group ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. If you do not specify an IPv6 multicast group, this command displays information about all Layer 2 IPv6 multicast groups.

source ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays information about Layer 2 IPv6 multicast groups for all IPv6 multicast sources.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays information about Layer 2 IPv6 multicast groups for all VLANs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, this command displays information about the Layer 2 IPv6 multicast groups on the master device.

Examples

# Display information about the Layer 2 IPv6 multicast groups for VLAN 2.

<Sysname> display ipv6 l2-multicast ip vlan 2

Total 1 entries.

VLAN 2: Total 1 IP entries.

(::, FF1E::101)

Attribute: static, success

Host slots (0 in total):

Host ports (1 in total):

XGE1/0/1 (S, SUC)

Table 1 Command output

Field	Description
Total 1 entries	Total number of Layer 2 IPv6 multicast groups.
VLAN 2: Total 1 IP entries	Total number of Layer 2 IPv6 multicast groups in VLAN 2.
(::, FF1E::101)	(S, G) entry, where a double colon (::) in the S position means any IPv6 multicast sources.
Attribute	Entry attribute: · dynamic—The entry is created by a dynamic protocol. · static—The entry is created by a static protocol. · pim—The entry is created by IPv6 PIM. · kernel—The entry is obtained from the kernel. · success—Processing succeeds. · fail—Processing fails.
Host ports (1 in total)	Member ports, and the total number of the member ports.
(S, SUC)	Port attribute: · D—Dynamic port. · S—Static port. · P—IPv6 PIM port. · K—Port obtained from the kernel. · R—Port learned from (, ) entries. · W—Port learned from (*, G) entries. · SUC—Processing succeeds. · F—Processing fails. · BC—Broadcast port. The TRILL port floods the IPv6 multicast data after the topology changes.

display ipv6 l2-multicast ip forwarding

Use display ipv6 l2-multicast ip forwarding to display Layer 2 IPv6 multicast group entries.

Syntax

display ipv6 l2-multicast ip forwarding [ group ipv6-group-address | source ipv6-source-address ] * [ vlan vlan-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. If you do not specify an IPv6 multicast group, this command displays Layer 2 IPv6 multicast group entries for all IPv6 multicast groups.

source ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays Layer 2 IPv6 multicast group entries for all IPv6 multicast sources.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays Layer 2 IPv6 multicast group entries for all VLANs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, this command displays Layer 2 IPv6 multicast group entries on the master device.

Examples

# Display Layer 2 IPv6 multicast group entries for VLAN 2.

<Sysname> display ipv6 l2-multicast ip forwarding vlan 2

Total 1 entries.

VLAN 2: Total 1 IP entries.

(::, FF1E::101)

Host slots (0 in total):

Host ports (3 in total):

XGE1/0/1

XGE1/0/2

XGE1/0/3

Table 2 Command output

Field	Description
Total 1 entries	Total number of Layer 2 IPv6 multicast group entries.
VLAN 2: Total 1 IP entries	Total number of Layer 2 IPv6 multicast group entries in VLAN 2.
(::, FF1E::101)	(S, G) entry, where a double colon (::) in the S position means any IPv6 multicast sources.
Host slots (0 in total)	Member IDs of the member devices that have member ports and the total number of the member devices (excluding the specified member device).
Host ports (3 in total)	Member ports, and the total number of the member ports.

display ipv6 l2-multicast mac

Use display ipv6 l2-multicast mac to display information about Layer 2 IPv6 MAC multicast groups.

Syntax

display ipv6 l2-multicast mac [ mac-address ] [ vlan vlan-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

mac-address: Specifies an IPv6 MAC multicast group by its IPv6 MAC address. If you do not specify an IPv6 MAC multicast group, this command displays information about all Layer 2 IPv6 MAC multicast groups.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays information about Layer 2 IPv6 MAC multicast groups for all VLANs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays information about the Layer 2 IPv6 MAC multicast groups on the master device.

Examples

# Display information about the Layer 2 IPv6 MAC multicast groups for VLAN 2.

<Sysname> display ipv6 l2-multicast mac vlan 2

Total 1 MAC entries.

VLAN 2: Total 1 MAC entries.

MAC group address: 3333-0000-0101

Attribute: success

Host slots (0 in total):

Host ports (1 in total):

XGE1/0/1

Table 3 Command output

Field	Description
Total 1 MAC entries	Total number of Layer 2 IPv6 MAC multicast groups.
VLAN 2: Total 1 MAC entries	Total number of Layer 2 IPv6 MAC multicast groups in VLAN 2.
MAC group address	IPv6 address of the Layer 2 Ipv6 MAC multicast group.
Attribute	Entry attribute: · success—Processing succeeds. · fail—Processing fails.
Host slots (0 in total)	Member IDs of the member devices that have member ports and the total number of the member devices (excluding the specified member device).
Host ports (1 in total)	Member ports, and the total number of the member ports.

display ipv6 l2-multicast mac forwarding

Use display ipv6 l2-multicast mac forwarding to display IPv6 MAC multicast group entries.

