- Table of Contents
-
- H3C S3100-52P Command Manual-Release 1602(V1.01)
- 00-1Cover
- 01-CLI Command
- 02-Login Command
- 03-Configuration File Management Command
- 04-VLAN Command
- 05-IP Address and Performance Command
- 06-Voice VLAN Command
- 07-GVRP Command
- 08-Port Basic Configuration Command
- 09-Link Aggregation Command
- 10-Port Isolation Command
- 11-Port Security-Port Binding Command
- 12-DLDP Command
- 13-MAC Address Table Management Command
- 14-MSTP Command
- 15-Static Route Command
- 16-Multicast Command
- 17-802.1x and System Guard Command
- 18-AAA Command
- 19-Web Authentication Command
- 20-MAC Address Authentication Command
- 21-ARP Command
- 22-DHCP Command
- 23-ACL Command
- 24-QoS-QoS Profile Command
- 25-Mirroring Command
- 26-Stack-Cluster Command
- 27-SNMP-RMON Command
- 28-NTP Command
- 29-SSH Command
- 30-File System Management Command
- 31-FTP-SFTP-TFTP Command
- 32-Information Center Command
- 33-System Maintenance and Debugging Command
- 34-VLAN-VPN Command
- 35-HWPing Command
- 36-IPv6 Management Command
- 37-DNS Command
- 38-Smart Link-Monitor Link Command
- 39-Appendix
- Related Documents
-
Title | Size | Download |
---|---|---|
16-Multicast Command | 138.18 KB |
Table of Contents
Chapter 1 Common Multicast Configuration Commands. 1-1
1.1 Common Multicast Configuration Commands. 1-1
1.1.1 display mac-address multicast static. 1-1
1.1.2 display multicast-source-deny. 1-2
1.1.3 mac-address multicast interface. 1-3
1.1.4 mac-address multicast vlan. 1-4
1.1.5 multicast-source-deny. 1-4
1.1.6 unknown-multicast drop enable. 1-6
Chapter 2 IGMP Snooping Configuration Commands. 2-1
2.1 IGMP Snooping Configuration Commands. 2-1
2.1.1 display igmp-snooping configuration. 2-1
2.1.2 display igmp-snooping group. 2-2
2.1.3 display igmp-snooping statistics. 2-4
2.1.5 igmp-snooping fast-leave. 2-6
2.1.6 igmp-snooping general-query source-ip. 2-7
2.1.7 igmp-snooping group-limit 2-8
2.1.8 igmp-snooping group-policy. 2-10
2.1.9 igmp-snooping host-aging-time. 2-12
2.1.10 igmp-snooping max-response-time. 2-13
2.1.11 igmp-snooping nonflooding-enable. 2-13
2.1.12 igmp-snooping querier 2-14
2.1.13 igmp-snooping query-interval 2-15
2.1.14 igmp-snooping router-aging-time. 2-16
2.1.15 igmp-snooping version. 2-17
2.1.16 igmp-snooping vlan-mapping. 2-17
2.1.18 multicast static-group interface. 2-19
2.1.19 multicast static-group vlan. 2-20
2.1.20 multicast static-router-port 2-21
2.1.21 multicast static-router-port vlan. 2-22
2.1.22 reset igmp-snooping statistics. 2-23
2.1.23 service-type multicast 2-23
Chapter 1 Common Multicast Configuration Commands
1.1 Common Multicast Configuration Commands
1.1.1 display mac-address multicast static
Syntax
display mac-address multicast static [ [mac-address ] vlan vlan-id ] [ count ]
View
Any view
Parameters
mac-address: Displays the static multicast MAC entry information for the specified MAC address. Without this argument provided, this command displays the information of all static multicast MAC entries in the specified VLAN.
vlan vlan-id: Displays the static multicast MAC entry information in the specified VLAN. Without a VLAN specified, this command displays the static multicast MAC entry information in all VLANs.
count: Displays the number of static multicast MAC entries.
Description
Use the display mac-address multicast static command to display the information about the multicast MAC address entry or entries manually configured on the switch.
Related commands: mac-address multicast interface, mac-address multicast vlan.
Examples
# Display the information of all static multicast MAC entries in VLAN 1.
<Sysname> display mac-address multicast static vlan 1
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
0100-0001-0001 1 Config static Ethernet1/0/1 NOAGED
Ethernet1/0/2
Ethernet1/0/3
Ethernet1/0/4
--- 1 static mac address(es) found ---
Table 1-1 display mac-address multicast static command output description
Field | Description |
MAC ADDR | MAC address |
VLAN ID | The VLAN in which the MAC address is manually added |
STATE | State of the MAC address, which includes only Config static, indicating that the table entry is manually added. |
PORT INDEX | Ports out which the multicast packets destined for the multicast MAC address are forwarded |
AGING TIME(s) | Remaining lifetime of the entry. NOAGED indicates that the entry never expires. |
1.1.2 display multicast-source-deny
Syntax
display multicast-source-deny [ interface interface-type [ interface-number ] ]
View
Any view
Parameters
interface-type: Port type.
interface-number: Port number.
