- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 02-MLD Snooping Commands | 135.87 KB |
MLD snooping configuration commands
display mld-snooping statistics
dot1p-priority (MLD-snooping view)
drop-unknown (MLD-snooping view)
fast-leave (MLD-snooping view)
group-policy (MLD-snooping view)
host-aging-time (MLD-snooping view)
host-tracking (MLD-snooping view)
last-listener-query-interval (MLD-snooping view)
max-response-time (MLD-snooping view)
mld-snooping general-query source-ip
mld-snooping last-listener-query-interval
mld-snooping max-response-time
mld-snooping router-aging-time
mld-snooping special-query source-ip
mld-snooping static-router-port
overflow-replace (MLD-snooping view)
report-aggregation (MLD-snooping view)
router-aging-time (MLD-snooping view)
MLD snooping configuration commands
display mld-snooping group
Use display mld-snooping group to display MLD snooping group information, including both dynamic and static MLD snooping group entries.
Syntax
display mld-snooping group [ vlan vlan-id ] [ verbose ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094. If you do not specify a VLAN, this command displays MLD snooping group information in all VLANs.
verbose: Displays detailed MLD snooping group information.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display detailed MLD snooping group information in VLAN 2.
<Sysname> display mld-snooping group vlan 2 verbose
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port
Subvlan flags: R-Real VLAN, C-Copy VLAN
Vlan(id):2.
Total 1 IP Group(s).
Total 1 IP Source(s).
Total 1 MAC Group(s).
Router port(s):total 1 port(s).
GE1/0/2 (D) ( 00:01:30 )
IP group(s):the following ip group(s) match to one mac group.
IP group address:FF1E::101
(::, FF1E::101):
Attribute: Host Port
Host port(s):total 1 port(s).
GE1/0/1 (D) ( 00:03:23 )
MAC group(s):
MAC group address:3333-0000-0101
Host port(s):total 1 port(s).
GE1/0/1
Table 1 Command output
|
Field |
Description |
|
Total 1 IP Group(s) |
|
|
Total 1 IP Source(s) |
Total number of IPv6 multicast sources. |
|
Total 1 MAC Group(s) |
Total number of MAC multicast groups. |
|
Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port |
Port flags: · D—Dynamic port. · S—Static port. · C—Port copied from a (*, G) entry to an (S, G) entry. · P—Port that IPv6 PIM snooping adds. |
|
Subvlan flags: R-Real VLAN, C-Copy VLAN |
Sub-VLAN flags: · R—Real egress sub-VLAN under the current entry. · C—Sub-VLAN copied from a (*, G) entry to an (S, G) entry. |
|
Router port(s) |
Number of router ports. |
|
( 00:01:30 ) |
Remaining time of the aging timer for the dynamic member port or router port. |
|
IP group address |
Address of IPv6 multicast group. |
|
MAC group address |
Address of MAC multicast group. |
|
Attribute |
Attribute of IPv6 multicast group. |
|
Host port(s) |
Number of member ports. |
display mld-snooping host
Use display mld-snooping host to display information about the hosts tracked by MLD snooping.
Syntax
display mld-snooping host vlan vlan-id group ipv6-group-address [ source ipv6-source-address ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094.
group ipv6-group-address: Specifies an IPv6 multicast group. The value range for the ipv6-group-address argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where x and y represent any hexadecimal numbers from 0 to F.
source ipv6-source-address: Specifies an IPv6 multicast source.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about the hosts tracked by MLD snooping in multicast group FF1E::101 in VLAN 2.
<Sysname> display mld-snooping host vlan 2 group ff1e::101
VLAN(ID) : 2
(::, FF1E::101)
Port : GE1/0/1
Host Uptime Expires
1::1 00:02:20 00:00:40
2::2 00:02:21 00:00:39
Port : GE1/0/2
Host Uptime Expires
3::3 00:02:20 00:00:40
Table 2 Command output
|
Field |
Description |
|
VLAN(ID) |
VLAN ID. |
|
(::, FF1E::101) |
(S, G) entry, where double colon (::) means all IPv6 multicast sources. |
|
Port |
Member port. |
|
Host |
Host IPv6 address. |
|
Uptime |
Host running duration. |
|
Expires |
Host expiration time, where "timeout" means that the host has expired. |
display mld-snooping statistics
Use display mld-snooping statistics to display the statistics for MLD messages learned through MLD snooping.
