding-table

Multicast Forwarding Cache Table

Total 1 entry (entries)

00001. (10.11.113.110, 226.1.1.1)

in-vlan Vlan1

2 out-vlan(s):

Vlan20

Ethernet5/1/33

Vlan10

Ethernet5/1/31

Total 1 entry(entries) Listed

The descriptions about the displayed information are shown in Table 3-3.

Table 3-1 Description of information generated by the command display mpm forwarding-table

Field	Description
Multicast Forwarding Cache Table	Multicast forwarding cache table
Total 1 entry (entries)	Total number of entries
00001	Sequence number of entries
(10.11.113.110, 226.1.1.1)	(s,g), namely (source address, group address)
in-vlan Vlan1	The in-VLAN of the multicast forwarding table is VLAN 1
2 out-vlan(s):	The multicast forwarding table has two out-VLANs
Vlan20 Ethernet5/1/33 Vlan10 Ethernet5/1/31	The first out-VLAN is VLAN 20, of which the egress port is Ethernet 5/1/33 The second out-VLAN is VLAN 10, of which the egress port is Ethernet5/1/31
Total 1 entry(entries) Listed	Totally 1 (S, G) entry is listed.

3.1.6 display mpm group

Syntax

display mpm group [ vlan vlan-id [ ip-address ] ]

View

Any view

Parameter

vlan vlan-id: Specifies the VLAN the desired multicast group resides in.

ip-address: IP address of the desired multicast group.

Description

Use the display mpm group command to display the information about the IP multicast groups or MAC multicast groups in a specified VLAN. If you do not specify the vlan-id argument, this command displays the information about multicast groups in all VLANs.

The information displayed contains the following fields:

l VLAN ID

l Router port

l IP multicast group

l IP multicast group address

l Member port of IP multicast group

l MAC multicast group

l MAC multicast group address

l Member port of MAC multicast group

Caution:

l The information displayed by this command includes that displayed by the display igmp group command and port information.

l The information displayed by this command is the same as that displayed by the display igmp-snooping group command except the VLAN properties. The display igmp-snooping group command displays the information about the ports that join Layer 2 multicast groups in VLANs that have the IGMP-snooping function enabled. The display mpm group command displays the information about the ports that join Layer 3 multicast groups in VLANs that have the IGMP function enabled.

Example

# Display the multicast group information about VLAN 2.

<H3C> display mpm group vlan 2

Vlan(id):2.

Router port(s):Ethernet2/1/1

IP group(s):the following ip group(s) match to one mac group.

IP group address:230.45.45.1

Member port(s):Ethernet2/1/2

MAC group(s):

MAC group address:01-00-5e-2d-2d-01

Member port(s):Ethernet2/1/2

Table 3-2 Description on the fields of the display mpm group command

Field	Description
Vlan(id):2.	The output information is about VLAN 2.
Router port(s):Ethernet2/1/1	The router port concerned is Ethernet2/1/1.
IP group(s):the following ip group(s) match to one mac group.	Lists the IP multicast groups matching the same MAC multicast group.
IP group address:230.45.45.1	The IP address of the IP multicast group is 230.45.45.1.
Member port(s):Ethernet2/1/2	Ethernet2/1/2 port is a member port of the IP multicast group.
MAC group address:01-00-5e-2d-2d-01	The MAC address of the MAC multicast group is 01-00-5e-2d-2d-01.
Member port(s):Ethernet2/1/2	Ethernet2/1/2 port is a member port of the MAC multicast group.

3.1.7 display multicast forwarding-table

display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask | mask-length } ] | incoming-interface{ interface-type interface-number | null NULL-interface- number | register} ] *

group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast forwarding table entry.

interface-type interface-number: Interface type and interface number.

null: Incoming-interface is null.

NULL-interface-number: The only number is 0.

register: Register interface of PIM-SM.

Use the display multicast forwarding-table command to view the information of multicast forwarding table.

Caution:

You must use multicast routing-enable command in system view to enable IP multicast routing before you can view the multicast forwarding table information.

Related command: display multicast routing-table.

Table 3-3 Description of information generated by the command display multicast forwarding-table

# View the multicast forwarding table information.

<H3C> display multicast forwarding-table

Multicast Forwarding Cache Table

Total 2 entries

00001. (4.4.4.4, 224.2.254.84), iif Vlan-interface1, 0 oifs

Matched 240 pkts(11288 bytes), Wrong If 0 pkts

Forwarded 232 pkts(11288 bytes)

00002. (4.4.4.4, 224.2.149.17), iif Vlan-interface1, 1 oifs

List of outgoing interface:

01: Vlan-interface2

Matched 236 pkts(3267 bytes), Wrong If 0 pkts

Forwarded 233 pkts(3267 bytes)

Matched 2 entries

The descriptions about the displayed information are shown in Table 3-3.

Field	Description
Multicast Forwarding Cache Table	Multicast forwarding cache table
Total 2 entries	Total number of entries
00002	Sequence number of entries
(4.4.4.4, 224.2.149.17)	(s,g)
iif Vlan-interface1, 1 oifs	Multicast forwarding cache table has an incoming interface Vlan-interface 1 and one outgoing interface
List of outgoing interface: 01: Vlan-interface2	List of outgoing interface has an outgoing interface Vlan-interface 2
Matched 236 pkts(3267 bytes), Wrong If 0 pkts Forwarded 233 pkts(3267 bytes)	236 matched packets (3267 bytes); 0 matched packets means wrong; 233 forwarded packets (3267 bytes)
Matched 2 entries	2 matched entries

3.1.8 display multicast routing-table

display multicast routing-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type vlan-interface | register } ]*

group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from 224.0.0.0 to 239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast route entry.

vlan-interface interface-number: VLAN interface number.

register: Register interface of PIM-SM.

Use the display multicast routing-table command to view the information of IP multicast routing table.

Caution:

You must use multicast routing-enable command in system view to enable IP multicast routing before you can view the multicast routing table information.

Related command: display multicast forwarding-table

<H3C> display multicast routing-table

# View the route entry information in the multicast routing table.

Multicast Routing Table

Total 3 entries

(4.4.4.4, 224.2.149.17)

Uptime: 00:15:16, Timeout in 272 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list:

Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP

(4.4.4.4, 224.2.254.84)

Uptime: 00:15:16, Timeout in 272 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list: NULL

(4.4.4.4, 239.255.2.2)

Uptime: 00:02:57, Timeout in 123 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list: NULL

Matched 3 entries

The descriptions about the displayed information are shown in Table 3-4.

Table 3-4 Description of output information of the command display multicast routing-table

Field	Description
Multicast Routing Table	Multicast routing table
Total 3 entries	3 entries in total
(4.4.4.4, 224.2.149.17)	(s, g)
Uptime: 00:15:16, Timeout in 272 sec Upstream interface: Vlan-interface1(4.4.4.6) Downstream interface list: Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP	Multicast routing table lasts 15’16” and times out in 272 seconds. Upstream interface vlan-interface 1 (its IP address is 4.4.4.6). Downstream interface list: has an interface Vlan-interface 2 (its IP address is 2.2.2.4). The downstream interface is configured with IGMP groups.
Matched 3 entries	3 entries in total meeting the requirement

3.1.9 ip managed-multicast

Syntax

ip managed-multicast

undo ip managed-multicast

View

System view

Parameter

None

Description

Use the ip managed-multicast command to enable the managed multicast function of the system.

Use the undo ip managed-multicast to disable the managed multicast function.

Related command: display local-user, service-type lan-access.

Example

# Enable the managed multicast function of the system.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]ip managed-multicast

3.1.10 local-user multicast

Syntax

local-user multicast [ domain domain-name ] ip-address [ mask-length ]

undo local-user [ domain domain-name ] ip-address

View

System view

Parameter

ip-address: IP address of the multicast group.

mask-length: Mask length of the multicast group.

domain domain-name: Domain name of the multicast group.

Description

Use the local-user multicast command to specify the multicast group(s) that users in a specified domain can join.

Use the undo local-user multicast command to cancel the configuration.

Related command: display local-user, service-type lan-access, multicast.

Example

# Grant users permission to join the multicast group with the IP address of 225.10.10.10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] local-user multicast 225.10.10.10.

3.1.11 multicast

Syntax

multicast ip-address [ ip-address &<1-9> | mask-length ]

undo multicast { ip-address [ ip-address &<1-9> ] | all }

View

Local user view

Parameter

ip-address &<1-9>: Multicast group IP address. &<1-9> implies that the preceding parameter can repeatedly input up to 9 times.

mask-length: Mask length. The default value of this argument is to 32. If you do not specify this argument, this command specifies a specific multicast group instead of a network segment.

Description

Use the multicast command to configure the multicast groups so that users can join the multicast group (the managed multicast).

Use the undo multicast command to remove the configuration.

If you do not specify the mask-length argument, you can configure up to ten multicast group addresses at one time. And if you specify the mask-length argument, you can configure only one multicast group address at one time. You can configure up to 64 network segments.

Managed multicast is based on the port mode. It implements authority control for users to a multicast group. Users must pass the 802.1x authentication for the port first. Moreover, users can only join the multicast group configured particularly for them. The port-based managed multicast prohibits users without authority from joining, controlling users’ access to the specific multicast group.

Caution:

In local user view, before configuring this command, you must configure user service type as LAN-ACCESS, which the managed multicast supports exclusively at present.

You can use the service-type lan-access command to configure service type in local user view.

Related command: display local-user, service-type lan-access.

Example

# Allow users to join the multicast group with the IP address of 225.10.10.10.

<H3C>system-view

System View: return to User View with Ctrl+Z.

[H3C]local-user test

[H3C-luser-test] multicast 225.10.10.10.

3.1.12 multicast route-limit

multicast route-limit limit

undo multicast route-limit

limit: Limits the capacity of multicast routing table.

Use the multicast route-limit command to limit the capacity of multicast routing table. When the preset capacity is exceeded, the router will discard new (S, G) protocol and data packets.

Use the undo multicast route-limit command to restore the limit to the default value.

By default, the capacity of multicast routing table is set to 512.

If the existing route entries exceed the capacity value you configured during using this command, the system will not delete the existing entries, but prompts the information “Existing route entries exceed the configured capacity value”.

The new configuration overwrites the old one if you run the command for a second time.

# Limit multicast routing table capacity at 128.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast route-limit 128

3.1.13 multicast routing-enable

multicast routing-enable

undo multicast routing-enable

Use the multicast routing-enable command to enable multicast routing.

Use the undo multicast routing-enable command to disable multicast routing.

By default, multicast routing is disabled.

Related commands: pim dm, pim sm, igmp enable.

# Enable multicast routing.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

3.1.14 multicast-suppression

Syntax

multicast-suppression { ratio | bandwidth bandwidth }

undo multicast-suppression

View

Ethernet port view

Parameter

ratio: Specifies the maximum wire speed ratio of the multicast traffic allowed on the port. The value range is 1 to 100, and the default value is 50. The smaller the ratio is, the smaller the multicast traffic is allowed to pass.

bandwidth: Specifies multicast suppression bandwidth on the port. The value range is 1 to the maximum value of port bandwidth.

Description

Use the multicast-suppression command to set the multicast suppression ratio or multicast suppression bandwidth.

Use the undo multicast-suppression command to disable the multicast suppression function.

The default multicast suppression ratio is 100%.

You can use the multicast-suppression command repeatedly. The effective multicast suppression ratio value is the one last updated.

Caution:

l You cannot enable both broadcast suppression and multicast suppression simultaneously on the same card. Namely, once you have enabled broadcast suppression on some ports of a card, you cannot enable multicast suppression on the other ports of the card, and vice versa. Although the commands are based on ports, the mutual exclusion between these two commands is based on cards.

l If multicast suppression is enabled, broadcast packets are also suppressed at the same time, while broadcast suppression does not work on multicast packets.

l No distinction is made between known multicast and unknown multicast for multicast suppression.

Related command: broadcast-suppression.