Syntax

display ipv6 l2-multicast mac forwarding [ mac-address ] [ vlan vlan-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

mac-address: Specifies an IPv6 MAC multicast group by its IPv6 MAC address. If you do not specify an IPv6 MAC multicast group, this command displays IPv6 MAC multicast group entries for all IPv6 MAC multicast groups.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays IPv6 MAC multicast group entries for all VLANs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, this command displays IPv6 MAC multicast group entries on the master device.

Examples

# Display IPv6 MAC multicast group entries for VLAN 2.

<Sysname> display ipv6 l2-multicast mac forwarding vlan 2

Total 1 MAC entries.

VLAN 2: Total 1 MAC entries.

MAC group address: 3333-0000-0101

Host slots (0 in total):

Host ports (3 in total):

XGE1/0/1

XGE1/0/2

XGE1/0/3

Table 4 Command output

Field	Description
Total 1 MAC entries	Total number of IPv6 MAC multicast group entries.
VLAN 2: Total 1 MAC entries	Total number of IPv6 MAC multicast group entries in VLAN 2.
MAC group address	Address of the IPv6 MAC multicast group.
Host slots (0 in total)	Member IDs of the member devices that have member ports and the total number of the member devices (excluding the specified member device).
Host ports (3 in total)	Member ports, and the total number of the member ports.

display mld-snooping

Use display mld-snooping to display MLD snooping status.

Syntax

display mld-snooping [ global | vlan vlan-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

global: Displays the global MLD snooping status.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

Usage guidelines

If you do not specify any parameters, this command displays the global MLD snooping status and the MLD snooping status in all VLANs.

Examples

# Display the global MLD snooping status and the MLD snooping status for all VLANs.

<Sysname> display mld-snooping

MLD snooping information: Global

MLD snooping: Enabled

Drop-unknown: Disabled

Host-aging-time: 260s

Router-aging-time: 260s

Max-response-time: 10s

Last-listener-query-interval: 1s

Report-aggregation: Enabled

Dot1p-priority: --

MLD snooping information: VLAN 1

MLD snooping: Enabled

Drop-unknown: Disabled

Version: 1

Host-aging-time: 260s

Router-aging-time: 260s

Max-response-time: 10s

Last-listener-query-interval: 1s

Querier: Disabled

Query-interval: 125s

General-query source IP: FE80::2FF:FFFF:FE00:1

Special-query source IP: FE80::2FF:FFFF:FE00:1

Report source IP: FE80::2FF:FFFF:FE00:2

Done source IP: FE80::2FF:FFFF:FE00:3

Dot1p-priority: 2

MLD snooping information: VLAN 10

MLD snooping: Enabled

Drop-unknown: Enabled

Version: 2

Host-aging-time: 260s

Router-aging-time: 260s

Max-response-time: 10s

Last-listener-query-interval: 1s

Query-interval: 125s

General-query source IP: FE80::2FF:FFFF:FE00:1

Special-query source IP: FE80::2FF:FFFF:FE00:1

Report source IP: FE80::2FF:FFFF:FE00:2

Done source IP: FE80::2FF:FFFF:FE00:3

Dot1p-priority: --

Table 5 Command output

Field	Description
MLD snooping	MLD snooping status: · Enabled. · Disabled.
Drop-unknown	Status of dropping unknown IPv6 multicast data: · Enabled. · Disabled.
Version	MLD snooping version.
Host-aging-time	Aging timer for the dynamic member port.
Router-aging-time	Aging timer for the dynamic router port.
Max-response-time	Maximum time for responding to MLD general queries.
Last-listener-query-interval	Interval for sending MLD multicast-address-specific queries.
Report-aggregation	Status of MLD report suppression: · Enabled. · Disabled.
Dot1p-priority	802.1p priority for MLD messages, where two hyphens (--) mean that it is not configured.
Querier	Whether the MLD snooping querier is enabled.
Query-interval	Interval for sending MLD general queries.
General-query source IP	Source IPv6 address of MLD general queries.
Special-query source IP	Source IPv6 address of MLD multicast-address-specific queries.
Report source IP	Source IPv6 address of MLD reports.
Done source IP	Source IPv6 address of MLD done messages.

display mld-snooping group

Use display mld-snooping group to display dynamic MLD snooping forwarding entries.