Syntax
display mld-snooping statistics [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display statistics for all MLD messages learned through MLD snooping.
<Sysname> display mld-snooping statistics
Received MLD general queries:0.
Received MLDv1 specific queries:0.
Received MLDv1 reports:0.
Received MLD dones:0.
Sent MLDv1 specific queries:0.
Received MLDv2 reports:0.
Received MLDv2 reports with right and wrong records:0.
Received MLDv2 specific queries:0.
Received MLDv2 specific sg queries:0.
Sent MLDv2 specific queries:0.
Sent MLDv2 specific sg queries:0.
Received error MLD messages:0.
Table 3 Command output
|
Field |
Description |
|
general queries |
General query messages. |
|
specific queries |
Multicast-address-specific query messages. |
|
reports |
Report messages. |
|
dones |
Done messages. |
|
reports with right and wrong records |
Reports that contain correct and incorrect records. |
|
specific sg queries |
Multicast-address-and-source-specific queries. |
|
error MLD messages |
Error MLD messages. |
dot1p-priority (MLD-snooping view)
Use dot1p-priority to set the 802.1p precedence for MLD messages globally.
Use undo dot1p-priority to restore the default.
Syntax
dot1p-priority priority-number
undo dot1p-priority
Default
The default 802.1p precedence for MLD messages is 0.
Views
MLD-snooping view
Default command level
2: System level
Parameters
priority-number: Specifies an 802.1p precedence for MLD messages, in the range of 0 to 7. A higher value means a higher precedence.
Examples
# Set the 802.1p precedence for MLD messages to 3 globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] dot1p-priority 3
drop-unknown (MLD-snooping view)
Use drop-unknown to enable dropping unknown IPv6 multicast data globally.
Use undo drop-unknown to disable dropping unknown IPv6 multicast data globally.
Syntax
drop-unknown
undo drop-unknown
Default
This function is disabled, and unknown IPv6 multicast data is flooded in the VLAN.
Views
MLD-snooping view
Default command level
2: System level
Examples
# Globally enable the device to drop unknown IPv6 multicast data.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] drop-unknown
mld-snooping drop-unknown
fast-leave (MLD-snooping view)
Use fast-leave to enable fast-leave processing globally. With this function enabled, when the AC receives an MLD done message on a port, it directly removes that port from the forwarding table entry for the specific IPv6 multicast group.
Use undo fast-leave to disable fast-leave processing globally.
Syntax
fast-leave [ vlan vlan-list ]
undo fast-leave [ vlan vlan-list ]
Default
Fast-leave processing is disabled.
Views
MLD-snooping view
Default command level
2: System level
Parameters
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command takes effect on all VLANs. If you specify multiple VLANs, the command takes effect on only the specified VLANs.
Examples
# Enable fast-leave processing globally for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] fast-leave vlan 2
mld-snooping fast-leave
group-policy (MLD-snooping view)
Use group-policy to configure a global IPv6 multicast group filter to control the IPv6 multicast groups that the hosts in a VLAN can join.
Use undo group-policy to remove the configured global IPv6 multicast group filter.
Syntax
group-policy acl6-number [ vlan vlan-list ]
undo group-policy [ vlan vlan-list ]
Default
No IPv6 multicast group filter is configured globally, and a host in any VLAN can join a valid IPv6 multicast group.
Views
MLD-snooping view
Default command level
2: System level
Parameters
acl6-number: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999.
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command takes effect on all VLANs. If you specify multiple VLANs, the command takes effect on only the specified VLANs.
Usage guidelines
If the specified IPv6 ACL does not exist or the ACL rule is null, all IPv6 multicast groups are filtered out.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly configured IPv6 ACL rule overrides the existing one.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts in VLAN 2 can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] mld-snooping
[Sysname-mld-snooping] group-policy 2000 vlan 2
mld-snooping group-policy
host-aging-time (MLD-snooping view)
Use host-aging-time to configure the aging timer for the dynamic member ports globally.
Use undo host-aging-time to restore the default.
Syntax
host-aging-time interval
undo host-aging-time
Default
The aging timer of the dynamic member ports is 260 seconds.