Example

# Set the multicast suppression ratio to 40%.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface Ethernet 2/1/1

[H3C-Ethernet2/1/1] multicast-suppression 40

# Set the multicast suppression bandwidth to 40Mbit.

[H3C-Ethernet2/1/1] multicast-suppression bandwidth 40

# Disable multicast suppression.

[H3C-Ethernet2/1/1] undo multicast-suppression

3.1.15 reset multicast forwarding-table

reset multicast forwarding-table [ statistics ] { all | { group-address [ mask { group-mask | group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ] | incoming-interface { null NULL-interface-number | interface-type interface-number } }* }

statistics: If it is selected, the system clears the statistic information of MFC forward entries. Otherwise, the system clears MFC forward entries.

all: All MFC forward entries.

group-address: Specifies multicast group address.

group-mask: Specifies Mask of multicast group address

group-mask-length: Specifies mask length of multicast group address.

source-address: Specifies source address.

source-mask: Specifies mask of source address.

source-mask-length: Specifies mask length of source address.

incoming-interface: Specifies incoming interface for the multicast forward entry.

null: Incoming-interface is null.

NULL-interface-number: The only number is 0.

interface-type interface-number: Interface type and interface number.

Use the reset multicast forwarding-table command to clear MFC forwarding entries or the statistic information of MFC forwarding entries.

You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.

Related command:: reset pim routing-table, reset multicast routing-table, display multicast forwarding-table.

# Clear the forwarding entry with address of 225.5.4.3 from the MFC forwarding table.

<H3C> reset multicast forwarding-table 225.5.4.3

# Clear statistic information of the forwarding entry with address of 225.5.4.3 from the MFC forwarding table.

<H3C> reset multicast forwarding-table statistics 225.5.4.3

3.1.16 reset multicast routing-table

reset multicast routing-table { all | { group-address [ mask { group-mask | group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ] | incoming-interface vlan-interface interface-number } * }

all: All route entries in the core multicast routing table.

group-address: Specifies multicast group address.

group-mask: Specifies Mask of multicast group address

group-mask-length: Specifies mask length of multicast group address.

source-address: Specifies source address.

source-mask: Specifies mask of source address.

source-mask-length: Specifies mask length of source address.

incoming-interface: Specifies incoming interface for the multicast forward entry.

vlan-interface-type interface-number: Interface type and VLAN virtual interface number.

Use the reset multicast routing-table command to clear route entries from the core multicast routing table, as well as MFC forwarding entries.

You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.

Related command: reset pim routing-table, reset multicast forwarding-table and display multicast forwarding-table.

<H3C> reset multicast routing-table 225.5.4.3

# Clear the route entry with address of 225.5.4.3 from the core multicast routing table.

Chapter 4 IGMP Configuration Commands

4.1 IGMP Configuration Commands

4.1.1 debugging igmp

debugging igmp { all | event | host | packet | timer }

undo debugging igmp { all | event | host | packet | timer }

all: All the debugging information of IGMP.

event: Debugging information of IGMP event.

host: Debugging information of IGMP host.

packet: Debugging information of IGMP packets.

timer: Debugging information of IGMP timers.

Use the debugging igmp command to enable IGMP debugging functions.

Use the undo debugging igmp command to disable the debugging functions.

By default, IGMP debugging functions are disabled.

# Enable all IGMP debugging functions

<H3C> debugging igmp all

4.1.2 display igmp group

display igmp group [ group-address | interface vlan-interface interface-number ]

group-address: Address of the multicast group.

vlan-interface interface-number: VLAN interface number.

Use the display igmp group command to view the member information of the IGMP multicast group.

You can specify to show the information of a group or the member information of the multicast group on a VLAN interface. The information displayed contains the multicast groups which the downstream hosts join through IGMP or through command line.

Related command: igmp host-join.

Table 4-1 Description of the output information of the display igmp group command

# Display the IGMP group members in a directly-connected subnet.

<H3C> display igmp group

LoopBack0 (20.20.20.20): Total 3 IGMP Groups reported:

Group Address Last Reporter Uptime Expires

225.1.1.1 20.20.20.20 00:02:04 00:01:15

225.1.1.3 20.20.20.20 00:02:04 00:01:15

225.1.1.2 20.20.20.20 00:02:04 00:01:17

Field	Description
Group address	Multicast group address
Last Reporter	The last host reporting to join the multicast group
Uptime	Time passed since multicast group is discovered (hh: mm: ss).
Expires	Specifies when the member will be removed from the multicast group (hh: mm: ss).

4.1.3 display igmp interface

Syntax

display igmp interface [ vlan-interface interface-number ]

View

Any view

Parameter

vlan-interface interface-number: VLAN interface number of the router, used to specify the interface. If the parameters are omitted, information about all the interfaces running IGMP will be displayed.

Description

Use the display igmp interface command to view the IGMP configuration and running information on an interface.

Example

# View the IGMP configuration and running information of all interfaces.

<H3C> display igmp interface

Vlan-interface1 (10.153.17.99):

IGMP is enabled

Current IGMP version is 2

Value of query interval for IGMP(in seconds): 60

Value of other querier time out for IGMP(in seconds): 120

Value of maximum query response time for IGMP(in seconds): 10

Value of robust count for IGMP: 2

Value of startup query interval for IGMP(in seconds): 15

Value of last member query interval for IGMP(in seconds): 1

Value of query timeout for IGMP version 1(in seconds): 400

Policy to accept IGMP reports: none

Querier for IGMP: 10.153.17.99 (this router)

IGMP group limit is 1024

No IGMP group reported

Table 4-2 Description on the fields of the display igmp interface command

Field	Description
IGMP version	IGMP version
query interval	General query interval
querier timeout	Querier timeout time
max query response time	Maximum query response time
robust count	IGMP robust count, namely the number of times IGMP querier sends IGMP specific group query packet when it receives an IGMP Leave packet from a host
startup query interval	Startup query interval
last member query interval	The interval at which the IGMP querier sends IGMP specific group query packets when it receives an IGMP leave packet from a host
query timeout	Query timeout for IGMP V1
Policy to accept IGMP reports	Filter policy for the IGMP multicast group to control the accesses to the IP multicast group
Querier for IGMP	IGMP querier
IGMP group limit	Quantity limit of IGMP groups added to the interface. After the limit is reached, the router does not process the IGMP join messages

4.1.4 igmp enable

Syntax

igmp enable

undo igmp enable

View

VLAN interface view

Parameter

None

Description

Use the igmp enable command to enable IGMP on an interface.

Use the undo igmp enable command to disable IGMP on the interface.

By default, IGMP is disabled on an interface.

You must enable the multicast function before this command can work, you must use this command first before you can configure other IGMP features.

Related command: multicast routing-enable.

Caution:

l If the VLAN VPN is enabled on a port, the IGMP Snooping feature cannot be enabled on the VLAN to which the port belongs, and the IGMP feature cannot be enabled on the corresponding VLAN interface.

l If IGMP Snooping feature is enabled on a VLAN, or IGMP is enabled on the VLAN interface, you cannot add VLAN VPN enabled ports into the VLAN, and vice versa.

Example

# Enable IGMP on Vlan-interface 10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp enable

4.1.5 igmp fast-leave

Syntax

igmp fast-leave [ vlan { vlan-id [ to vlan-id ] } &<1-10> ]

undo igmp fast-leave [ vlan { vlan-id [ to vlan-id ] } &<1-10> ]

View

Ethernet port view, system view

Parameter

vlan-id: Specifies the VLAN you want to configure the IGMP Snooping fast leave feature on. The value range is from 1 to 4094.

Description

Use the igmp fast-leave command to enable IGMP fast leave on ports or VLANs.

Use the undo igmp fast-leave command to disable IGMP fast leave.

An IGMP-enabled Layer 3 switch does not query packets of the specific multicast group to a fast leave-enabled port any longer when the port receives an IGMP leave packet. Instead, the switch peels off the port from the multicast group immediately.

You can optionally specify multiple vlan keywords for the igmp fast-leave command, through which you can enable IGMP fast leave in corresponding VLANs. If you do not specify the vlan keyword, IGMP fast leave is enabled in all VLANs. As mentioned earlier, the igmp fast-leave command can be executed in both system view and Ethernet port view. When you execute the command in system view, fast leave is enabled on all ports of the specified VLANs, otherwise, it is only enabled on the current port in the specified VLANs.

& Note:

l Fast leaves that are configured in system view and Ethernet port view operate separately.

l Fast leave works on all ports of the specified VLANs if you configure it in system view. However, it only works on the current port (e.g., when a Trunk port belong to multiple VLANs) in the specified VLANs if you configure it in Ethernet port view.

Caution:

l Fast leave configured for a port takes effect only when the VLAN it belongs to is IGMP-enabled.

l Fast leave does not work if the corresponding specified VLANs do not exist, the port does not belongs to any of the specified VLANs, or the VLANs do not have IGMP enabled.

l You can enable multicast routing globally by executing the multicast routing-enable command before you can configure the fast leave feature.

l Disabling globally-enabled multicast routing results in all existing IGMP fast leave-related configurations being cleared.

l When you configure IGMP fast leave on aggregation ports, the configuration takes effect only on primary aggregation ports.

l If you add an IGMP V1 host of the same multicast group to the port, or configure a static host of the same multicast group by using the igmp host-join command, the switch does not remove the port when the port receives an IGMP Leave packet of the multicast group even you enable IGMP fast leave for the port.

Fast leave is disabled by default.

Example

# Enable IGMP fast leave on the Ethernet2/1/1 port in VLAN 5 only.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface Ethernet2/1/1

[H3C-Ethernet2/1/1] igmp fast-leave vlan 5

# Disable IGMP fast leave on the Ethernet2/1/1 port in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/1/1

[H3C-Ethernet2/1/1] undo igmp fast-leave

# Enable IGMP fast leave on all Ethernet ports in VLAN 5.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp fast-leave vlan 5

# Enable IGMP fast leave for on all Ethernet ports except those in VLAN 5.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] igmp fast-leave

[H3C] undo igmp fast-leave vlan 5

# Disable IGMP fast leave in all VLANs.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] undo igmp fast-leave

4.1.6 igmp group-limit

igmp group-limit limit

undo igmp group-limit

limit: Quantity of multicast groups, in the range of 0 to 512.

Use the igmp group-limit command to limit multicast groups to be added on an interface. After the limit is reached, the router does not process IGMP join messages.

Use the undo igmp group-limit command to restore the default setting.

By default, the maximum number is 512.

The new configuration overwrites the old one if you run the command for a second time.

# Limit the maximum number of IGMP groups to be added on Vlan-interface10 to 100.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp group-limit 100

4.1.7 igmp group-policy

Syntax

igmp group-policy acl-number

undo igmp group-policy

View

VLAN view

Parameter

acl-number: Number of basic ACL, in the range of 2,000 to 2,999.

Description

Use the igmp group-policy command to configure the filtering rule of multicast groups on a specified VLAN so as to control the access to IP multicast groups. You can configure only one ACL rule for each VLAN, and the new configured rule will replace the old one.

Use the undo igmp group-policy command to cancel the configuration.

By default, no filtering rule is set in a VLAN. In this case, a host can join any multicast group.

Example

# Create ACL2001 and configure the flow rule for basic ACL, using the source IP address serves as the destination multicast address.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]acl number 2001

[H3C-acl-basic-2001]rule 0 permit source 224.1.1.1 0

[H3C-acl-basic-2001]quit

# Create VLAN 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]vlan 2

# Configure the filtering rule of multicast groups on VLAN2.

[H3C-vlan2]igmp group-policy 2001

# Cancel the filtering rule in VLAN2.

[H3C-vlan2]undo igmp group-policy

4.1.8 igmp host-join port

igmp host-join group-address port interface-type interface- number [ to { interface-type interface- number ]

undo igmp host-join group-address port { interface-type interface-number [ to { interface-type interface- number ]

group-address: Multicast address of the multicast group that an interface will join.

interface-type interface-number [ to interface-type interface-number ]: Specifies the port under the VLAN interface.