Description
Use the display multicast-source-deny command to display the multicast source port suppression status.
l With neither a port type nor a port number specified, the command displays the multicast source port suppression status of all the ports on the switch.
l With only a port type specified, the command displays the multicast source port suppression status of all ports of that type.
l With both a port type and a port number specified, the command displays the multicast source port suppression status of the specified port.
Related commands: multicast-source-deny.
Examples
# Display the multicast source port suppression status of Ethernet 1/0/1.
<Sysname> display multicast-source-deny interface Ethernet 1/0/1
Ethernet1/0/1 Multicast-source-deny disabled.
The information above shows that multicast source port suppression is disabled on Ethernet 1/0/1.
1.1.3 mac-address multicast interface
Syntax
mac-address multicast mac-address interface interface-list vlan vlan-id
undo mac-address multicast [ mac-address [ interface interface-list ] vlan vlan-id ]
View
System view
Parameters
mac-address: Multicast MAC address, in the form of H-H-H.
interface interface-list: Specifies forwarding ports for the specified multicast MAC group address. With the interface-list argument, you can define one or more individual ports (in the form of interface-type interface-number) and/or one or more port ranges (in the form of interface-type interface-number1 to interface-type interface-number2, where interface-number2 must be greater than interface-number1). The total number of individual ports plus port ranges cannot exceed 10. For port types and port numbers, refer to the parameter description in the “Port Basic Configuration” part in this manual.
vlan vlan-id: Specifies the VLAN to which the forwarding ports belong. The effective range for vlan-id is 1 to 4094.
Description
Use the mac-address multicast interface command to create a multicast MAC address entry.
Use the undo mac-address multicast interface command to remove the specified multicast MAC address entry or all multicast MAC address entries.
Each multicast MAC address entry contains multicast address, forward port, VLAN ID, and so on.
Related commands: display mac-address multicast static.
Examples
# Create a multicast MAC address entry, with the multicast MAC address of 0100-5e0a-0805 and a forwarding port of Ethernet 1/0/1 in VLAN 1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] mac-address multicast 0100-5e0a-0805 interface Ethernet 1/0/1 vlan 1
1.1.4 mac-address multicast vlan
Syntax
mac-address multicast mac-address vlan vlan-id
undo mac-address multicast [ [ mac-address ] vlan vlan-id ]
View
Ethernet port view
Parameters
mac-address: Multicast MAC address in the form of H-H-H.
vlan vlan-id: Specifies the VLAN the current port belongs to. The effective range for vlan-id is 1 to 4094.
Description
Use the mac-address multicast vlan command to create a multicast MAC address entry on the current port.
Use the undo mac-address multicast vlan command to remove the specified multicast MAC address entry or all multicast MAC address entries on the current port.
Each multicast MAC address entry contains the multicast address, forwarding port, and VLAN ID information.
Related commands: display mac-address multicast static.
Examples
# Create a multicast MAC address entry on Ethernet 1/0/1 in VLAN 1, with the multicast address of 0100-1000-1000.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] mac-address multicast 0100-1000-1000 vlan 1
1.1.5 multicast-source-deny
Syntax
multicast-source-deny [ interface interface-list ]
undo multicast-source-deny [ interface interface-list ]
View
System view, Ethernet port view
Parameters
interface interface-list: Enables the multicast source port suppression feature on the specified port or ports. With the interface-list argument, you can define one or more individual ports (in the form of interface-type interface-number) and/or one or more port ranges (in the form of interface-type interface-number1 to interface-type interface-number2, where interface-number2 must be greater than interface-number1). The total number of individual ports plus port ranges cannot exceed 10. For port types and port numbers, refer to the parameter description in the “Port Basic Configuration” part in this manual.
Description
Use the multicast-source-deny command to enable the multicast source port suppression feature.
Use the undo multicast-source-deny command to restore the default setting.
By default, the multicast source port suppression feature is disabled on all the ports.
With the multicast source port suppression feature enabled on a port, the port drops all multicast data packets while it permits multicast protocol packets to pass. This feature is useful for rejecting multicast traffic from unauthorized multicast source servers connected to the switch.
l In system view, if no port or port list is specified, the multicast source port suppression feature is enabled on all the ports of the switch; if one or more ports or port lists are specified, the multicast source port suppression feature is enabled on the specified ports.
l In Ethernet port view, you can use the command to enable the multicast source port suppression feature on the current port only.
Examples
# Enable the multicast source port suppression feature on all the ports of the switch.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] multicast-source-deny
# Enable the multicast source port suppression feature on Ethernet 1/0/1 through Ethernet 1/0/10 and on Ethernet 1/0/12.
[Sysname] multicast-source-deny interface Ethernet 1/0/1 to Ethernet 1/0/10 Ethernet 1/0/12
# Enable the multicast source port suppression feature on Ethernet 1/0/13.
[Sysname] interface Ethernet 1/0/13
[Sysname-Ethernet1/0/13] multicast-source-deny
1.1.6 unknown-multicast drop enable
Syntax
unknown-multicast drop enable
undo unknown-multicast drop enable
View
System view
Parameters
None
Description
Use the unknown-multicast drop enable command to enable the function of dropping unknown multicast packets.