Views
MLD-snooping view
Default command level
2: System level
Parameters
interval: Specifies an aging timer in seconds for the dynamic member ports, in the range of 200 to 1000.
Examples
# Set the aging timer for the dynamic member ports to 300 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] host-aging-time 300
mld-snooping host-aging-time
host-tracking (MLD-snooping view)
Use host-tracking to enable the MLD snooping host tracking function globally.
Use undo host-tracking to disable the MLD snooping host tracking function globally.
Syntax
host-tracking
undo host-tracking
Default
This function is disabled.
Views
MLD-snooping view
Default command level
2: System level
Examples
# Enable the MLD snooping host tracking function globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] host-tracking
Related commands
mld-snooping host-tracking
last-listener-query-interval (MLD-snooping view)
Use last-listener-query-interval to set the MLD last-listener query interval globally.
Use undo last-listener-query-interval to restore the default.
Syntax
last-listener-query-interval interval
undo last-listener-query-interval
Default
The MLD last listener query interval is 1 second.
Views
MLD-snooping view
Default command level
2: System level
Parameters
interval: Sets the MLD last-listener query interval in seconds, in the range of 1 to 5.
Usage guidelines
The MLD last-listener query interval determines the interval for sending MLD multicast-address-specific queries and the maximum response delay for MLD multicast-address-specific queries.
Examples
# Set the MLD last-listener query interval to 3 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] last-listener-query-interval 3
mld-snooping last-listener-query-interval
max-response-time (MLD-snooping view)
Use max-response-time to configure the maximum response delay for MLD general queries globally.
Use undo max-response-time to restore the default.
Syntax
max-response-time interval
undo max-response-time
Default
The maximum response delay for MLD general queries is 10 seconds.
Views
MLD-snooping view
Default command level
2: System level
Parameters
interval: Specifies the maximum response delay in seconds for MLD general queries, in the range of 1 to 25.
Examples
# Set the maximum response delay for MLD general queries to 5 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] max-response-time 5
· mld-snooping max-response-time
· mld-snooping query-interval
mld-snooping
Use mld-snooping to enable MLD snooping globally and enter MLD-snooping view.
Use undo mld-snooping to disable MLD snooping globally.
Syntax
mld-snooping
undo mld-snooping
Default
MLD snooping is disabled.
Views
System view
Default command level
2: System level
Examples
# Enable MLD snooping globally and enter MLD-snooping view.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping]
mld-snooping enable
mld-snooping done source-ip
Use mld-snooping done source-ip to configure the source IPv6 address of the MLD done messages that the MLD snooping proxy sends.
Use undo mld-snooping done source-ip to restore the default.
Syntax
mld-snooping done source-ip { ipv6-address | current-interface }
undo mld-snooping done source-ip
Default
The source IPv6 address of the MLD done messages that the MLD snooping proxy sends is FE80::02FF:FFFF:FE00:0001.
Views
VLAN view
Default command level
2: System level
Parameters
ipv6-address: Specifies a source IPv6 address for the MLD done messages that the MLD snooping proxy sends, which can be any legal IPv6 link-local address.
current-interface: Specifies the IPv6 link-local address of the current VLAN interface as the source address of MLD done messages that the MLD snooping proxy sends. If no IPv6 address has been assigned to the current interface, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used.
Usage guidelines
You must enable MLD snooping for a VLAN before you configure this command for the VLAN.
The source IPv6 address configured in the mld-snooping done source-ip command also applies when the simulated host sends MLD done messages.
Examples
# In VLAN 2, enable MLD snooping and configure the source IPv6 address of MLD done messages that the MLD snooping proxy sends to FE80:0:0:1::1.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping done source-ip fe80:0:0:1::1
mld-snooping enable
mld-snooping dot1p-priority
Use mld-snooping dot1p-priority to set the 802.1p precedence for MLD messages in a VLAN.
Use undo mld-snooping dot1p-priority to restore the default.
Syntax
mld-snooping dot1p-priority priority-number
undo mld-snooping dot1p-priority
Default
The default 802.1p precedence for MLD messages is 0.
Views
VLAN view
Default command level
2: System level
Parameters
priority-number: Specifies an 802.1p precedence for MLD messages, in the range of 0 to 7. A higher value means a higher precedence.
Usage guidelines
You must enable MLD snooping for a VLAN before you configure this command for the VLAN.