Use the igmp host-join command to enable a port in the VLAN interface of an Ethernet switch to join a multicast group.

Use the undo igmp host-join command to disable the configuration.

By default, an interface does not join any multicast group.

Related command: igmp group-policy.

# Add port Ethernet 2/1/1 under VLAN-interface10 to the multicast group 225.0.0.1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp host-join 225.0.0.1 port Ethernet 2/1/1

4.1.9 igmp host-join vlan

Syntax

igmp host-join group-address vlan vlan-id

undo igmp host-join group-address vlan vlan-id

View

Ethernet port view

Parameter

group-address: Address of the multicast group to be joined.

vlan-id: VLAN where the port belongs to.

Description

Use the igmp host-join vlan command to make an Ethernet join a multicast group.

Use the undo igmp host-join vlan command to cancel the configuration.

By default, an Ethernet port does not join any multicast group.

Related command: igmp group-policy.

Example

# Add port Ethernet 2/1/1 to the multicast group at 225.0.0.1

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp enable

[H3C-Vlan-interface10] quit

[H3C] interface Ethernet 2/1/1

[H3C-Ethernet2/1/1] port access vlan 10

[H3C-Ethernet2/1/1] igmp host-join 225.0.0.1 vlan 10

4.1.10 igmp lastmember-queryinterval

igmp lastmember-queryinterval seconds

undo igmp lastmember-queryinterval

Interface view

seconds: Time interval before IGMP query router sends the IGMP group query message after it receives the IGMP Leave message from the host. It is in the range of 1 to 5 seconds. By default, it is 1 second.

Use the igmp lastmember-queryinterval command to set the time interval at which IGMP query router sends the IGMP group query message after it receives the IGMP Leave message from the host.

Use the undo igmp lastmember-queryinterval command to restore the default value.

This command is valid only when the query router runs IGMP v2. If the host runs IGMP v1 , it does not send an IGMP Leave message when it leaves a group, so this command is invalid for the IGMP query router.

Related command: igmp robust-count and display igmp interface.

# Set the query interval at the Vlan-interface10 as 3 seconds.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp lastmember-queryinterval 3

4.1.11 igmp max-response-time

igmp max-response-time seconds

undo igmp max-response-time

VLAN Interface view

seconds: Maximum response time in the IGMP query messages in second in the range from 1 to 25. By default, the value is 10 seconds.

Use the igmp max-response-time command to configure the maximum response time contained in the IGMP query messages.

Use the undo igmp max-response-time command to restore the default value.

The maximum query response time determines the period for a router to quickly detect that there are no more directly connected group members in a LAN.

Related command: display igmp group.

# Set the maximum response time carried in host-query message to 8 seconds.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp max-response-time 8

4.1.12 igmp robust-count

igmp robust-count robust-value

undo igmp robust-count

robust-value: IGMP robust value, number of times the IGMP query router sends IGMP group query message after it receives the IGMP Leave message from the host. the value range is 2 to 5. The default value is 2.

Use the igmp robust-count command to set the number of times the IGMP query router sends IGMP group query message after it receives the IGMP Leave message from the host.

Use the undo igmp robust-count command to restore the default value.

Related commands: igmp lastmember-queryinterval, display igmp interface.

# Set the robust value at the Vlan-interface 10 as 3.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp robust-count 3

4.1.13 igmp timer other-querier-present

igmp timer other-querier-present seconds

undo igmp timer other-querier-present

seconds: IGMP querier present timer value in second ranging from 1 to 131070. By default, the value is twice the value of IGMP query message interval, i.e., 120 seconds.

Use the igmp timer other-querier-present command to configure the timer of presence of the IGMP querier.

Use the undo igmp timer other-querier-present command to restore the default value.

On a shared network, i.e., there are multiple multicast routers on the same network segment, the query router (querier for short) takes charge of sending query messages periodically on the interface. If other non-queriers receive no query messages within the valid period, the router will consider the previous query to be invalid and the router itself becomes a querier.

In IGMP version 1, the selection of a query is determined by the multicast routing protocol. In IGMP version 2, the router with the lowest IP address on the shared network segment acts as the querier.

Related command: igmp timer query and display igmp interface.

# Set querier to expire after 300 seconds.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp timer other-querier-present 300

4.1.14 igmp timer query

igmp timer query seconds

undo igmp timer query

seconds: Interval at which a router transmits IGMP query messages in second in the range from 1 to 65535. By default, the value is 60 seconds.

Use the igmp timer query command to configure the interval at which a router interface sends IGMP query messages.

Use the undo igmp timer query command to restore the default value.

A multicast router periodically sends out IGMP query messages to check whether there are multicast group members on the network. The query interval can be modified according to the practical conditions of the network.

Related command: igmp timer other-querier-present.

# Configure to transmit the host-query message every 150 seconds via VLAN-interface2.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 2

[H3C-Vlan-interface2] igmp timer query 150

4.1.15 igmp version

igmp version { 1 | 2 }

undo igmp version

1: IGMP version 1.

2: IGMP version 2. The default setting is IGMP version 2.

Use the igmp version command to specify the version of IGMP that a router uses.

Use the undo igmp version command to restore the default value.

The system does not automatic switching between different IGMP versions. Therefore, all routers on a subnet must be configured to run the same IGMP version.

# Run IGMP Version 1 on VLAN-interface10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] igmp version 1

4.1.16 reset igmp group

reset igmp group { all | interface vlan-interface interface-number { all | group-address [ group-mask ] } }

all: All IGMP groups.

interface vlan-interface interface-number: VLAN virtual interface type and number.

group-address: IGMP group address.

group-mask: Segment mask of the IGMP group address.

Use the reset igmp group command to delete an existing IGMP group from the interface. The deleted group can added again on the interface.

<H3C> reset igmp group interface Vlan-interface10 all

# Delete all IGMP groups on all the interfaces.

<H3C> reset igmp group all

# Delete all IGMP groups on the Vlan-intrface10.

# Delete the group 225.0.0.1 from the Vlan-interface10.

<H3C> reset igmp group interface Vlan-interface10 225.0.0.1

# Delete the IGMP groups ranging from 225.1.1.0 to 225.1.1.255 on the Vlan-interface10.

<H3C> reset igmp group interface Vlan-interface10 225.1.1.0 255.255.255.0

4.2 IGMP Proxy Configuration Commands

4.2.1 igmp proxy

Syntax

igmp proxy interface-type interface-number

undo igmp proxy

View

VLAN interface view

Parameter

interface-type: Proxy interface type.

interface-number: Proxy interface number.

Description

Use the igmp proxy command to enable IGMP proxy for the VLAN interface and specify the IGMP proxy interface of the VLAN interface.

Use the undo igmp proxy command to remove IGMP proxy configuration.

By default, IGMP proxy is disabled on a VLAN interface.

Caution:

l You need to enable PIM protocol for a VLAN interface before executing the igmp proxy command in its VLAN interface view.

l If you configure the IGMP proxy interface for a VLAN interface multiple times, the latest configured IGMP proxy interface will take effect.

l A VLAN interface cannot be the IGMP proxy interface for two or more other VLAN interfaces simultaneously.

Example

# Enable IGMP proxy for the interface of VLAN 100 and specify the interface of VLAN 200 to be its IGMP proxy interface.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface vlan-interface 100

[H3C-vlan-interface100] igmp proxy vlan-interface 200

Chapter 5 PIM Configuration Commands

5.1 PIM Configuration Commands

5.1.1 bsr-policy

bsr-policy acl-number

undo bsr-policy

acl-number: ACL number imported in BSR filtering policy, in the range of 2000 to 2999.

Use the bsr-policy command to limit the range of legal BSRs to prevent BSR proofing.

Use the undo bsr-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.

In the PIM SM network using BSR (bootstrap router) mechanism, every router can set itself as C-BSR (candidate BSR) and take the authority to advertise RP information in the network once it wins in the contention. To prevent the legal BSR from being replaced maliciously in the network, the following two measures need to be taken:

l Prevent the router from being spoofed by hosts though faking legal BSR messages to modify RP mapping. BSR messages are of multicast type and their TTL is 1, so this type of attacks often hit edge routers. Fortunately, BSRs are inside the network, while assaulting hosts are outside, therefore neighbor and RPF checks can be used to stop this type of attacks.

l If a router in the network is manipulated by an attacker, or an illegal router is accessed into the network, the attacker may set itself as C-BSR and try to win the contention and gain authority to advertise RP information among the network. Since the router configured as C-BSR shall propagate BSR messages, which are multicast messages sent hop by hop with TTL as 1, among the network, then the network cannot be affected as long as the peer routers do not receive these BSR messages. One way is to configure bsr-policy on each router to limit legal BSR range, for example, only 1.1.1.1/32 and 1.1.1.2/32 can be BSR, thus the routers cannot receive or forward BSR messages other than these two. Even legal BSRs cannot contest with them.

Problems may still exist if a legal BSR is attacked, though these two measures can effectively guarantee high BSR security.

The source parameter in the rule command is translated as BSR address in the bsr-policy command.

Related command: acl and rule.

# Configure BSR filtering policy on routers, only 101.1.1.1/32 can be BSR and all others are illegal.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C]pim

[H3C-pim] bsr-policy 2000

[H3C-pim] quit

[H3C] acl number 2000

[H3C-acl-basic-2000] rule 0 permit source 101.1.1.1 0

5.1.2 c-bsr

c-bsr interface-type interface-number hash-mask-len [ priority ]

undo c-bsr

interface-type interface-number: Specifies the interface. The candidate BSR is configured on the interface. PIM-SM must be enabled on the interface first.

hash-mask-len: Length of the mask. The value ranges from 0 to 32.

priority: Priority of the candidate BSR. The larger the value of the priority, the higher the priority of the BSR. The value ranges from 0 to 255. By default, the priority is 0.

Use the c-bsr command to configure a candidate BSR.

Use the undo c-bsr command to remove the candidate BSR configured.

By default, no candidate BSR is set.

When configure the candidate BSR, the larger bandwidth should be guaranteed since a great amount of information will be exchanged between BSR and other devices in the PIM domain.

Related command: pim sm.

# Configure the Ethernet switch as C-BSR with priority 2 (and the C-BSR address is designated as the IP address of VLAN-interface10).

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] c-bsr vlan-interface 10 24 2

5.1.3 c-rp

c-rp interface-type interface-number [ group-policy acl-number | priority priority-value ]*

undo c-rp { interface-type interface-number | all }

interface-type interface-number: Specifies interface with the IP address advertised as a candidate RP address.

acl-number: Number of the basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 2000 to 2999.

priority-value: Priority value of candidate RP, in the range of 0 to 255. By default, it is 0. The greatest value corresponds to the lowest priority level

all: Removes all candidate RP configurations.

Use the c-rp command to configure the router to advertise itself as a candidate RP.

Use the undo c-rp command to remove the configuration.

By default, no candidate RP is configured.

When configuring the candidate RP, a relatively large bandwidth should be reserved for the router and other devices in the PIM domain.

Related command: c-bsr.

# Configure the switch to advertise itself as a C-RP in the PIM domain to BSR. The standard access list 2000 defines the groups related to the RP. The address of C-RP is designated as the IP address of VLAN-interface10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] acl number 2000

[H3C-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[H3C-acl-basic-2000]quit

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] c-rp vlan-interface 10 group-policy 2000

5.1.4 crp-policy

crp-policy acl-number

undo crp-policy

acl-number: ACL number imported in C-RP filtering policy, ranging from 3000 to 3999.

Use the crp-policy command to limit the range of legal C-RP, as well as target service group range of each C-RP, and prevent C-RP proofing.

Use the undo crp-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.

In the PIM SM network using BSR mechanism, every router can set itself as C-RP (candidate rendezvous point) servicing particular groups. If elected, a C-RP becomes the RP servicing the current group.

In BSR mechanism, a C-RP router unicasts C-RP messages to the BSR, which then propagates the C-RP messages among the network by BSR message.