Use the undo unknown-multicast drop enable command to disable the function of dropping unknown multicast packets.
By default, the function of dropping unknown multicast packets is disabled.
Examples
Enable the unknown multicast drop feature.
<Sysname> system-view
System view: return to user view with Ctrl+Z.
[Sysname] unknown-multicast drop enable
Chapter 2 IGMP Snooping Configuration Commands
& Note:
The following are new features in this set of manuals:
l Configuring IGMPv3 Snooping functions. The related commands are igmp-snooping version and igmp host-join.
l Configuring IGMP Snooping nonflooding. The related command is igmp-snooping nonflooding-enable.
l Configuring static member ports. The related commands are multicast static-group interface and multicast static-group vlan.
l Configuring static router ports. The related commands are multicast static-router-port and multicast static-router-port vlan.
l Configuring VLAN tags of query messages. The related command is igmp-snooping vlan-mapping.
2.1 IGMP Snooping Configuration Commands
2.1.1 display igmp-snooping configuration
Syntax
display igmp-snooping configuration
View
Any view
Parameters
None
Description
Use the display igmp-snooping configuration command to display IGMP Snooping configuration information.
If IGMP Snooping is disabled on this switch, this command displays a message showing that IGMP Snooping is not enabled.
With IGMP Snooping enabled, this command displays the following information:
l IGMP Snooping status
l aging time of the router port
l maximum response time in IGMP queries
l aging time of multicast member ports
l non-flooding feature status
Related commands: igmp-snooping, igmp-snooping router-aging-time, igmp-snooping max-response-time, igmp-snooping host-aging-time, igmp-snooping nonflooding-enable.
Examples
# Display IGMP Snooping configuration information on the switch.
<Sysname> display igmp-snooping configuration
Enable IGMP-Snooping.
The router port timeout is 105 second(s).
The max response timeout is 10 second(s).
The host port timeout is 260 second(s).
Enable IGMP-Snooping Non-Flooding.
The above-mentioned information shows: IGMP Snooping is enabled, the aging time of the router port is 105 seconds, the maximum response time in IGMP queries is 10 seconds, the aging time of multicast member ports is 260 seconds, and the IGMP Snooping non-flooding feature is enabled.
2.1.2 display igmp-snooping group
Syntax
display igmp-snooping group [ vlan vlan-id ]
View
Any view
Parameters
vlan vlan-id: Specifies the VLAN in which the multicast group information is to be displayed, where vlan-id ranges from 1 to 4094.. If you do not specify a VLAN, this command displays the multicast group information of all VLANs.
Description
Use the display igmp-snooping group command to display the IGMP Snooping multicast group information.
Related commands: igmp-snooping, igmp host-join, multicast static-group vlan, multicast static-group interface, multicast static-group vlan, multicast static-router-port, multicast static-router-port vlan
Examples
# Display the information about the multicast groups in VLAN 100.
<Sysname> display igmp-snooping group vlan 100
Total 1 IP Group(s).
Total 1 MAC Group(s).
Vlan(id):100.
Total 1 IP Group(s).
Total 1 MAC Group(s).
Static Router port(s):
Ethernet1/0/11
Dynamic Router port(s):
Ethernet1/0/22
IP group(s):the following ip group(s) match to one mac group.
IP group address:228.0.0.1
Static host port(s):
Ethernet1/0/23
Dynamic host port(s):
Ethernet1/0/10
MAC group(s):
MAC group address:0100-5e00-0001
Host port(s):Ethernet1/0/10 Ethernet1/0/23
Table 2-1 display igmp-snooping group command output description
Field | Description |
Total 1 IP Group(s). | Total number of IP multicast groups in all VLANs |
Total 1 MAC Group(s). | Total number of MAC multicast groups in all VLANs |
Vlan(id): | ID of the VLAN whose multicast group information is displayed |
Total 1 IP Group(s). | Total number of IP multicast groups in VLAN 100 |
Total 1 MAC Group(s). | Total number of MAC multicast groups in VLAN 100 |
Static Router port(s): | Static router port |
Dynamic Router port(s): | Dynamic router port |
Static host port(s): | Static member port |
Dynamic host port(s): | Dynamic member port |
IP group address: | IP address of a multicast group |
MAC group(s): | MAC multicast group |
MAC group address: | Address of a MAC multicast group |
Host port(s) | Member ports |
2.1.3 display igmp-snooping statistics
Syntax
display igmp-snooping statistics
View
Any view
Parameters
None
Description
Use the display igmp-snooping statistics command to display IGMP Snooping statistics.
This command displays the following information: the numbers of the IGMP general query messages, IGMP group-specific query messages, IGMPv1 report messages, IGMPv2 report messages, IGMP leave messages and error IGMP packets received, and the number of the IGMP group-specific query messages sent.