Examples
# In VLAN 2, enable MLD snooping and set the 802.1p precedence for MLD messages to 3.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping dot1p-priority 3
mld-snooping enable
mld-snooping drop-unknown
Use mld-snooping drop-unknown to enable dropping unknown IPv6 multicast data in the VLAN.
Use undo mld-snooping drop-unknown to disable dropping unknown IPv6 multicast data in the VLAN.
Syntax
mld-snooping drop-unknown
undo mld-snooping drop-unknown
Default
This function is disabled, and unknown IPv6 multicast data is flooded.
Views
VLAN view
Default command level
2: System level
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and the function for dropping unknown IPv6 multicast data in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping drop-unknown
· drop-unknown
· mld-snooping enable
mld-snooping enable
Use mld-snooping enable to enable MLD snooping for a VLAN.
Use undo mld-snooping enable to disable MLD snooping for a VLAN.
Syntax
mld-snooping enable
undo mld-snooping enable
Default
MLD snooping is disabled.
Views
VLAN view
Default command level
2: System level
Usage guidelines
You must enable MLD snooping globally before you enable it for a VLAN.
Examples
# Enable MLD snooping for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
mld-snooping
mld-snooping fast-leave
Use mld-snooping fast-leave to enable fast-leave processing on a port. With this function enabled, when the AC receives an MLD done message on the port, it directly removes that port from the forwarding table entry for the specific IPv6 multicast group.
Use undo mld-snooping fast-leave to disable fast-leave processing on a port.
Syntax
mld-snooping fast-leave [ vlan vlan-list ]
undo mld-snooping fast-leave [ vlan vlan-list ]
Default
Fast-leave processing is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094.
Usage guidelines
Configuration views for this command vary by device models. For more information, see About the H3C Access Controllers Command References.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect on all VLANs to which the interface belongs. If you specify one or multiple VLANs, the command takes effect on the specified VLANs to which the interface belongs.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify one or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Examples
# Enable fast-leave processing on GigabitEthernet 1/0/1 in VLAN 2.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping fast-leave vlan 2
fast-leave
mld-snooping general-query source-ip
Use mld-snooping general-query source-ip to configure the source IPv6 address for MLD general queries.
Use undo mld-snooping general-query source-ip to restore the default.
Syntax
mld-snooping general-query source-ip { ipv6-address | current-interface }
undo mld-snooping general-query source-ip
Default
The source IPv6 address of MLD general queries is FE80::02FF:FFFF:FE00:0001.
Views
VLAN view
Default command level
2: System level
Parameters
ipv6-address: Specifies the source IPv6 address of MLD general queries, which can be any legal IPv6 link-local address.
current-interface: Sets the source IPv6 link-local address of MLD general queries to the IPv6 address of the current VLAN interface. If the current VLAN interface does not have an IPv6 address, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used as the source IPv6 address of MLD general queries.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# In VLAN 2, enable MLD snooping and specify FE80:0:0:1::1 as the source IPv6 address of MLD general queries.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping general-query source-ip fe80:0:0:1::1
mld-snooping enable
mld-snooping group-limit
Use mld-snooping group-limit to set the maximum number of IPv6 multicast groups that a port can join.
Use undo mld-snooping group-limit to restore the default.
Syntax
mld-snooping group-limit limit [ vlan vlan-list ]
undo mld-snooping group-limit [ vlan vlan-list ]
Default
The maximum number of IPv6 multicast groups that a port can join is 256.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
limit: Specifies the maximum number of IPv6 multicast groups that a port can join, in the range of 1 to 256.
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094. If this argument is not specified, the command separately takes effect on all VLANs to which the port belongs.
Usage guidelines
Configuration views for this command vary by device models. For more information, see About the H3C Access Controllers Command References.
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect on all VLANs to which the interface belongs. If you specify one or multiple VLANs, the command takes effect on the specified VLANs to which the interface belongs.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify one or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Examples
# Configure the device to allow GigabitEthernet 1/0/1 in VLAN 2 to join up to 10 IPv6 multicast groups.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping group-limit 10 vlan 2
mld group-limit
mld-snooping group-policy
Use mld-snooping group-policy to configure an IPv6 multicast group filter on a port to control the IPv6 multicast groups that the hosts on the port can join.