To prevent C-RP spoofing, you need to configure crp-policy on the BSR to limit legal C-RP range and their service group range. Since each C-BSR has the chance to become BSR, you must configure the same filtering policy on each C-BSR router.

This command uses the ACLs numbered between 3000 and 3999. The source parameter in the rule command is translated as C-RP address in the crp-policy command, and the destination parameter as the service group range of this C-RP address. For the C-RP messages received, only when their C-RP addresses match the source address and their server group addresses are subset of those in ACL, can the be considered as matched.

Related command: acl and rule.

# Configure C-RP filtering policy on the C-BSR routers, allowing only 1.1.1.1/32 as C-RP and to serve only for the groups 225.1.0.0/16.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] crp-policy 3000

[H3C-pim] quit

[H3C] acl number 3000

[H3C-acl-adv-3000] rule 0 permit source 1.1.1.1 0 destination 225.1.0.0 0.0.255.255

5.1.5 debugging pim common

debugging pim common { all | event | packet | timer }

undo debugging pim common { all | event | packet | timer }

all: All the common debugging information of PIM.

event: Debugging information of common PIM event.

packet: Debugging information of PIM hello packet.

timer: Debugging information of common PIM timer.

Use the debugging pim common command to enable common PIM debugging functions.

Use the undo debugging pim common command to disable the debugging functions.

By default, common PIM debugging functions are disabled.

# Enable all common PIM debugging functions

<H3C> debugging pim common all

5.1.6 debugging pim dm

debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } }

undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } }

alert: Interoperation event debugging information of PIM-DM

all: All the debugging information of PIM-DM.

mrt: Debugging information of PIM-DM multicast routing table.

timer: Debugging information of PIM-DM timer.

warning: Debugging information of PIM-DM warning message.

recv: Debugging information of PIM-DM receiving packets.

send: Debugging information of PIM-DM sending packets.

assert | graft | graft-ack | join | prune: Packets type.

Use the debugging pim dm command to enable PIM-DM debugging functions.

Use the undo debugging pim dm command to disable the debugging functions.

By default, PIM-DM debugging functions are disabled.

# Enable all PIM-DM debugging functions

<H3C> debugging pim dm all

5.1.7 debugging pim sm

debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } }

undo debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } }

View

all: All debugging information of PIM-SM.

mbr: Debugging information of PIM-SM multicast border router event. Alert stands for debugging alert information of PIM-SM multicast border router fresh stands for debugging renew information of PIM-SM multicast.

verbose: Debugging detail information of PIM-SM.

mrt: Debugging information of PIM-SM multicast routing table.

msdp: Debugging information of correspondence between PIM SM and MSDP.

timer: Debugging information of PIM-SM timer.

warning: Debugging information of PIM-SM warning message.

recv: Debugging information of PIM-SM receiving packets.

send: Debugging information of PIM-SM sending packets.

Use the debugging pim sm command to enable PIM-SM debugging functions.

Use the undo debugging pim sm command to disable the debugging functions.

By default, PIM-SM debugging functions are disabled.

# Enable all PIM-SM debugging functions

<H3C> debugging pim sm all

5.1.8 display pim bsr-info

display pim bsr-info

Use the display pim bsr command to view the BSR information.

Related command: c-bsr, c-rp.

Table 5-1 Output description of the display pim bsr command

<H3C> display pim bsr-info

Current BSR Address: 192.168.1.1

Priority: 0

Mask Length: 30

Expires: 00:01:26

Bootstrap-Period: 60 seconds

Bootstrap-Timeout: 130 seconds

Local host is BSR

Field	Description
BSR	Boot strap router
Priority	Priority of BSR
Mask Length: 30	Length of mask
Expires: 00:01:55	Expire time
BootStrap-Period: 60 seconds	Boot strap interval
Bootstrap-timeout: 130 second	Boot strap timeout

5.1.9 display pim interface

display pim interface [interface-type interface-number ]

interface-type interface-number: Interface type and interface number, used to specify the interface.

Use the display pim interface command to view the PIM interface configuration information.

If no interface type or interface number is specified, this command displays the PIM configurations on all interfaces. If the interface type and interface number are specified, only the PIM configuration on the specified interface is displayed.

IP address of the interface is 10.10.1.20

# Display the PIM configuration information on an interface.

<H3C> display pim interface vlan 2

PIM information of VLAN-interface 2:

PIM is enabled on interface

PIM version is 2

PIM mode is Sparse

PIM query interval is 30 seconds

PIM neighbor hold-time is 105 seconds

PIM neighbor limit is 128

PIM neighbor policy is none

Total 1 PIM neighbor on interface

PIM DR(designated router) is 10.10.1.20

Table 5-2 Description output information of the display pim interface command

Field	Description
PIM version	Version of PIM
PIM mode	PIM mode enabled on the interface (DM or SM)
PIM query interval	Hello packet interval
PIM neighbor hold-time	Hold-time of PIM neighbor
PIM neighbor limit	Limit of the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached
PIM neighbor policy	Filtering policy of the PIM neighbors on the current interface
PIM DR	Designated router

5.1.10 display pim neighbor

display pim neighbor [ interface interface-type interface-number ]

interface interface-type interface-number: Interface type and interface number, used to specify the interface.

Use the display pim neighbor command to view the PIM neighbor information discovered by the switch interface. If the interface type and interface number are specified, this command only displays the PIM neighbor information on the specified interface.

Table 5-3 Description of output information of display pim neighbor command

# Display PIM neighbor information discovered by the switch interface.

<H3C> display pim neighbor

Neighbor's Address Interface Name Uptime Expires

90.0.0.2 Vlan-interface90 00:00:36 00:01:40

Field	Description
Neighbor Address	Neighbor address
Interface	Interface where the neighbor has been discovered
Uptime	Time passed since the multicast group has been discovered
Expires	Specifies when the member will be removed from the group

5.1.11 display pim routing-table

display pim routing-table [ { { *g [ group-address [ mask { mask-length | mask } ] ] | **rp [ rp-address [ mask { mask-length | mask } ] ] } | { group-address [ mask { mask-length | mask } ] | source-address [ mask { mask-length | mask } ] } * } | incoming-interface { interface interface-type interface-number | null } | { dense-mode | sparse-mode } ] *

*g: (*, G) route entry.

mask: IP address mask.

mask-length: Length of the IP address mask.

**rp: (*, *, p) route entry.

rp-address: Address of the RP.

group-address: Address of the multicast group.

source-address: IP address of the multicast source.

incoming-interface interface interface-type interface-number: Route entry with the specified incoming interface.

null: Specifies the incoming interface type as Null.

dense-mode: Specifies the multicast routing protocol as PIM-DM.

sparse-mode: Specifies the multicast routing protocol as PIM-SM.

Use the display pim routing-table command to view the contents of the PIM multicast routing table. The displayed information of the PIM multicast routing table includes the SPT and RPF information.

Table 5-4 Description of output information of display pim routing-table

# View the contents of the PIM multicast routing table on the router.

<H3C> display pim routing-table

PIM-SM Routing Table

Total 0 (*,*,RP)entry, 0 (*,G)entry, 2 (S,G)entries

(192.168.1.2, 224.2.178.130),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

(192.168.1.2, 224.2.181.90),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

Total 2 entries listed

Field	Description
RP	Rendezvous Point
(S,G)	(source address, multicast group)
PIM-SM	PIM Sparse Mode
SPT	Shortest Path Tree
RPF	Reverse Path Forwarding

5.1.12 display pim rp-info

display pim rp-info [ group-address ]

group-address: Specifies the group address to display. If no multicast group is specified, the RP information about all multicast groups will be displayed.

Use the display pim rp-info command to view the RP information of multicast group.

In addition, this command can also display the BSR and static RP information.

Group/MaskLen: 224.0.0.0/4

# View the RP information of multicast group.

<H3C> display pim rp-info

PIM-SM RP-SET information:

BSR is: 20.20.20.20

RP 20.20.20.20

Version: 2

Priority: 0

Uptime: 00:00:05

Expires: 00:02:25

Adv-Period: 60 seconds

Holdtime: 150 seconds

The following table details the display information.

Table 5-5 Description of output information of display pim rp-info

Field	Description
PIM-SM RP-SET information:	RP information
BSR is: 4.4.4.6	BSR is the virtual interface of the node 4.4.4.6.
Group/MaskLen: 224.0.0.0/4 RP 4.4.4.6 Version: 2 Priority: 0 Uptime: 00:39:50 Expires: 00:01:40 Adv-Period: 60 seconds Holdtime: 150 seconds	The RP with IP address 224.0.0.0 and mask length of 4 is the virtual interface of the node 4.4.4.6, in version 2 and priority 0; it has been active for 39 minutes and 50 seconds and shall expire in one minute and 40 seconds; the advertisement interval is 60 seconds and holdtime is 150 seconds.

5.1.13 pim

pim

undo pim

Use the pim command to enter the PIM view and configure the PIM global parameters. Note that the command does not enable the PIM protocol.

Use the undo pim command to return to system view, clear the PIM global parameters configured before and clear the PIM view.

# Enter the PIM view.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim]

5.1.14 pim bsr-boundary

pim bsr-boundary

undo pim bsr-boundary

Use the pim bsr-boundary command to configure an interface to be the PIM domain border.

Use the undo pim bsr-boundary command to remove the border.

By default, no domain border is set.

You can use this command to set border of bootstrap messages, that is to say, bootstrap messages cannot pass interfaces that are configured with pim bsr-boundary command while other PIM messages can. In this way, the network is divided into different BSR domains. Each domain uses a different bootstrap router.

Caution:

The pim bsr-boundary command cannot build a multicast boundary. It just sets up a PIM bootstrap message boundary.

Related command: c-bsr.

# Configure domain border on VLAN-interface10.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim bsr-boundary

5.1.15 pim dm

pim dm

undo pim dm

Use the pim dm command to enable PIM-DM.

Use the undo pim dm command to disable PIM-DM.

By default, PIM-DM is disabled.

Before enabling PIM-DM, you must execute the multicast routing-enable command in system view to enable the multicast routing first.

# Enable PIM-DM on VLAN-interface10 of the Ethernet switch.

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim dm

5.1.16 pim neighbor-limit

pim neighbor-limit limit

undo pim neighbor-limit

limit: Limits of PIM neighbors on the interface, in the range of 0~128.

Use the pim neighbor-limit command to limit the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached.

Use the undo pim neighbor-limit command to restore the default setting.

By default, the PIM neighbors on the interface are limited to 128.

If the existing PIM neighbors exceed the configured value during configuration, they will not be deleted.

# Limit the PIM neighbors on the Vlan-interface10 to 50.

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim neighbor-limit 50

5.1.17 pim neighbor-policy

pim neighbor-policy acl-number

undo pim neighbor-policy

acl-number: Basic ACL number, in the range of 2000 to 2999.

Use the pim neighbor-policy command to set to filter the PIM neighbors on the current interface.

Use the undo pim neighbor-policy command to remove the setting.

Only the routers that match the filtering rule in the ACL can serve as a PIM neighbor of the current interface.

The new configuration overwrites the old one if you run the command for a second time.

# Configure that 10.10.1.2 can serve as a PIM neighbor of the Vlan-interface10, but not 10.10.1.1.

[H3C-acl-basic-2000] rule deny source 10.10.1.1 0

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim neighbor-policy 2000

[H3C-Vlan-interface10] quit

[H3C] acl number 2000

[H3C-acl-basic-2000] rule permit source 10.10.1.2 0

5.1.18 pim sm

pim sm

undo pim sm

Use the pim sm command to enable the PIM-SM protocol on an interface.

Use the undo pim sm command to disable the PIM-SM protocol.

By default, PIM-SM is disabled.

Users need to configure the PIM-SM protocol on each interface. Generally, the PIM-SM protocol needs to be enabled on each interface.

Related command: multicast routing-enable.