& Note:
When IGMPv3 Snooping is enabled, the device makes statistics of IGMPv3 messages as IGMPv2 messages.
Related commands: igmp-snooping.
Examples
# Display IGMP Snooping statistics.
<Sysname> display igmp-snooping statistics
Received IGMP general query packet(s) number:1.
Received IGMP specific query packet(s) number:0.
Received IGMP V1 report packet(s) number:0.
Received IGMP V2 report packet(s) number:3.
Received IGMP leave packet(s) number:0.
Received error IGMP packet(s) number:0.
Sent IGMP specific query packet(s) number:0.
The information above shows that IGMP receives:
l one IGMP general query messages
l zero IGMP specific query messages
l zero IGMPv1 report messages
l three IGMPv2 report messages
l zero IGMP leave messages
l zero IGMP error packets
IGMP Snooping sends:
l zero IGMP specific query messages
2.1.4 igmp-snooping
Syntax
igmp-snooping { enable | disable }
View
System view, VLAN view
Parameters
enable: Enables the IGMP Snooping feature.
disable: Disables the IGMP Snooping feature.
Description
Use the igmp-snooping enable command to enable the IGMP Snooping feature.
Use the igmp-snooping disable command to disable the IGMP Snooping feature.
By default, the IGMP Snooping feature is disabled.
Caution:
l Although both Layer 2 and Layer 3 multicast protocols can run on the same switch simultaneously, they cannot run simultaneously in the same VLAN and on the corresponding VLAN interface.
l Before enabling IGMP Snooping in a VLAN, be sure to enable IGMP Snooping globally in system view; otherwise the IGMP Snooping setting will not take effect.
l If IGMP Snooping and VLAN VPN are enabled on a VLAN at the same time, IGMP queries are likely to fail to pass the VLAN. You can solve this problem by configuring VLAN tags for the IGMP queries. For details, see igmp-snooping vlan-mapping.
Examples
# Enable the IGMP Snooping feature on the switch.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping enable
Enable IGMP-Snooping ok.
2.1.5 igmp-snooping fast-leave
Syntax
igmp-snooping fast-leave [ vlan vlan-list ]
undo igmp-snooping fast-leave [ vlan vlan-list ]
View
System view, Ethernet port view
Parameters
vlan vlan-list: Specifies a VLAN list. With the vlan-list argument, you can provide one or more individual VLAN IDs (in the form of vlan-id) and/or one or more VLAN ID ranges (in the form of vlan-id1 to vlan-id2, where vlan-id2 must be greater than vlan-id1). The effective range for a VLAN ID is 1 to 4094 and the total number of individual VLANs plus VLAN ranges cannot exceed 10.
Description
Use the igmp-snooping fast-leave command to enable IGMP fast leave processing.
Use the undo igmp-snooping fast-leave command to disable IGMP fast leave processing.
By default, IGMP fast leave processing is disabled.
& Note:
l The fast leave processing function works for a port only if the host attached to the port runs IGMPv2 or IGMPv3.
l The configuration performed in system view takes effect on all ports of the switch if no VLAN is specified; if one or more VLANs are specified, the configuration takes effect on all ports in the specified VLAN(s).
l The configuration performed in Ethernet port view takes effect on the port no matter which VLAN it belongs to if no VLAN is specified; if one or more VLANs are specified, the configuration takes effect on the port only if the port belongs to the specified VLAN(s).
l If fast leave processing and unknown multicast packet dropping or non-flooding are enabled on a port to which more than one host is connected, when one host leaves a multicast group, the other hosts connected to port and interested in the same multicast group will fail to receive multicast data for that group.
Examples
# Enable IGMP fast leave processing on Ethernet 1/0/1 in VLAN 2.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] igmp-snooping fast-leave vlan 2
2.1.6 igmp-snooping general-query source-ip
Syntax
igmp-snooping general-query source-ip { current-interface | ip-address }
undo igmp-snooping general-query source-ip
View
VLAN view
Parameters
current-interface: Specifies the IP address of the current VLAN interface as the source address of IGMP general queries. If the current VLAN interface does not have an IP address, the default IP address 0.0.0.0 will be used as the source IP address of IGMP general queries.
ip-address: Specifies the source address of IGMP general queries, which can be any legal IP address.
Description
Use the igmp-snooping general-query source-ip command to configure the source address of IGMP general queries.
Use the undo igmp-snooping general-query source-ip command to restore the default.
This command can take effect only if the IGMP Snooping querier function is enabled on the switch.
By default, the Layer 2 multicast switch sends general query messages with the source IP address of 0.0.0.0.
Related commands: igmp-snooping querier, igmp-snooping query-interval.
Examples
# Configure the switch to send general query messages with the source IP address 2.2.2.2 in VLAN 3.
<Sysname> system-view
System view, return to user view with Ctrl+Z.