Use undo mld-snooping group-policy to remove the configured IPv6 multicast group filter.
Syntax
mld-snooping group-policy acl6-number [ vlan vlan-list ]
undo mld-snooping group-policy [ vlan vlan-list ]
Default
No IPv6 multicast group filter is configured on a port, and the hosts on the port can join any valid IPv6 multicast group.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
acl6-number: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999.
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094.
Usage guidelines
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect on all VLANs to which the interface belongs. If you specify one or multiple VLANs, the command takes effect on the specified VLANs to which the interface belongs.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify one or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly configured IPv6 ACL rule overrides the existing one.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts on GigabitEthernet 1/0/1 in VLAN 2 can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping group-policy 2000 vlan 2
group-policy
mld-snooping host-aging-time
Use mld-snooping host-aging-time to set the aging timer for the dynamic member ports in the current VLAN.
Use undo mld-snooping host-aging-time to restore the default.
Syntax
mld-snooping host-aging-time interval
undo mld-snooping host-aging-time
Default
The dynamic member port aging timer is 260 seconds.
Views
VLAN view
Default command level
2: System level
Parameters
interval: Specifies an aging timer in seconds for the dynamic member ports. The value range is 200 to 1000.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and set the aging timer for the dynamic member ports in VLAN 2 to 300 seconds.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping host-aging-time 300
· host-aging-time
· mld-snooping enable
mld-snooping host-join
Use mld-snooping host-join to configure a port on the AC as a simulated member host for the specified IPv6 multicast group or the specified IPv6 multicast source and group.
Use undo mld-snooping host-join to remove the simulated member host.
Syntax
mld-snooping host-join ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
undo mld-snooping host-join ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
Default
This function is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
ipv6-group-address: Specifies an IPv6 multicast group. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal numbers from 0 to F.
ipv6-source-address: Specifies an IPv6 multicast source.
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094.
Usage guidelines
The source-ip ipv6-source-address option in the command is meaningful only for MLDv2 snooping. If MLDv1 snooping is running, the source-ip ipv6-source-address option does not take effect although you can include source-ip ipv6-source-address in the command.
In Layer 2 Ethernet interface view or Layer 2 aggregate interface view, this feature takes effect only if the interface belongs to the specified VLAN. In port group view, this feature takes effect only on those ports in this port group that belong to the specified VLAN.
Examples
# Configure GigabitEthernet 1/0/1 in VLAN 2 as a simulated member host for the IPv6 multicast source and group (2002::22, FF1E::101).
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
[Sysname-vlan2] quit
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping host-join ff1e::101 source-ip 2002::22 vlan 2
mld-snooping host-tracking
Use mld-snooping host-tracking to enable the MLD snooping host tracking function for a VLAN.
Use undo mld-snooping host-tracking to disable the MLD snooping host tracking function for a VLAN.
Syntax
mld-snooping host-tracking
undo mld-snooping host-tracking
Default
This function is disabled.
Views
VLAN view
Default command level
2: System level
Usage guidelines
You must enable MLD snooping for a VLAN before you configure this command for the VLAN.
Examples
# Enable MLD snooping and the MLD snooping host tracking function for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping host-tracking
Related commands
· host-tracking
· mld-snooping enable
mld-snooping last-listener-query-interval
Use mld-snooping last-listener-query-interval to set the MLD last-listener query interval for a VLAN.
Use undo mld-snooping last-listener-query-interval to restore the default.
Syntax
mld-snooping last-listener-query-interval interval
undo mld-snooping last-listener-query-interval
Default
The MLD last-listener query interval is 1 second.
Views
VLAN view
Default command level
2: System level
Parameters
interval: Sets the MLD last-listener query interval in seconds, in the range of 1 to 5.
Usage guidelines
The MLD last-listener query interval determines the interval for sending MLD multicast-address-specific queries and the maximum response delay for MLD multicast-address-specific queries in a VLAN.
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and set the MLD last-listener query interval to 3 seconds for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping last-listener-query-interval 3
· last-listener-query-interval
· mld-snooping enable
mld-snooping max-response-time
Use mld-snooping max-response-time to set the maximum response delay for MLD general queries in the VLAN.
Use undo mld-snooping max-response-time to restore the default.