# Enable PIM-SM on VLAN-interface10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim sm

5.1.19 pim timer hello

Syntax

pim timer hello seconds

undo pim timer hello

View

VLAN interface view

Parameter

seconds: Time interval for a port to send Hello packets, in the range of 1 to 18,000 (in seconds). By default, the time interval is 30 seconds.

Description

Use the pim timer hello command to configure the time interval for a port to send Hello packets.

Use the undo pim timer hello command to restore the default time interval.

After the protocol independent multicast-sparse mode (PIM-SM) protocol is enabled for a port, a switch sends Hello packets periodically to all network devices supporting protocol independent multicast (PIM) to find its neighbors. If a port receives the Hello packets, it indicates the port has a neighbor network device supporting PIM, and the port adds the neighbor to its port neighbor list. If a port does not receive the Hello packets from the existing neighbors in its neighbor list in the specified time, the system assumes the neighbor has left the multicast group.

& Note:

l You must enable a PIM protocol (PIM-DM or PIM-SM) in VLAN interface view before you can proceed with this configuration.

l When you configure the time interval for a port to send Hello packets, the PIM neighbor hold-time value is automatically set to 3.5 times the Hello interval. Therefore you need not configure the PIM neighbor hold-time separately.

Example

# Set the time interval to send Hello packets for VLAN-interface10 to 40 seconds.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface vlan-interface 10

[H3C-Vlan-interface10] pim timer hello 40

5.1.20 register-policy

register-policy acl-number

undo register-policy

acl-number: Number of IP advanced ACL, defining the rule of filtering the source and group addresses. The value ranges from 3000 to 3999.

Use the register-policy command to configure a RP to filter the register messages sent by the DR in the PIM-SM network and to accept the specified messages only.

Use the undo register-policy command to remove the configured message filtering.

# If the local device is the RP in the network, using the following command can only accept multicast message register of the source sending multicast address in the range of 225.1.0.0/16 on network segment 10.10.0.0/16.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] acl number 3010

[H3C-acl-adv-3010] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255

[H3C-acl-adv-3010] quit

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] register-policy 3010

5.1.21 reset pim neighbor

reset pim neighbor { all | { neighbor-address | interface interface-type interface-number } * }

all: All PIM neighbors

neighbor-address: Specifies neighbor address.

interface interface-type interface-number: Specifies interface.

Use the reset pim neighbor command to clear a PIM neighbor.

Related command: display pim neighbor.

# Clear the PIM neighbor 25.5.4.3.

<H3C> reset pim neighbor 25.5.4.3

5.1.22 reset pim routing-table

reset pim routing-table { all | { group-address [ mask group-mask | mask-length group-mask-length ] | source-address [ mask source-mask | mask-length source-mask-length ] | { incoming-interface interface-type interface number | null } } * }

all: All PIM neighbors.

group-address: Specifies group address.

mask group-mask: Specifies group mask.

mask-length group-mask-length: Specifies mask length of the group address.

source-address: Specifies source address.

mask source-mask: Specifies source mask.

mask-length source-mask-length: Specifies mask length of the group address.

incoming-interface: Specifies incoming interface for the route entry in PIM routing table.

interface-type interface-number: Specifies the interface.

Use the reset pim routing-table command to clear a PIM route entry.

You can type in source address first and group address after in the command, as long as they are valid. Error information will be given if you type in invalid addresses.

If in this command, the group-address is 224.0.0.0/24 and source-address is the RP address (where group address can have a mask, but the resulted IP address must be 224.0.0.0, and source address has no mask), then it means only the (*, *, RP) item will be cleared.

If in this command, the group-address is any a group address, and source-address is 0 (where group address can have a mask, and source address has no mask), then only the (*, G) item will be cleared.

This command shall clear not only multicast route entries from PIM routing table, but also the corresponding route entries and forward entries in the multicast core routing table and MFC.

Related command: reset multicast routing-table, reset multicast forwarding-table and display pim routing-table.

# Clear the route entries with group address 225.5.4.3 from the PIM routing table.

<H3C> reset pim neighbor 25.5.4.3

5.1.23 source-policy

source-policy acl-number

undo source-policy

acl-number: Basic or advanced ACL, in the range of 2000 to 3999.

Use the source-policy command to set the router to filter the multicast data packets based on source (or group) address.

Use the undo static-rp command to remove the configuration.

If resource address filtering is configured, as well as basic ACLs, then the router filters the resource addresses of all multicast data packets received. Those not matched will be discarded.

If resource address filtering is configured, as well as advanced ACLs, then the router filters the resource and group addresses of all multicast data packets received. Those not matched will be discarded.

When this feature is configured, the router filters not only multicast data, but the multicast data encapsulated in the registration packets.

The new configuration overwrites the old one if you run the command for a second time.

[H3C-acl-basic-2000] rule deny source 10.10.1.1 0

# Set to receive the multicast data packets from source address 10.10.1.2, but discard those from 10.10.1.1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] source-policy 2000

[H3C-pim] quit

[H3C] acl number 2000

[H3C-acl-basic-2000] rule permit source 10.10.1.2 0

5.1.24 static-rp

static-rp rp-address [ acl-number ]

undo static-rp

rp-address: Static RP address, only being legal unicast IP address.

acl-number: Basic ACL, used to control the range of multicast group served by static RP, which ranges from 2000 to 2999. If an ACL is not specified upon configuration, static RP will serve all multicast groups; if an ACL is specified, static RP will only serve the multicast group passing the ACL.

Use the static-rp command to configure static RP.

Use the undo static-rp command to remove the configuration.

Static RP functions as the backup of dynamic RP so as to improve the network robustness. If the RP elected by BSR mechanism is valid, static RP will not work.

All routers in the PIM domain should be configured with this command and be specified with the same RP address.

The new configuration overwrites the old one if you run the command for a second time.

Caution:

l When the BSR-elected RP is effective, the static RP does not work.

l All routers in the PIM domain must be configured with this command simultaneously, with the same RP address specified.

l The system supports up to ten different static RP addresses. When more than ten static RP addresses are configured, the system will give this prompt information: “Cannot config static-rp, exceeded static-rp limit 10”.

Related command: display pim rp-info.

# Configure 10.110.0.6 as a static RP.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] static-rp 10.110.0.6

# Remove the static RP with the IP address of 10.110.0.6.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] multicast routing-enable

[H3C] pim

[H3C-pim] undo static-rp 10.110.0.6

Chapter 6 MSDP Configuration Commands

& Note:

An Ethernet switch functions as a router when it supports the layer 3 protocols. A router that is referred to in the following represents a generalized router or a layer 3 Ethernet switch running related protocols.

6.1 MSDP Configuration Commands

6.1.1 cache-sa-enable

cache-sa-enable

undo cache-sa-enable

Use the cache-sa-enable command to enable the router to cache SA state.

Use the undo cache-sa-enable command to remove the cache from the router.

By default, the router caches the SA state, i.e., (S, G) entry after it receives SA messages.

If the router is in cache state, it will not send SA request message to the specified MSDP peer when it receives a new group join message.

# Configure the router to cache all the SA states.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] cache-sa-enable

6.1.2 debugging msdp

debugging msdp { all | connect | event | packet | source-active }

undo debugging msdp { all | connect | event | packet | source-active }

all: All the debugging information of MSDP.

connect: Debugging information of MSDP peer connection reset.

event: Debugging information of MSDP event.

packet: Debugging information of MSDP packet.

source-active: Debugging information of active MSDP source.

Use the debugging msdp command to enable MSDP debugging functions.

Use the undo debugging msdp command to disable MSDP debugging functions.

By default, MSDP debugging functions are disabled.

# Enable all common MSDP debugging functions.

<H3C> debugging msdp all

6.1.3 display msdp brief

display msdp brief

Use the display msdp brief command to view the state of MSDP peer.

# Display the state of MSDP peer.

<H3C> display msdp brief

MSDP Peer Brief Information

Peer's Address State Up/Down time AS SA Count Reset Count

20.20.20.20 Up 00:00:13 100 0 0

6.1.4 display msdp peer-status

display msdp peer-status [ peer-address ]

peer-address: Address of MSDP peer.

Use the display msdp peer-status command to view the detailed information of MSDP peer.

Related command: peer.

# Display the detailed information of the MSDP peer 10.110.11.11.

<H3C> display msdp peer-status 10.110.11.11

MSDP Peer 20.20.20.20, AS 100

Description:

Information about connection status:

State: Up

Up/down time: 14:41:08

Resets: 0

Connection interface: LoopBack0 (20.20.20.30)

Number of sent/received messages: 867/947

Number of discarded output messages: 0

Elapsed time since last connection or counters clear: 14:42:40

Information about (Source, Group)-based SA filtering policy:

Import policy: none

Export policy: none

Information about SA-Requests:

Policy to accept SA-Request messages: none

Sending SA-Requests status: disable

Minimum TTL to forward SA with encapsulated data: 0

SAs learned from this peer: 0, SA-cache maximum for the peer: none

Input queue size: 0, Output queue size: 0

Counters for MSDP message:

Count of RPF check failure: 0

Incoming/outgoing SA messages: 0/0

Incoming/outgoing SA requests: 0/0

Incoming/outgoing SA responses: 0/0

Incoming/outgoing data packets: 0/0

6.1.5 display msdp sa-cache

display msdp sa-cache [ group-address | source-address | autonomous-system-number ]*

group-address: Group address of (S, G) entry.

source-address: Source address of (S, G) entry. With no source address specified, all the source information of the specified group will be displayed.

If neither group address nor source address is determined, all SA caches will be displayed.

autonomous-system-number: Displays (S, G) entries from specified autonomous system.

Use the display msdp sa-cache command to view (S, G) state learnt from MSDP peer.

Only cache-sa-enable command is configured, can cache state be displayed.

# Display the (S, G) state learned from MSDP peer.

<H3C> display msdp sa-cache

MSDP Total Source-Active Cache - 5 entries

(Source, Group) Origin RP Pro AS Uptime Expires

(10.10.1.2, 225.1.1.1) 10.10.10.10 BGP 100 00:00:10 00:05:50

(10.10.1.3, 225.1.1.1) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.1.2, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.2.1, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.1.2, 225.1.2.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

MSDP matched 5 entries

6.1.6 display msdp sa-count

display msdp sa-count [ as-number ]

as-number: Number of sources and groups from the specified autonomous system.

Use the display msdp sa-count command to view the number of sources and groups in MSDP cache.

The cache-sa-enable command must be configured before the configuration of this command.

Number of source and group, counted by AS

# view the number of sources and groups in MSDP cache.

<H3C> display msdp sa-count

Number of cached Source-Active entries, counted by Peer

Peer's Address Number of SA

10.10.10.10 5

AS Number of source Number of group

? 3 3

Total Source-Active entries: 5

6.1.7 import-source

import-source [ acl acl-number ]

undo import-source

acl-number: Number of basic or advanced IP ACL, ranging from 2000 to 3999, controlling which sources SA messages will advertise and to which groups it will be sent in the domain. Basic ACL performs filtering to source and advanced ACL performs filtering to source/group. If no ACL is specified, no multicast source will be advertised.

Use the import-source command to configure which (S, G) entries in the domain need to be advertised when a MSDP originates an SA message.

Use the undo import-source command to remove the configuration.

By default, all the (S, G) entries in the domain are advertised by the SA message.

Besides controlling SA messages creation, you can filter the forwarded SA messages by the commands peer sa-policy import and peer sa-policy export.

# Configure which (S, G) entries from the multicast routing table will be advertised in SA messages originated by the MSDP peer.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] acl number 3001

[H3C-acl-adv-3001] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255

[H3C-acl-adv-3001] quit

[H3C] msdp

[H3C-msdp] import-source acl 3001

6.1.8 msdp

msdp

undo msdp

Use the msdp command to enable MSDP and enter the MSDP view.

Use the undo msdp command to clear all configurations of MSDP, release all resources that MSDP occupies, and restore the initial state.

Related command: peer.