[Sysname] igmp-snooping enable
[Sysname] vlan 3
[Sysname-vlan3] igmp-snooping enable
[Sysname-vlan3] igmp-snooping querier
[Sysname-vlan3] igmp-snooping general-query source-ip 2.2.2.2
2.1.7 igmp-snooping group-limit
Syntax
igmp-snooping group-limit limit [ vlan vlan-list ] [ overflow-replace ]
undo igmp-snooping group-limit [ vlan vlan-list ]
View
Ethernet port view
Parameters
limit: Maximum number of multicast groups the port can join, in the range of 1 to 256.
overflow-replace: Allows a new multicast group to replace an existing multicast group with the lowest IP address.
vlan vlan-list: Specifies a VLAN list. With the vlan-list argument, you can provide one or more individual VLAN IDs (in the form of vlan-id) and/or one or more VLAN ID ranges (in the form of vlan-id1 to vlan-id2, where vlan-id2 must be greater than vlan-id1). The effective range for a VLAN ID is 1 to 4094 and the total number of individual VLANs plus VLAN ranges cannot exceed 10.
Description
Use the igmp-snooping group-limit command to define the maximum number of multicast groups the port can join.
Use the undo igmp-snooping group-limit command to restore the default setting.
If you do not specify any VLAN, the command will take effect for all the VLANs to which the current port belongs; if you specify a VLAN or multiple VLANs, the command will take effect for the port only if the port belongs to the specified VLAN(s). It is recommended to specify a VLAN or multiple VLANs to save memory.
By default, the maximum number of multicast groups the port can join is 256.
& Note:
l To prevent bursting traffic in the network or performance deterioration of the device caused by excessive multicast groups, you can set the maximum number of multicast groups that the switch should process.
l When the number of multicast groups exceeds the configured limit, the switch removes its multicast forwarding entries starting from the oldest one. In this case, the multicast packets for the removed multicast group(s) will be flooded in the VLAN as unknown multicast packets. As a result, non-member ports can receive multicast packets within a period of time.
l To avoid this from happening, enable the function of dropping unknown multicast packets.
l The keyword overflow-replace does not apply to IGMPv3 Snooping, that is, with IGMPv3 Snooping enabled, even if the keyword overflow-replace is configured, a new multicast group will not replace an existing multicast group when the number of multicast groups reaches the maximum value.
Examples
# Configure to allow Ethernet 1/0/1 in VLAN 2 to join a maximum of 200 multicast groups.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] igmp-snooping group-limit 200 vlan 2
2.1.8 igmp-snooping group-policy
Syntax
igmp-snooping group-policy acl-number [ vlan vlan-list ]
undo igmp-snooping group-policy [ vlan vlan-list ]
View
System view, Ethernet port view
Parameters
acl-number: Basic ACL number, in the range of 2000 to 2999.
vlan vlan-list: Specifies a VLAN list. With the vlan-list argument, you can provide one or more individual VLAN IDs (in the form of vlan-id) and/or one or more VLAN ID ranges (in the form of vlan-id1 to vlan-id2, where vlan-id2 must be greater than vlan-id1). The effective range for a VLAN ID is 1 to 4094 and the total number of individual VLANs plus VLAN ranges cannot exceed 10.
Description
Use the igmp-snooping group-policy command to configure a multicast group filter.
Use the undo igmp-snooping group-policy command to remove the configured multicast group filter.
By default, no multicast group filter is configured.
The ACL rule defines a multicast address or a multicast address range (for example 224.0.0.1 to 239.255.255.255) and is used to:
l Allow the port(s) to join only the multicast group(s) defined in the rule by a permit statement.
l Inhibit the port(s) from joining the multicast group(s) defined in the rule by a deny statement.
& Note:
l A port can belong to multiple VLANs, you can configure only one ACL rule per VLAN on a port.
l If no ACL rule is configured, all the multicast groups will be filtered.
l Since most devices broadcast unknown multicast packets by default, this function is often used together with the function of dropping unknown multicast packets to prevent multicast streams from being broadcast as unknown multicast packets to a port blocked by this function.
l The configuration performed in system view takes effect on all ports of the switch if no VLAN is specified; if one or more VLANs are specified, the configuration takes effect on all ports in the specified VLAN(s).
l The configuration performed in Ethernet port view takes effect on the port no matter which VLAN it belongs to if no VLAN is specified; if one or more VLANs are specified, the configuration takes effect on the port only if the port belongs to the specified VLAN(s).
Examples
# Configure a multicast group filter to allow receivers attached to Ethernet 1/0/1 to access the multicast streams for groups 225.0.0.0 to 225.255.255.255.
l Configure ACL 2000.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
[Sysname-acl-basic-2000] quit
l Create VLAN 2 and add Ethernet1/0/1 to VLAN 2.
[Sysname] vlan 2
[Sysname-vlan2] port Ethernet 1/0/1
[Sysname-vlan2] quit
l Apply ACL 2000 on Ethernet1/0/1 to allow it to join only the IGMP multicast groups defined in the rule of ACL 2000.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] igmp-snooping group-policy 2000 vlan 2
[Sysname-Ethernet1/0/1] quit
# Configure a multicast group filter to allow receivers attached to Ethernet 1/0/2 to access the multicast streams for any groups except groups 225.0.0.0 to 225.0.0.255.
l Configure ACL 2001.