Syntax
mld-snooping max-response-time interval
undo mld-snooping max-response-time
Default
The maximum response delay for MLD general queries is 10 seconds.
Views
VLAN view
Default command level
2: System level
Parameters
interval: Specifies the maximum response delay in seconds for MLD general queries, in the range of 1 to 25.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and set the maximum response delay for MLD general queries to 5 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping max-response-time 5
· max-response-time
· mld-snooping enable
· mld-snooping query-interval
mld-snooping overflow-replace
Use mld-snooping overflow-replace to enable the IPv6 multicast group replacement function on a port.
Use undo mld-snooping overflow-replace to disable the IPv6 multicast group replacement function on a port.
Syntax
mld-snooping overflow-replace [ vlan vlan-list ]
undo mld-snooping overflow-replace [ vlan vlan-list ]
Default
The IPv6 multicast group replacement function is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094.
Usage guidelines
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect on all VLANs to which the interface belongs. If you specify one or multiple VLANs, the command takes effect on the specified VLANs to which the interface belongs.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify one or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Examples
# Enable the IPv6 multicast group replacement function on GigabitEthernet 1/0/1 in VLAN 2.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping overflow-replace vlan 2
overflow-replace
mld-snooping proxying enable
Use mld-snooping proxying enable to enable the MLD snooping proxying function for a VLAN.
Use undo mld-snooping proxying enable to disable the MLD snooping proxying function for a VLAN.
Syntax
mld-snooping proxying enable
undo mld-snooping proxying enable
Default
MLD snooping proxying is disabled in all VLANs.
Views
VLAN view
Default command level
2: System level
Usage guidelines
You must enable MLD snooping for a VLAN before you configure this command for the VLAN.
Examples
# Enable MLD snooping and MLD snooping proxying for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping proxying enable
mld-snooping enable
mld-snooping querier
Use mld-snooping querier to enable the MLD snooping querier function.
Use undo mld-snooping querier to disable the MLD snooping querier function.
Syntax
mld-snooping querier
undo mld-snooping querier
Default
The MLD snooping querier function is disabled.
Views
VLAN view
Default command level
2: System level
Usage guidelines
This command takes effect only if MLD snooping is enabled in the VLAN.
Examples
# Enable MLD snooping and the MLD snooping querier function for VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping querier
mld-snooping enable
mld-snooping query-interval
Use mld-snooping query-interval to set the MLD query interval.
Use undo mld-snooping query-interval to restore the default.
Syntax
mld-snooping query-interval interval
undo mld-snooping query-interval
Default
The MLD query interval is 125 seconds.
Views
VLAN view
Default command level
2: System level
Parameters
interval: Specifies an MLD query interval in seconds, namely, the interval for sending MLD general queries. The value range for this argument is 2 to 300.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and set the MLD query interval to 20 seconds in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping query-interval 20
· max-response-time
· mld-snooping enable
· mld-snooping max-response-time
· mld-snooping querier
mld-snooping report source-ip
Use mld-snooping report source-ip to configure the source IPv6 address for the MLD reports that the MLD snooping proxy sends.
Use undo mld-snooping report source-ip to restore the default.
Syntax
mld-snooping report source-ip { ipv6-address | current-interface }
undo mld-snooping report source-ip
Default
The source IPv6 address of the MLD reports that the MLD snooping proxy sends is FE80::02FF:FFFF:FE00:0001.
Views
VLAN view
Default command level
2: System level
Parameters
ipv6-address: Specifies a source IPv6 address for the MLD reports that the MLD snooping proxy sends, which can be any legal IPv6 link-local address.
current-interface: Specifies the IPv6 link-local address of the current VLAN interface as the source address of MLD reports that the MLD snooping proxy sends. If no IPv6 address has been assigned to the current interface, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used.
Usage guidelines
You must enable MLD snooping for a VLAN before you configure this command for the VLAN.
The source IPv6 address configured in the mld-snooping report source-ip command also applies when the simulated host sends MLD reports.
Examples
# In VLAN 2, enable MLD snooping and configure the source IPv6 address for the MLD reports that the MLD snooping proxy sends to FE80:0:0:1::1.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping report source-ip fe80:0:0:1::1
mld-snooping enable
mld-snooping router-aging-time
Use mld-snooping router-aging-time to set the aging timer for the dynamic router ports in the current VLAN.