# Clear all configurations of MSDP.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] undo msdp

6.1.9 msdp-tracert

msdp-tracert source-address group-address rp-address [ max-hops max-hops | next-hop-info | sa-info | peer-info | skip-hops skip-hops ]*

source-address: Multicast source address.

group-address: Multicast group address.

rp-address: IP address of RP.

max-hops: The maximum number of hops that are traced, ranging from 1 to 255. By default, the value is 16.

next-hop-info: Flag bit for collecting the next hop information.

sa-info: Flag bit for collecting SA entity information.

peer-info: Flag bit for collecting MSDP peer information.

skip-hops: Number of hops that are skipped before collecting detailed information, ranging from 0 to 255. By default, the value is 0.

Use the msdp-tracert command to trace the transmission path of SA messages in the network, which helps to locate the faults such as information loss and configuration error. After the transmission path of SA messages is determined, correct configuration can avoid the overflow of SA messages.

<H3C> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20

# Trace (10.10.1.1, 225.2.2.2, 20.20.20.20) path information.

# Specify the maximum number of hops that are traced and collect detailed information of SA and MSDP peer.

<H3C> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20 max-hops 10 sa-info peer-info

MSDP tracert: press CTRL_C to break

D-bit: set if have this (S,G) in cache but with a different RP

RP-bit: set if this router is an RP

NC-bit: set if this router is not caching SA's

C-bit: set if this (S,G,RP) tuple is in the cache

MSDP Traceroute path information:

Router Address: 20.20.1.1

Fixed-length response info:

Peer Uptime: 10 minutes, Cache Entry Uptime: 30 minutes

D-bit: 0, RP-bit: 1, NC-bit: 0, C-bit: 1

Return Code: Reached-max-hops

Next Hop info:

Next-Hop Router Address: 0.0.0.0

SA info:

Count of SA messages received for this (S,G,RP): 0

Count of encapsulated data packets received for this (S,G,RP):0

SA cache entry uptime: 00:30:00 , SA cache entry expiry time: 00:03:32

Peering info:

Peering Uptime: 10 minutes, Count of Peering Resets: 3

Table 6-1 Description of msdp-tracert command domain

Item	Description
Router Address	Address where the local router creates Peering session with Peer-RPF neighbor.
Peer Uptime	Time for which the local router performs Peering session with Peer-RPF neighbor in minute, with the maximum value of 255.
Cache Entry Uptime	Present time of (S, G, RP) entry in SA cache of the local router, in minute, with the maximum value of 255.
D-bit: 1	(S, G, RP) entry existing in SA cache of the local router. But the RP is different from the RP specified in the request message.
RP-bit: 1	The local router is an RP, but it is not necessarily the source RP in (S, G, RP) entry.
NC-bit: 0	The local router enables SA cache.
C-bit: 1	(S, G, RP) entry exists in SA cache of the local router.
Return Code: Reached-max-hops	Return reason is the reached maximum hops and other possible value includes: Hit-src-RP: The local hop router is the source RP in (S, G, RP) entry.
Next-Hop Router Address: 0.0.0.0	If the parameter next-hop-info is used, Peer-RPF neighbor address will be displayed.
Count of SA messages received for this (S,G,RP)	Number of SA messages received for tracing this (S, G, RP) entry.
Count of encapsulated data packets received for this (S,G,RP)	Number of encapsulated data packets received for tracing this (S, G, RP) entry.
SA cache entry uptime	Present time of SA cache entry.
SA cache entry expiry time	Expiry time of SA cache entry.
Peering Uptime: 10 minutes	Time for which the local router performs Peering session with Peer-RPF neighbor.
Count of Peering Resets	Number of Peering session resets.

6.1.10 originating-rp

originating-rp interface-type interface-number

undo originating-rp

interface-type: Interface type.

interface-number: Interface number.

Use the originating-rp command to allow a MSDP to use the IP address of specified interface as the RP address when the SA message originated.

Use the undo originating-rp command to remove the configuration.

By default, the RP address in the SA message is the RP address configured by PIM.

Configure logical RP by using this command.

# Configure IP address of the interface Vlan-interface10 as the RP address in the SA message originated.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] originating-rp Vlan-interface 10

6.1.11 peer

peer peer-address connect-interface interface-type interface-number

undo peer peer-address

peer-address: Address of MSDP peer.

connect-interface interface-type interface-number: Interface type and number whose primary address is used by the local router as the source IP address to establish TCP connection with remote MSDP peers.

Use the peer command to configure an MSDP peer.

Use the undo peer command to remove the MSDP peer configured.

If the local router is also in BGP peer relation with a MSDP peer, the MSDP peer and the BGP peer should use the same IP address.

Related command: static-rpf-peer.

# Configure the router using IP address 125.10.7.6 as an MSDP peer of the local router.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10

6.1.12 peer description

peer peer-address description text

undo peer peer-address description

peer-address: Address of MSDP peer.

text: Descriptive text, being case sensitive. The maximum length is 80 characters.

Use the peer description command to configure descriptive text to MSDP peer.

Use the undo peer description command to remove the descriptive text configured.

By default, an MSDP peer has no descriptive text.

Administrator can conveniently differentiate MSDP peers by configuring descriptive text.

Related command: display msdp peer-status.

# Add descriptive text CstmrA to router 125.10.7.6 to specify that the router is Client A.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 description router CstmrA

6.1.13 peer mesh-group

peer peer-address mesh-group name

undo peer peer-address mesh-group name

name: Name of a Mesh Group, being case sensitive. The maximum length is 32 characters.

peer-address: Address of an MSDP peer to be a member of the Mesh Group.

Use the peer mesh-group command to configure an MSDP peer to join an Mesh Group.

Use the undo peer mesh-group command to remove the configuration.

By default, an MSDP peer is not a member of any Mesh Group.

# Configure the MSDP peer with address 125.10.7.6 to be a member of the Mesh Group Grp1.

<H3C> system-view

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 mesh-group Grp1

6.1.14 peer minimum-ttl

peer peer-address minimum-ttl ttl

undo peer peer-address minimum-ttl

peer-address: Address of the MSDP peer to which the TTL limitation applies.

ttl: TTL threshold, ranging from 0 to 255.

Use the peer minimum-ttl command to configure the minimum TTL (Time-to-Live) value of the multicast data packets encapsulated in SA messages to be sent to specified MSDP peer.

Use the undo peer minimum-ttl command to restore the default TTL threshold.

By default, the value of TTL threshold is 0.

Related command: peer.

# Configure the TTL threshold value to 10, i.e., only those multicast data packets with a TTL value greater than or equal to 10 can be forwarded to the MSDP peer 110.10.10.1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] peer 110.10.10.1 minimum-ttl 10

6.1.15 peer request-sa-enable

peer peer-address request-sa-enable

undo peer peer-address request-sa-enable

peer-address: Address of MSDP peer.

Use the peer request-sa-enable command to enable the router to send SA request message to the specified MSDP peer when receiving a new group join message.

Use the undo peer request-sa-enable command to remove the configuration.

By default, when receiving a new group join message, the router sends no SA request messages to MSDP peers but waits to receive the next SA message.

Related command: cache-sa-enable.

# Configure to send SA request message to the MSDP peer 125.10.7.6.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 request-sa-enable

6.1.16 peer sa-cache-maximum

peer peer-address sa-cache-maximum sa-limit

undo peer peer-address sa-cache-maximum

peer-address: Address of MSDP peer.

sa-limit: Maximum value that the SA cache allows, ranging from 1 to 2048.

Use the peer sa-cache-maximum command to limit the number of caches originated when the router receives SA messages from an MSDP peer.

Use the undo peer sa-cache-maximum command to restore the default configuration.

By default, the maximum number of SA caches is 2048.

This configuration is recommended for all MSDP peers in the networks possibly attacked by DoS.

Related command:: display msdp, sa-count, display msdp peer-status, display msdp brief.

# Limit the number of caches originated to 100 when the router receives SA messages from the MSDP peer 125.10.7.6.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 sa-cache-maximum 100

6.1.17 peer sa-policy

peer peer-address sa-policy { import | export } [ acl acl-number ]

undo peer peer-address sa-policy { import | export }

import: Receives SA messages from the specified MSDP peer.

export: Forwards SA messages from the specified MSDP peer.

peer-address: Address of the MSDP peer whose SA messages need to be filtered.

acl acl-number: Number of advanced IP ACL, ranging from 3000 to 3999. If no ACL is specified, all (S, G) entries are filtered.

Use the peer sa-policy command to configure a filter list for SA messages received or forwarded from the specified MSDP peer.

Use the undo peer sa-policy command to remove the configuration.

By default, messages received or forwarded will not be filtered. All SA messages are received or forwarded from an MSDP peer.

Related command: peer.

# Forward only those SA messages that passed the advanced IP ACL.

<H3C> system-view

[H3C] acl number 3000

[H3C-acl-adv-3000] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255

[H3C-acl-adv-3000] quit

[H3C] msdp

[H3C-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10

[H3C-msdp] peer 125.10.7.6 sa-policy export acl 3000

6.1.18 peer sa-request-policy

peer peer-address sa-request-policy [ acl acl-number ]

undo peer peer-address sa-request-policy

peer-address: Address from which the local router receives SA request messages sent by the specified MSDP peer.

acl acl-number: Number of basic IP ACL, describing multicast group address, ranging from 2000 to 2999. If no ACL is specified, all SA request messages will be ignored.

Use the peer sa-request-policy command to limit SA request messages that the router receives from MSDP peers.

Use the undo peer sa-request-policy command to remove the limitation.

By default, the router receives all SA request messages from the MSDP peer.

If no ACL is specified, all SA requests will be ignored. If ACL is specified, only those SA request messages from the groups permitted by the ACL will be processed and all the others will be ignored.

Related command: peer.

# Configure the ACL for filtering SA request messages from the MSDP peer 175.58.6.5. The SA request messages from group address range 225.1.1.0/8 will be received and all the others will be ignored.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] acl number 2000

[H3C-acl-basic-2000] rule permit source 225.1.1.0 0.0.0.255

[H3C-acl-basic-2000] quit

[H3C] msdp

[H3C-msdp] peer 175.58.6.5 sa-request-policy acl 2000

6.1.19 reset msdp peer

reset msdp peer peer-address

peer-address: Address of MSDP peer.

Use the reset msdp peer command to reset TCP connection with the specified MSDP peer, and clear all the statistics of the specified MSDP peer.

Related command: peer.

# Clear TCP connection and statistics of the MSDP peer 125.10.7.6.

<H3C> reset msdp peer 125.10.7.6

6.1.20 reset msdp sa-cache

reset msdp sa-cache [ group-address ]

group-address: Address of the group, (S, G) entries matching this address are cleared from the SA cache. If no multicast group address is specified, all SA cache entries will be cleared.

Use the reset msdp sa-cache command to clear SMDP SA cache entries.

Related command: cache-sa-enable and display msdp sa-cache.

# Clear the cache entries with group address 225.5.4.3 from the SA cache.

<H3C> reset msdp sa-cache 225.5.4.3

6.1.21 reset msdp statistics

reset msdp statistics [ peer-address ]

peer-address: Address of the MSDP peer whose statistics, resetting information and input/output information will be cleared. If no MSDP peer address is specified, all MSDP peers statistics will be cleared.

Use the reset msdp statistics command to clear statistics of one or more MSDP peers without resetting the MSDP peer.

# Clear the statistics of the MSDP peer 25.10.7.6.

<H3C> reset msdp statistics 125.10.7.6

6.1.22 shutdown

shutdown peer-address

undo shutdown peer-address

peer-address: IP address of MSDP peer.

Use the shutdown command to disable the MSDP peer specified.

Use the undo shutdown command to remove the configuration.

By default, no MSDP peer is disabled.

Related command: peer.