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule deny source 225.0.0.0 0.0.0.255
[Sysname-acl-basic-2001] rule permit source any
[Sysname-acl-basic-2001] quit
l Create VLAN 2 and add Ethernet1/0/2 to VLAN 2.
[Sysname] vlan 2
[Sysname-vlan2] port Ethernet 1/0/2
[Sysname-vlan2] quit
l Configure ACL 2001 on Ethernet1/0/2 to it to join any IGMP multicast groups except those defined in the deny rule of ACL 2001.
[Sysname] interface Ethernet 1/0/2
[Sysname-Ethernet1/0/2] igmp-snooping group-policy 2001 vlan 2
2.1.9 igmp-snooping host-aging-time
Syntax
igmp-snooping host-aging-time seconds
undo igmp-snooping host-aging-time
View
System view
Parameters
seconds: Aging time (in seconds) of multicast member ports, in the range of 200 to 1,000.
Description
Use the igmp-snooping host-aging-time command to configure the aging time of multicast member ports.
Use the undo igmp-snooping host-aging-time command to restore the default aging time.
By default, the aging time of multicast member ports is 260 seconds.
The aging time of multicast member ports determines the refresh frequency of multicast group members. In an environment where multicast group members change frequently, a relatively shorter aging time is required.
Related commands: display igmp-snooping configuration.
Examples
# Set the aging time of multicast member ports to 300 seconds.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping host-aging-time 300
2.1.10 igmp-snooping max-response-time
Syntax
igmp-snooping max-response-time seconds
undo igmp-snooping max-response-time
View
System view
Parameters
seconds: Maximum response time in IGMP general queries, in the range of 1 to 25.
Description
Use the igmp-snooping max-response-time command to configure the maximum response time in IGMP general queries.
Use the undo igmp-snooping max-response-time command to restore the default.
By default, the maximum response time in IGMP general queries is 10 seconds.
An appropriate setting of the maximum response time in IGMP queries allows hosts to respond to queries quickly and thus the querier can learn the existence of multicast members quickly.
Related commands: display igmp-snooping configuration.
Examples
# Set the maximum response time in IGMP queries to 15 seconds.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping max-response-time 15
2.1.11 igmp-snooping nonflooding-enable
Syntax
igmp-snooping nonflooding-enable
undo igmp-snooping nonflooding-enable
View
System view
Parameters
None
Description
Use the igmp-snooping nonflooding-enable command to enable the IGMP Snooping non-flooding function. With this function enabled, unknown multicast packets are passed to the router ports of the switch rather than being flooded in the VLAN.
Use the undo igmp-snooping nonflooding-enable command to disable the IGMP Snooping non-flooding function.
By default, the IGMP Snooping non-flooding function is disabled, namely unknown multicast packets are flooded in the VLAN.
The difference between the IGMP Snooping non-flooding function and the function of dropping unknown multicast packets is in that the former passes unknown multicast packets to the router ports while the latter directly discards unknown multicast packets.
You can configure this command only after IGMP Snooping is enabled globally. When IGMP Snooping is disabled globally, the configuration of the igmp-snooping nonflooding-enable command is also removed.
& Note:
l If the function of dropping unknown multicast packets is enabled, you cannot enable the IGMP Snooping non-flooding function.
l The IGMP Snooping non-flooding function and the multicast source port suppression function cannot take effect at the same time. If both are configured, only the multicast source port suppression function takes effect.
Related commands: unknown-multicast drop enable, multicast-source-deny, display multicast-source-deny
Examples
# Enable IGMP Snooping non-flooding after you enable IGMP Snooping globally and disable unknown-multicast dropping.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping enable
[Sysname] igmp-snooping nonflooding-enable
2.1.12 igmp-snooping querier
Syntax
igmp-snooping querier
undo igmp-snooping querier
View
VLAN view
Parameters
None
Description
Use the igmp-snooping querier command to enable the IGMP Snooping querier feature on the current VLAN.
Use the undo igmp-snooping querier command to restore the default.
By default, the IGMP Snooping querier feature is disabled.
This command takes effect only if IGMP Snooping is enabled globally and also enabled in the current VLAN.
Related commands: igmp-snooping enable, igmp-snooping query-interval, igmp-snooping general-query source-ip
Examples
# Enable the IGMP Snooping querier in VLAN 3.
<Sysname> system-view
System view, return to user view with Ctrl+Z.
[Sysname] igmp-snooping enable
[Sysname] vlan 3
[Sysname-vlan3] igmp-snooping enable
[Sysname-vlan3] igmp-snooping querier
2.1.13 igmp-snooping query-interval
Syntax
igmp-snooping query-interval seconds
undo igmp-snooping query-interval
View
VLAN view
Parameters
seconds: IGMP query interval, ranging from 1 to 300, in seconds.