Use undo mld-snooping router-aging-time to restore the default.
Syntax
mld-snooping router-aging-time interval
undo mld-snooping router-aging-time
Default
The dynamic router port aging timer is 260 seconds.
Views
VLAN view
Default command level
2: System level
Parameters
interval: Specifies an aging timer in seconds for the dynamic router ports, in the range of 1 to 1000.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# Enable MLD snooping and set the aging timer for the dynamic router ports in VLAN 2 to 100 seconds.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping router-aging-time 100
· mld-snooping enable
· router-aging-time
mld-snooping router-port-deny
Use mld-snooping router-port-deny to disable a port from becoming a dynamic router port.
Use undo mld-snooping router-port-deny to restore the default.
Syntax
mld-snooping router-port-deny [ vlan vlan-list ]
undo mld-snooping router-port-deny [ vlan vlan-list ]
Default
A port can become a dynamic router port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094.
Usage guidelines
If you do not specify any VLAN when using this command in Layer 2 Ethernet interface view or Layer 2 aggregate interface view, the command takes effect on all VLANs to which the interface belongs. If you specify one or multiple VLANs, the command takes effect on the specified VLANs to which the interface belongs.
If you do not specify any VLAN when using this command in port group view, the command takes effect on all the ports in this group. If you specify one or multiple VLANs, the command takes effect only on those ports in this group that belong to the specified VLANs.
Examples
# Disable GigabitEthernet 1/0/1 from becoming a dynamic router port in VLAN 2.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping router-port-deny vlan 2
mld-snooping special-query source-ip
Use mld-snooping special-query source-ip to configure the source IPv6 address of MLD multicast-address-specific queries.
Use undo mld-snooping special-query source-ip to restore the default.
Syntax
mld-snooping special-query source-ip { ipv6-address | current-interface }
undo mld-snooping special-query source-ip
Default
The source IPv6 address of MLD multicast-address-specific queries is FE80::02FF:FFFF:FE00:0001.
Views
VLAN view
Default command level
2: System level
Parameters
ipv6-address: Specifies an IPv6 link-local address as the source IPv6 address of MLD multicast-address-specific queries.
current-interface: Specifies the source IPv6 link-local address of the VLAN interface of the current VLAN as the source IPv6 address of MLD multicast-address-specific queries. If the current VLAN interface does not have an IPv6 address, the default IPv6 address FE80::02FF:FFFF:FE00:0001 is used as the source IPv6 address of MLD multicast-address-specific queries.
Usage guidelines
You must enable MLD snooping for a VLAN before you execute this command for the VLAN.
Examples
# In VLAN 2, enable MLD snooping and specify FE80:0:0:1::1 as the source IPv6 address of MLD multicast-address-specific queries.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping special-query source-ip fe80:0:0:1::1
mld-snooping enable
mld-snooping static-group
Use mld-snooping static-group to configure a port as a static member port of an IPv6 multicast group or an IPv6 multicast source and group.
Use undo mld-snooping static-group to restore the default.
Syntax
mld-snooping static-group ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
undo mld-snooping static-group ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id
Default
A port is not a static member port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
ipv6-group-address: Specifies an IPv6 multicast group. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal numbers from 0 to F.
ipv6-source-address: Specifies an IPv6 multicast source.
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094.
Usage guidelines
Configuration views for this command vary by device models. For more information, see About the H3C Access Controllers Command References.
The source-ip ipv6-source-address option in the command is meaningful only for MLDv2 snooping. If MLDv1 snooping is running, the source-ip ipv6-source-address option does not take effect although you can include source-ip ipv6-source-address in the command.
In Layer 2 Ethernet interface view or Layer 2 aggregate interface view, this feature takes effect only if the interface belongs to the specified VLAN. In port group view, this feature takes effect only on those ports in this port group that belong to the specified VLAN.
Examples
# Configure GigabitEthernet 1/0/1 in VLAN 2 as a static member port for the IPv6 multicast source and group (2002::22, FF1E::101).
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
[Sysname-vlan2] quit
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping static-group ff1e::101 source-ip 2002::22 vlan 2
mld-snooping static-router-port
Use mld-snooping static-router-port to configure a port as a static router port.
Use undo mld-snooping static-router-port to restore the default.