# Disable the MSDP peer 125.10.7.6.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] shutdown 125.10.7.6

6.1.23 static-rpf-peer

static-rpf-peer peer-address [ rp-policy ip-prefix-name ]

undo static-rpf-peer peer-address

peer-address: Address of the static RPF peer to receive SA messages.

rp-policy ip-prefix-name: Filter policy based on RP address, which filters the RP in SA messages. If the parameter is not specified, all SA messages from static RPF peer will be accepted. If the parameter rp-policy ip-prefix-name is specified and filter policy is configured, the router will only accept SA messages from the RP which passes filtering. If no filter policy is configured, the router will still accept all SA messages from the static RPF peer.

Use the static-rpf-peer command to configure static RPF peer.

Use the undo static-rpf-peer command to remove the static RPF peer.

By default, no static RPF peer is configured.

& Note:

l You must configure the peer command before using the static-rpf-peer command.

l If only one MSDP peer is configured on a router, this MSDP peer will be regarded as a static RPF peer.

Related command: peer and ip prefix-list.

# Configure two static RPF peers.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] ip ip-prefix list1 permit 130.10.2.3 32

[H3C] ip ip-prefix list2 permit 130.10.2.4 32

[H3C] msdp

[H3C-msdp] peer 130.10.7.6 connect-interface Vlan-interface 10

[H3C-msdp] peer 130.10.7.5 connect-interface Vlan-interface 10

[H3C-msdp] static-rpf-peer 130.10.7.6 rp-policy list1

[H3C-msdp] static-rpf-peer 130.10.7.5 rp-policy list2

In the above commands, 130.10.2.3 is the IP address of the RP for 130.10.7.5 and 130.10.2.4 is the IP address of the RP of 130.10.7.6.

6.1.24 timer retry

timer retry seconds

undo timer retry

seconds: Value of connection request retry period in second, ranging from 1 to 60.

Use the timer retry command to configure the value of connection request re-try period.

Use the undo timer retry command to restore the default value.

By default, the value of connection request re-try period is 30 seconds.

Related command: peer.

# Configure the connection request re-try period to 60 seconds.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] msdp

[H3C-msdp] timer retry 60

Chapter 7 MBGP Multicast Extension Configuration Commands

7.1 MBGP Multicast Extension Configuration Commands

7.1.1 aggregate

aggregate address mask [ as-set | attribute-policy route-policy-name | detail-suppressed | origin-policy route-policy-name | suppress-policy route-policy-name ]*

undo aggregate address mask [ as-set | attribute-policy route-policy-name | detail-suppressed | origin-policy route-policy-name | suppress-policy route-policy-name ]*

address: Address of the aggregated route.

mask: Network mask of the aggregated route.

as-set: Generates a route with AS_SET segment. This parameter is not recommended when aggregating many AS paths.

attribute-policy route-policy-name: Sets aggregate attribute.

detail-suppressed: Advertises the aggregated routes rather than the specific routes.

origin-policy route-policy-name: Filters the originate routes of the aggregate.

suppress-policy route-policy-name: Does not advertise the specific routes selected.

Use the aggregate command to create a multicast aggregated record in the BGP routing table.

Use the undo aggregate command to disable this function.

By default, no route is aggregated.

Use the aggregate command without parameters to create one local aggregated route and set atomic aggregation attributes.

# Create an aggregation entry in the MBGP routing table, with aggregated route address as 192.213.0.0.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] aggregate 192.213.0.0 255.255.0.0

7.1.2 compare-different-as-med

compare-different-as-med

undo compare-different-as-med

Use the compare-different-as-med command to enable to compare the route MED values of neighbors from different ASs.

Use the undo compare-different-as-med command to disable this function.

By default, the comparison function is disabled.

If there are multiple routes available to the same destination address, you can select the route with the smallest MED value.

This command is not recommended unless you make sure that different ASs use the same IGP and route selection modes.

# Enable to compare the route MED values of neighbors from different ASs.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] compare-different-as-med

7.1.3 debugging bgp mp-update

debugging bgp mp-update [ receive | send ] [ verbose ]

undo debugging bgp mp-update

receive: Debugs the MBGP Update messages received.

send: Debugs the MBGP Update messages sent.

verbose: Debugs detailed information.

Use the debugging bgp mp-update command to enable to debug MBGP Update messages.

Use the undo debugging bgp mp-update command to disable the debugging.

By default, the debugging function is disabled.

# Enable MBGP Update message debugging.

<H3C> debugging bgp mp-update

7.1.4 default local-preference

default local-preference value

undo default local-preference

value: Configures default local precedence, in the range of 0 to 4294967295. By default, it is 100. The greatest value corresponds to the highest precedence level.

Use the default local-preference command to configure the default local precedence.

Use the undo default local-preference command to restore the default value.

You can affect BGP route selection by configuring different local precedence values.

# Configure the default local precedence value as 180.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] default local-preference 180

7.1.5 default med

default med med-value

undo default med

med-value: Specifies MED value, in the range of 0 to 4294967295. By default, it is 0.

Use the default med command to configure system MED value.

Use the display bgp multicast group command to restore the default value.

Multi-exit discriminator (MED) attribute is the external metric for a route. Unlike local precedence attribute, MED is exchanged, between ASs, and one it enters an AS, it does not leave the AS. MED attribute is used in best route selection. When a router running BGP travels through different external peers and get the routes with identical destination, but different next-hop addresses, it selects these routes according to their MED values. The route with smaller MED value will be selected as the external AS route if other attributes are the same.

# Configure system MED value as 25.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] default med 25

7.1.6 display bgp multicast group

display bgp multicast group [ group-name ]

group-name: Specified peer group. If no peer group is specified, the information about all peer groups will be displayed.

Use the display bgp multicast group command to view the information about peer groups.

# View the information about the peer group named my_peer.

<H3C> display bgp multicast group my_peer

7.1.7 display bgp multicast network

display bgp multicast network

Use the display bgp multicast network command to view the routing information that MBGP advertises.

# View the network segment routing information MBGP advertises.

<H3C> display bgp multicast network

7.1.8 display bgp multicast peer

display bgp multicast peer [ peer-address ] [ verbose ]

peer-address: Peer address, in dotted decimal format.

verbose: Displays detailed information.

Use the display bgp multicast peer command to view the MBGP peer information.

# View the MBGP peer detailed information.

<H3C> display bgp multicast peer verbose

7.1.9 display bgp multicast routing-table

display bgp multicast routing-table [ ip-address [ mask ] ]

ip-address: Displays the MBGP routing information with specified IP address.

Use the display bgp multicast routing-table command to view MBGP routing information.

# Display MBGP routing information of network segment 14.1.0.0.

<H3C> display bgp multicast routing-table 14.1.0.0

7.1.10 display bgp multicast routing-table as-path-acl

display bgp multicast routing-table as-path-acl acl-number

acl-number: Specifies matched AS path list number ranging from 1 to 199.

Use the display bgp multicast routing-table as-path-acl command to view routes that match an as-path acl.

# Display routes that match the as-path-acl 2.

<H3C> display bgp multicast routing-table as-path-acl 2

7.1.11 display bgp multicast routing-table cidr

display bgp multicast routing-table cidr

Use the display bgp multicast routing-table cidr command to view the non-natural network mask, namely the classless inter-domain routing (CIDR) information.

# View CIDR routing information.

<H3C> display bgp multicast routing-table cidr

7.1.12 display bgp multicast routing-table community

display bgp multicast routing-table community [ aa:nn | no-export-subconfed | no-advertise | no-export ]* [ whole-match ]

aa:nn: Specified community number.

no-export-subconfed: Does not send matched routes outside the local autonomous system.

no-advertise: Does not advertise matched routes to any peer.

no-export: Does not advertise routes outside the local autonomous system but advertise routes to other sub-autonomous systems.

whole-match: Exact match.

Use the display bgp multicast routing-table community command to view routing information of a specified MBGP community.

# Display routing information of the specified MBGP community

<H3C> display bgp multicast routing-table community 600:1

7.1.13 display bgp multicast routing-table community-list

display bgp multicast routing-table community-list community-list-number [ whole-match ]

community-list-number: Number of the specified community list.

exact-match: Exact match.

Use the display bgp multicast routing-table community-list command to view the routing information of a specified MBGP community list.

# Display routing information of the specified MBGP community list.

<H3C> display bgp multicast routing-table community-list 1

7.1.14 display bgp multicast routing-table different-origin-as

display bgp multicast routing-table different-origin-as

Use the display bgp multicast routing-table different-origin-as command to view AS routes of different origins.

# Display AS routes of different origins.

<H3C> display bgp multicast routing-table different-origin-as

7.1.15 display bgp multicast routing-table peer

display bgp multicast routing-table peer peer-address { received | advertised } [ network-address [ mask ] | statistic ]

peer-address: Specified peer address, in dotted decimal format.

received: Routing information received from a specified peer.

advertised: Routing information advertised from a specified peer.

network-address: IP address of the destination network.

mask: Mask of the destination network.

statistic: Displays statistic information of the route.

Use the display bgp multicast routing-table peer command to view the routes received/advertised at/to the specified peer.

# Display routing information advertised to the peer 10.10.1.11.

<H3C> display bgp multicast routing-table peer 10.10.1.11 advertised

7.1.16 display bgp multicast routing-table regular-expression

display bgp multicast routing-table regular-expression as-regular-expression

as-regular-expression: AS regular expression matched.

Use the display bgp multicast routing-table regular-expression command to view the routing information matching the specified AS regular expression.

# Display routing information matching AS regular expression ^600$.

<H3C> display bgp multicast routing-table regular-expression ^600$

7.1.17 filter-policy export

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.

ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.

Protocol: Specifies which kind of routing information shall be filtered out, with options currently available include direct, ospf, ospf-ase, ospf-nssa, rip, is-is and static.

Use the filter-policy export command to set to filter the advertised routes. Only those pass through the filter can be advertised by BGP.

Use the undo filter-policy export command to cancel route filtering.

By default, filtering the advertised routes is not enabled.

The command affects route advertising by BGP. If you specify the protocol parameter, the router only filters the routes with the specified protocol imported, without influence on the routes importing other protocols. Otherwise, the router filters the routes importing any protocols.

# Filter all BGP-advertised routes using ACL 2000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] filter-policy 2000 export

7.1.18 filter-policy import

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.

ip-prefix ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.

gateway ip-prefix-name: IP prefix of the neighbor router, in the range of 1 to 19, to filter the routing information advertised by a specified neighbor router.

Use the filter-policy gateway import command to set to filter the routes advertised by a specified neighbor router. Only those pass through the filter can be advertised by BGP.

Use the undo filter-policy gateway import command to cancel route filtering.

Use the filter-policy import command to set to filter the global routes received.

Use the undo filter-policy import command to cancel route filtering.

By default, filtering the received routes is not enabled.

This configuration determines whether to add the routes into the BGP routing table.

# Filter all BGP-received routes using ACL 2000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] filter-policy 2000 import

7.1.19 import-route

import-route protocol [ route-policy route-policy-name | med med-value ]*

undo import-route protocol

protocol: Specifies the source routing protocols that can be imported, which can be direct, ospf, ospf-ase, ospf-nssa, rip, isis and static.

med-value: Specifies the metric value loaded by an imported route, ranging from 0 to 4,294,967,295.

route-policy-name: Specifies the route policy used for importing routes.

Use the import-route command to import routing information of other protocols into MBGP.

Use the undo import-route command to cancel the importing.

By default, MBGP will not import routing information of other protocols.

# Import static routes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] import-route static

7.1.20 ipv4-family multicast

ipv4-family multicast

undo ipv4-family multicast

BGP view, VPN instance sub-address family view, VPNv4 sub-address family view

Use the ipv4-family multicast command to enter the IPv4 multicast sub-address family view.

Use the undo ipv4-family multicast command to exit the IPv4 multicast sub-address family view, return to the unicast view and remove all the information in multicast.

# Enter the IPv4 multicast sub-address family view.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul]

7.1.21 network

network ip-address [ address-mask ] [ route-policy route-policy-name ]

undo network ip-address [ address-mask ] [ route-policy route-policy-name ]

ip-address: Network address that BGP advertises.

address-mask: Mask of the network address.

route-policy policy-name: Route-policy applied to the routes advertised.