Description
Use the igmp-snooping query-interval command to configure the IGMP query interval, namely the interval at which the switch sends IGMP general queries.
Use the undo igmp-snooping query-interval command to restore the default.
By default, the IGMP query interval is 60 seconds.
These commands are effective only after the IGMP Snooping querier feature is enabled. Otherwise, the switch will not send general queries. The configured query interval must be longer than the maximum response time in general queries.
Related commands: igmp-snooping enable, igmp-snooping querier, igmp-snooping max-response-time, igmp-snooping general-query source-ip
Examples
# Configure the IGMP query interval to 100 seconds in VLAN 3.
<Sysname> system-view
System view, return to user view with Ctrl+Z.
[Sysname] igmp-snooping enable
[Sysname] vlan 3
[Sysname-vlan3] igmp-snooping enable
[Sysname-vlan3] igmp-snooping querier
[Sysname-vlan3] igmp-snooping query-interval 100
2.1.14 igmp-snooping router-aging-time
Syntax
igmp-snooping router-aging-time seconds
undo igmp-snooping router-aging-time
View
System view
Parameters
seconds: Aging time of router ports, in the range of 1 to 1,000, in seconds.
Description
Use the igmp-snooping router-aging-time command to configure the aging time of router ports.
Use the undo igmp-snooping router-aging-time command to restore the default aging time.
By default, the aging time of router ports is 105 seconds.
The aging time of router ports should be about 2.5 times the IGMP query interval.
Related commands: igmp-snooping max-response-time, igmp-snooping.
Examples
# Set the aging time of the router port to 500 seconds.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping router-aging-time 500
2.1.15 igmp-snooping version
igmp-snooping version version-number
undo igmp-snooping version
View
VLAN view
Parameters
version-number: IGMP Snooping version, in the range of 2 to 3 and defaulting to 2.
Description
Use the igmp-snooping version command to configure the IGMP Snooping version in the current VLAN.
Use the undo igmp-snooping version command to restore the default IGMP Snooping version.
This command can take effect only if IGMP Snooping is enabled in the VLAN.
Related commands: igmp-snooping enable.
Examples
# Set IGMP Snooping version to version 3 in VLAN 100.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping enable
Enable IGMP-Snooping ok.
[Sysname] vlan 100
[Sysname -vlan100] igmp-snooping enable
[Sysname -vlan100] igmp-snooping version 3
2.1.16 igmp-snooping vlan-mapping
Syntax
igmp-snooping vlan-mapping vlan vlan-id
undo igmp-snooping vlan-mapping
View
System view
Parameters
vlan vlan-id: VLAN ID, in the range of 1 to 4094.
Description
Use the igmp-snooping vlan-mapping vlan command to configure to transmit IGMP general and group-specific query messages in a specific VLAN.
Use the undo igmp-snooping vlan-mapping command to restore the default.
By default, the VLAN tag carried in IGMP general and group-specific query messages is not changed.
Examples
# Configure IGMP general and group-specific query messages to be transmitted in VLAN 2.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] igmp-snooping enable
[Sysname] igmp-snooping vlan-mapping vlan 2
2.1.17 igmp host-join
igmp host-join group-address [source-ip source-address] vlan vlan-id
undo igmp host-join group-address [source-ip source-address] vlan vlan-id
View
Ethernet port view
Parameters
group-address: Address of the multicast group to join.
source-address: Address of the multicast source to join. You can specify a multicast source address only when IGMPv3 Snooping is running in a VLAN.
vlan vlan-id: ID of the VLAN to which the port belongs, in the range of 1 to 4094.
Description
Use the igmp host-join command to configure the current port as a simulated multicast group member host to join the specified multicast group or source and group.
Use the undo igmp host-join command to remove the current port as a simulated member host for the specified multicast group or source-group.
Unlike a static member port, a port configured as a simulated member host will age out like a dynamic member port.
Related commands: igmp-snooping enable, multicast static-group interface, multicast static-group vlan
Caution:
l Before configuring a port as a simulated host, enable IGMP Snooping in VLAN view first.
l The current port must belong to the specified VLAN; otherwise this configuration does not take effect.
Examples
# Configure Ethernet 1/0/1 in VLAN 1 as a simulated member host for multicast source 1.1.1.1 and multicast group 225.0.0.1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname]igmp-snooping enable
Enable IGMP-Snooping ok.
[Sysname]vlan 1
[Sysname-vlan1]igmp-snooping enable
[Sysname-vlan1]igmp-snooping version 3
[Sysname-vlan1]quit
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet 1/0/1] igmp host-join 225.0.0.1 source-ip 1.1.1.1 vlan 10
2.1.18 multicast static-group interface
Syntax
multicast static-group group-address interface interface-list
undo multicast static-group group-address interface interface-list
View
VLAN interface view
Parameters
group-address: IP address of the multicast group to join, in the range of 224.0.0.0 to 239.255.255.255.
interface interface-list: Specifies a port list. With the interface-list argument, you can define one or more individual ports (in the form of interface-type interface-number) and/or one or more port ranges (in the form of interface-type interface-number1 to interface-type interface-number2, where interface-number2 must be greater than interface-number1). The total number of individual ports plus port ranges cannot exceed 10. For port types and port numbers, refer to the parameter description in the “Port Basic Configuration” part in this manual.