Syntax
mld-snooping static-router-port vlan vlan-id
undo mld-snooping static-router-port vlan vlan-id
Default
No ports are static router ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default command level
2: System level
Parameters
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094.
Usage guidelines
Configuration views for this command vary by device models. For more information, see About the H3C Access Controllers Command References.
In Layer 2 Ethernet interface view or Layer 2 aggregate interface view, this feature takes effect only if the interface belongs to the specified VLAN. In port group view, this feature takes effect only on those ports in this port group that belong to the specified VLAN.
Examples
# Configure GigabitEthernet 1/0/1 in VLAN 2 as a static router port.
<Sysname> system-view
[Sysname] interface Gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld-snooping static-router-port vlan 2
mld-snooping version
Use mld-snooping version to specify the version of MLD snooping.
Use undo mld-snooping version to restore the default.
Syntax
mld-snooping version version-number
undo mld-snooping version
Default
The MLD snooping version is MLDv1.
Views
VLAN view
Default command level
2: System level
Parameters
version-number: Specifies an MLD snooping version, in the range of 1 to 2.
Usage guidelines
This command can take effect only if MLD snooping is enabled in the VLAN.
Examples
# Enable MLD snooping and specify MLDv2 snooping in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] quit
[Sysname] vlan 2
[Sysname-vlan2] mld-snooping enable
[Sysname-vlan2] mld-snooping version 2
mld-snooping enable
overflow-replace (MLD-snooping view)
Use overflow-replace to enable the IPv6 multicast group replacement function globally.
Use undo overflow-replace to disable the IPv6 multicast group replacement function globally.
Syntax
overflow-replace [ vlan vlan-list ]
undo overflow-replace [ vlan vlan-list ]
Default
The IPv6 multicast group replacement function is disabled globally.
Views
MLD-snooping view
Default command level
2: System level
Parameters
vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range of a VLAN ID is 1 to 4094. If you do not specify any VLAN, the command takes effect on all VLANs. If you specify multiple VLANs, the command takes effect on only the specified VLANs.
Examples
# Enable the IPv6 multicast group replacement function globally in VLAN 2.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] overflow-replace vlan 2
mld-snooping overflow-replace
report-aggregation (MLD-snooping view)
Use report-aggregation to enable MLD report suppression.
Use undo report-aggregation to disable MLD report suppression.
Syntax
report-aggregation
undo report-aggregation
Default
MLD report suppression is enabled.
Views
MLD-snooping view
Default command level
2: System level
Examples
# Disable MLD report suppression.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] undo report-aggregation
reset mld-snooping group
Use reset mld-snooping group to remove the dynamic group entries of a specified MLD snooping group.
Syntax
reset mld-snooping group { ipv6-group-address | all } [ vlan vlan-id ]
Views
User view
Default command level
2: System level
Parameters
ipv6-group-address: Specifies an IPv6 multicast group. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where x and y represent any hexadecimal numbers from 0 to F.
all: Specifies all IPv6 multicast groups.
vlan vlan-id: Specifies a VLAN by its ID, in the range of 1 to 4094.
Usage guidelines
This command cannot remove the static group entries of MLD snooping groups.
Examples
# Remove the dynamic group entries of all MLD snooping groups.
<Sysname> reset mld-snooping group all
reset mld-snooping statistics
Use reset mld-snooping statistics to clear statistics for the MLD messages learned through MLD snooping.
Syntax
reset mld-snooping statistics
Views
User view
Default command level
2: System level
Examples
# Clear the statistics for all MLD messages learned through MLD snooping.
<Sysname> reset mld-snooping statistics
router-aging-time (MLD-snooping view)
Use router-aging-time to set the aging timer for the dynamic router ports globally.
Use undo router-aging-time to restore the default.
Syntax
router-aging-time interval
undo router-aging-time
Default
The dynamic router port aging timer is 260 seconds.
Views
MLD-snooping view
Default command level
2: System level
Parameters
interval: Specifies an aging timer in seconds for the dynamic router ports, in the range of 1 to 1000.
Examples
# Set the aging timer for the dynamic router ports to 100 seconds globally.
<Sysname> system-view
[Sysname] mld-snooping
[Sysname-mld-snooping] router-aging-time 100
mld-snooping router-aging-time