Use the network command to configure the network addresses to be sent by the local MBGP.

Use the undo network command to remove the configuration.

By default, the local MBGP does not send any route.

# Advertise routes to network segment 10.0.0.0/16.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] network 10.0.0.1 255.255.0.0

7.1.22 peer advertise-community

peer group-name advertise-community

undo peer group-name advertise-community

group-name: Name of the peer group.

Use the peer advertise-community command to set to send community attributes to a peer group.

Use the undo peer advertise-community command to remove the configuration.

By default, no community attribute is sent to any peer group.

# Set to send community attributes to peer group “test”.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test advertise-community

7.1.23 peer allow-as-loop

peer { group-name | peer-address } allow-as-loop [ number ]

undo peer { group-name | peer-address } allow-as-loop

group-name: Name of the peer group.

peer-address: IP address of the peer.

number: Repetition number of local AS IDs, in the range of 1 to 10. By default ,the repetition number is 3.

Use the peer allow-as-loop command to specify repetition number of local AS IDs.

Use the undo peer allow-as-loop command to remove the configuration.

Related command: display current-configuration, display bgp routing-table peer and display bgp routing-table group.

# Configure repetition number of local AS IDs as 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer 1.1.1.1 allow-as-loop 2

7.1.24 peer as-path-acl export

peer group-name as-path-acl acl-number export

undo peer group-name as-path-acl acl-number export

group-name: Specifies name of the peer group.

acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.

export: Uses the AS path list to filter the advertised routes.

Use the peer as-path-acl export command to configure filtering Policy of MBGP advertised routes based on AS path list.

Use the undo peer as-path-acl command to cancel the existing configuration.

By default, the peer group has no AS path list.

This command can only be configured on peer group.

Related command: peer as-path-acl import, ip as-path-acl (refer to the “Routing Protocol” part).

# Configure the peer group test to use AS path list 2 to filter the advertised routes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test as-path-acl 2 export

7.1.25 peer as-path-acl import

peer { group-name | peer-address } as-path-acl acl-number import

undo peer { group-name | peer-address } as-path-acl acl-number import

group-name: Specifies name of the peer group.

peer-address: Specifies IP address of the peer.

acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.

import: Uses the AS path list to filter the received routes.

Use the peer as-path-acl import command to configure filtering Policy of MBGP received routes based on AS path list.

Use the undo peer as-path-acl import command to cancel the existing configuration.

By default, the peer/peer group has no AS path list.

The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer as-path-acl export, ip as-path-acl (refer to the “Routing Protocol” part).

# Set the AS path ACL of the peer group test to filter BGP received routes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test as-path-acl 3 import

7.1.26 peer enable

peer group-name enable

undo peer group-name enable

group-name: Name of the multicast peer group.

Use the peer enable command to enable the MBGP peer group.

Use the undo peer enable command to disable the MBGP peer group.

By default, the MBGP peer group is disabled.

Only after the peer group is enabled, can the router establishes connection with the multicast peer.

# Enable peer group group1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer group1 enable

7.1.27 peer filter-policy export

peer group-name filter-policy acl-number export

undo peer group-name filter-policy acl-number export

group-name: Specifies the name of the peer group.

acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.

export: Applies the filter policy to the advertised routes. This keyword is only valid for the peer groups.

Use the peer filter-policy export command to configure the peer group to apply the ACL-based filter policy to the advertised routes. Use the undo peer filter-policy export command to cancel the existing configuration.

By default, no ACL-based filter policy is configured.

The peer filter-policy export command can only be configured on peer groups.

Related command: peer filter-policy import, acl .

# Configure the peer group test to use ACL 2000 to filter the advertised routes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test filter-policy 2000 export

7.1.28 peer filter-policy import

peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import

group-name: Specifies the name of the peer group.

peer-address: Specifies the IP address of the peer.

acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.

Use the peer filter-policy import command to configure the peer to apply the ACL-based filter policy to the received routes. Use the undo peer filter-policy import command to cancel the existing configuration.

By default, no ACL-based filter policy is configured.

Related command: peer filter-policy export, acl.

The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.

# Configure the peer group test to use ACL 2000 to filter the received routes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test filter-policy 2000 import

7.1.29 peer group

Syntax

peer peer-address group group-name

undo peer peer-address

View

IPv4 multicast sub-address family view

Parameter

peer-address: IP address of the peer, in dotted decimal format.

group-name: Name of the peer, consisting of one to 47 alphanumeric characters.

Description

Use the peer group command to add a peer into a peer group.

Use the undo peer group command to delete the peer.

Caution:

You must firstly add the specific peer in the peer group in BGP view and enable the peer group in IPv4 multicast sub-address family view before you can this command.

Example

# Add peer 10.1.1.1 to EBGP peer group TEST.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] group TEST

[H3C-bgp] peer TEST as-number 2004

[H3C-bgp] peer 10.1.1.1 group TEST

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer TEST enable

[H3C-bgp-af-mul] peer 10.1.1.1 group TEST

7.1.30 peer ip-prefix export

peer group-name ip-prefix prefixname export

undo peer group-name ip-prefix prefixname export

group-name: Name of peer group.

prefixname: Name of the specified ip-prefix.

Use the peer ip-prefix export command to configure the route filtering policy of routes advertised by the peer group based on the ip-prefix.

Use the undo peer ip-prefix export command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.

By default, the route filtering policy of the peer group is not specified.

The peer ip-prefix export command can only be configured on the peer groups.

Related command: ip ip-prefix, peer ip-prefix import.

# Configure the route filtering policy of the peer group1 based on the ip-prefix list1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer group1 ip-prefix list1 export

7.1.31 peer ip-prefix import

peer { group-name | peer-address } ip-prefix prefixname import

undo peer { group-name | peer-address } ip-prefix prefixname import

group-name: Name of peer group.

peer-address: IP address of the peer, in dotted decimal format.

prefixname: Name of the specified ip-prefix, a character string of 1 to 19 characters.

Use the peer ip-prefix import command to configure the route filtering policy of routes received by the peer based on the ip-prefix.

Use the undo peer ip-prefix import command to cancel the route filtering policy of the peer based on the ip-prefix.

By default, the route filtering policy of the peer is not specified.

The inbound route policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer ip-prefix export.

# Configure the route filtering policy of the peer group1 based on the ip-prefix list1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer group1 ip-prefix list1 import

7.1.32 peer next-hop-local

peer group-name next-hop-local

undo peer group-name next-hop-local

group-name: Name of the peer group.

Use the peer next-hop-local command to remove the processing of the next hop in routes which BGP will advertise to the peer group and set the local address as the next hop.

Use the undo peer next-hop-local command to cancel the configuration.

# Set the local address as next-hop when advertising routes to peer group named test.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test next-hop-local

7.1.33 peer public-as-only

peer group-name public-as-only

undo peer group-name public-as-only

group-name: Name of the peer group.

Use the peer public-as-only command to set to contain only public AS IDs in the MBGP Update message, but not private AS IDs.

Use the undo peer public-as-only command to restore the default setting, the router contains only private AS IDs in the MBGP Update message.

By default, the private AS ID is carried when BGP sends MBGP Update message.

Generally, MBGP sends MBGP Update message with the AS ID (which can be either the public AS number or private AS number) contained. To enable some egress routers to ignore the private AS ID when sending MBGP Update message, you can configure not to carry the private AS IDs when sending MBGP Update message.

# Set not to carry private AS IDs when sending MBGP Update message to peer group "test”.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test public-as-only

7.1.34 peer reflect-client

peer group-name reflect-client

undo peer group-name reflect-client

group-name: Name of the peer group.

Use the peer reflect-client command to configure a peer (group) as a client of the route reflector.

Use the undo peer reflect-client command to remove the configuration.

By default, there is no route reflector in the autonomous system.

# Configure peer group “test” as the client of the route reflector.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test reflect-client

7.1.35 peer route-policy export

peer group-name route-policy policy-name export

undo peer group-name route-policy policy-name export

group-name: Name of peer group.

peer-address: IP address of the peer.

Use the peer route-policy export command to assign the Route-policy to the routes advertised to the peer group.

Use the undo peer route-policy export command to delete the specified Route-policy.

By default, the peer/peer group has no Route-policy association.

Related command: peer route-policy import.

# Apply the Route-policy named test-policy to the route coming from the peer group test.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test route-policy test-policy export

7.1.36 peer route-policy import

peer { group-name | peer-address } route-policy policy-name import

undo peer { group-name | peer-address } route-policy policy-name import

group-name: Name of peer group.

peer-address: IP address of the peer.

policy-name: Name of the applied route policy.

Use the peer route-policy import command to assign the Route-policy to the route coming from the peer..

Use the undo peer route-policy import command to delete the specified Route-policy.

By default, the peer has no Route-policy association.

The inbound route policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer route-policy export.

# Apply the Route-policy named test-policy to the route coming from the peer group test.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] peer test route-policy test-policy import

7.1.37 preference

preference ebgp-value ibgp-value local-vlaue

undo preference

ebgp-value: EBGP route priority, in the range of 1 to 256. By default, it is 256.

ibgp-value: IBGP route priority, in the range of 1 to 256. By default, it is 256.

local-value: Local route priority, in the range of 1 to 256. By default, it is 130.

Use the preference command to configure MBGP protocol priority.

Use the undo preference command to restore the default priority.

You can configure different priority values for different types of MBGP routes.

# Set the priority of EBGP, IBGP and local routes all as 170.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] preference 170 170 170

7.1.38 reflect between-clients

reflect between-clients

undo reflect between-clients

Use the reflect between-clients command to enable route reflection between clients.

Use the undo reflect between-clients command to disable route reflection between clients.

When configured, the route reflector can reflect routes of a client to other clients.

By default, all-connection is not required for the clients with route reflectors configured, since the routes are by default reflected from one client to others. For all-connection clients, route reflection is unnecessary.

Related command: reflector cluster-id and peer reflect-client.

# Disable route reflection function.

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] undo reflect between-clients

7.1.39 refresh bgp multicast

Syntax

refresh bgp { all | peer-address | group group-name } multicast { import | export }

View

User view

Parameter

all: Refreshes multicast sub-address family router of all peer .

peer-address: Refreshes multicast sub-address family router of all specified address peer .

group-name: Refreshes multicast sub-address family router of all member of specified peer .

import: Sends ROUTE-REFRESH packets, request the peer to send all multicast sub-address family router again .

export: Sends all multicast sub-address family router again .

Description

Use the refresh bgp multicast command to request the peer to send multicast sub-address family router again, or send multicast sub-address family router again.

Example

# Request all the peers to send multicast sub-address family router again.

<H3C> refresh bgp all multicast import

7.1.40 reflector cluster-id

reflector cluster-id { cluster-id | address }

undo reflector cluster-id

cluster-id: Route reflector cluster ID, in integer number or IP address format, range 1 to 4294967295.

address: Route reflector cluster ID in IP address format.

Use the reflector cluster-id command to configure route reflector cluster ID.

Use the undo reflector cluster-id command to delete route reflector cluster ID.

By default, each route reflector uses its own route ID as cluster ID.

In general, one cluster has only one route reflector, and then the router ID for the route reflector can be used to identify the cluster. If a cluster has several route reflectors, for multiple route reflectors can improve network stability, then you can use this command to specify the same cluster ID for them all.

Related command: reflect between-clients and peer reflect-client.

# Specify cluster ID for local router, one of the router reflectors.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] bgp 100

[H3C-bgp] ipv4-family multicast

[H3C-bgp-af-mul] reflector cluster-id 80

[H3C-bgp-af-mul] peer test reflect-client

7.1.41 summary

summary

undo summary

Use the summary command to set to auto-aggregate subnet routes.

Use the undo summary command to remove the configuration.

By default, subnet routes can not be aggregated automatically.

After the summary command is executed, MBGP cannot receive the subnet routes imported by IGP. You can use this command to reduce route selection information.