Description
Use the multicast static-group interface command to configure the specified port(s) under the current VLAN interface as static member port(s) for the specified multicast group.
Use the undo multicast static-group interface command to remove the specified port(s) in the current VLAN as static member port(s) for the specified multicast group.
By default, no port is configured as a static multicast group member port.
& Note:
The ports configured with this command handle Layer 2 multicast traffic only, rather than Layer 3 multicast traffic.
Examples
# Configure ports Ethernet 1/0/1 to Ethernet 1/0/3 under VLAN-interface 1 as static members ports for multicast group 225.0.0.1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Vlan-interface 1
[Sysname-Vlan-interface1] multicast static-group 225.0.0.1 interface Ethernet 1/0/1 to Ethernet 1/0/3
2.1.19 multicast static-group vlan
Syntax
multicast static-group group-address vlan vlan-id
undo multicast static-group group-address vlan vlan-id
View
Ethernet port view
Parameters
group-address: IP address of the multicast group to join, in the range of 224.0.0.0 to 239.255.255.255.
vlan vlan-id: Specifies the VLAN the Ethernet port belongs to, where vlan-id ranges from 1 to 4094.
Description
Use the multicast static-group vlan command to configure the current port in the specified VLAN as a static member port for the specified multicast group.
Use the undo multicast static-group vlan command to remove the current port in the specified VLAN as a static member port for the specified multicast group.
By default, no port is configured as a static multicast group member port.
& Note:
The port configured with this command handles Layer 2 multicast traffic only, rather than Layer 3 multicast traffic.
Examples
# Configure port Ethernet1/0/1 in VLAN 2 as a static member port for multicast group 225.0.0.1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname]interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] multicast static-group 225.0.0.1 vlan 2
2.1.20 multicast static-router-port
Syntax
multicast static-router-port interface-type interface-number
undo multicast static-router-port interface-type interface-number
View
VLAN view
Parameters
interface-type interface-number: Specifies a port by its type and number.
Description
Use the multicast static-router-port command to configure the specified port in the current VLAN as a static router port.
Use the undo multicast static-router-port command to remove the specified port in the current VLAN as a static router port.
By default, a port is not a static router port.
Examples
# Configure Ethernet 1/0/1 in VLAN 10 as a static router port.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] vlan 10
[Sysname-vlan10] multicast static-router-port Ethernet1/0/1
2.1.21 multicast static-router-port vlan
Syntax
multicast static-router-port vlan vlan-id
undo multicast static-router-port vlan vlan-id
View
Ethernet port view
Parameters
vlan-id: VLAN ID the port belongs to, in the range of 1 to 4094.
Description
Use the multicast static-router-port vlan command to configure the current port in the specified VLAN as a static router port.
Use the undo multicast static-router-port vlan command to remove the current port in the specified VLAN as a static router port.
By default, the static router port function is disabled.
Examples
# Configure Ethernet 1/0/1 in VLAN 10 as a static router port.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet 1/0/1] multicast static-router-port vlan 10
2.1.22 reset igmp-snooping statistics
Syntax
reset igmp-snooping statistics
View
User view
Parameters
None
Description
Use the reset igmp-snooping statistics command to clear IGMP Snooping statistics.
Related commands: display igmp-snooping statistics.
Examples
# Clear IGMP Snooping statistics.
<Sysname> reset igmp-snooping statistics
2.1.23 service-type multicast
Syntax
service-type multicast
undo service-type multicast
View
VLAN view
Parameters
None
Description
Use the service-type multicast command to configure the current VLAN as a multicast VLAN.
Use the undo service-type multicast command to remove the current VLAN as a multicast VLAN.
By default, no VLAN is a multicast VLAN.
In an IGMP Snooping environment, by configuring a multicast VLAN and adding ports to the multicast VLAN, you can allow users in different VLANs to share the same multicast VLAN. This saves bandwidth because multicast streams are transmitted only within the multicast VLAN. In addition, because the multicast VLAN is isolated from user VLANs, this method also enhances the information security.
& Note:
l One port belongs to only one multicast VLAN.
l The port connected to a user terminal must be a hybrid port.
l The multicast member port must be in the same multicast VLAN with the router port. Otherwise, the port cannot receive multicast packets.
l If a router port is in a multicast VLAN, the router port must be configured as a trunk port or a hybrid port that allows tagged packets to pass for the multicast VLAN. Otherwise, all the multicast member ports in this multicast VLAN cannot receive multicast packets.
l If a multicast member port needs to receive multicast packets forwarded by a router port that does not belong to any multicast VLAN, the multicast member port must be removed from the multicast VLAN. Otherwise, the port cannot receive multicast packets.
Examples
# Configure VLAN 2 as a multicast VLAN.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] vlan 2
[Sysname-vlan2] service-type multicast