Syntax

display mld-snooping group [ ipv6-group-address | ipv6-source-address ] * [ vlan vlan-id ] [ verbose ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays dynamic MLD snooping forwarding entries for all IPv6 multicast groups.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays dynamic MLD snooping forwarding entries for all IPv6 multicast sources.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays dynamic MLD snooping forwarding entries for all VLANs.

verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays dynamic MLD snooping forwarding entries on the master device.

Examples

# Display detailed information about the dynamic MLD snooping forwarding entries for VLAN 2.

<Sysname> display mld-snooping group vlan 2 verbose

Total 1 entries.

VLAN 2: Total 1 entries.

(::,FF1E::101)

Attribute: local port

FSM information: dummy

Host slots (0 in total):

Host ports (1 in total):

XGE1/0/2 (00:03:23)

Table 6 Command output

Field	Description
Total 1 entries	Total number of dynamic MLD snooping forwarding entries.
VLAN 2: Total 1 entries	Total number of dynamic MLD snooping forwarding entries in VLAN.
(::, FF1E::101)	(S, G) entry, where a double colon (::) in the S position means any IPv6 multicast sources.
Attribute	Entry attribute: · global port—The entry has a global port. · local port—The entry has a port that resides on the specified device. · slot—The entry has a port that resides on a device other than the specified device.
FSM information	Finite state machine information of the entry: · delete—The entry attributes have been deleted. · dummy—The entry is a new temporary entry. · no info—No entry exists.
Host slots (0 in total)	Member IDs of the member devices that have member ports and the total number of the member devices (excluding the specified member device).
Host ports (1 in total)	Member ports, and the total number of the member ports.
(00:03:23)	Remaining aging time for the dynamic member port. · For a global port (including Layer 2 aggregate interfaces), this field is always displayed. · For a non-global port, this field is displayed if the port is on the master device. Otherwise, you must specify the slot slot-number option to display this field.

Related commands

reset mld-snooping group

display mld-snooping router-port

Use display mld-snooping router-port to display dynamic router port information.

Syntax

display mld-snooping router-port [ vlan vlan-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays dynamic router port information on the master device.

Examples

# Display dynamic router port information for VLAN 2.

<Sysname> display mld-snooping router-port vlan 2

VLAN 2:

Router slots (0 in total):

Router ports (2 in total):

XGE1/0/1 (00:01:30)

XGE1/0/2 (00:00:23)

Table 7 Command output

Field	Description
Router slots (0 in total)	Member IDs of the member devices that have router ports and the total number of the member devices (excluding the specified member device).
Router ports (2 in total)	Dynamic router ports, and the total number of the dynamic router ports.
(00:01:30)	Remaining aging time for the dynamic router port. · For a global port, this field is always displayed. · For a non-global port, this field is displayed if the port is on the master device. Otherwise, you must specify the slot slot-number option to display this field.

Related commands

reset mld-snooping router-port

display mld-snooping static-group

Use display mld-snooping static-group to display static MLD snooping forwarding entries.

Syntax

display mld-snooping static-group [ ipv6-group-address | ipv6-source-address ] * [ vlan vlan-id ] [ verbose ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays static MLD snooping forwarding entries for all IPv6 multicast groups.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays static MLD snooping forwarding entries for all IPv6 multicast sources.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command displays static MLD snooping forwarding entries for all VLANs.

verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays static MLD snooping forwarding entries on the master device.

Examples

# Display detailed information about the static MLD snooping forwarding entries for VLAN 2.

<Sysname> display mld-snooping static-group vlan 2 verbose

Total 1 entries.

VLAN 2: Total 1 entries.

(::,FF1E::101)

Attribute: local port

FSM information: dummy

Host slots (0 in total):

Host ports (1 in total):

XGE1/0/2

Table 8 Command output

Field	Description
Total 1 entries	Total number of static MLD snooping forwarding entries.
VLAN 2: Total 1 entries	Total number of static MLD snooping forwarding entries in VLAN 2.
(::, FF1E::101)	(S, G) entry, where a double colon (::) in the S position means any IPv6 multicast sources.
Attribute	Entry attribute: · global port—The entry has a global port. · local port—The entry has a port that resides on the specified device. · slot—The entry has a port that resides on a device other than the specified device.
FSM information	Finite state machine information of the entry: · delete—The entry attributes have been deleted. · dummy—The entry is a new temporary entry. · no info—No entry exists.
Host slots (0 in total)	Member IDs of the member devices that have member ports and the total number of the member devices (excluding the specified member device).
Host ports (1 in total)	Member ports, and the total number of the member ports.

display mld-snooping static-router-port

Use display mld-snooping static-router-port to display static router port information.

Syntax

display mld-snooping static-router-port [ vlan vlan-id ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays static router port information on the master device.

Examples

# Display static router port information for VLAN 2.

<Sysname> display mld-snooping static-router-port vlan 2

VLAN 2:

Router slots (0 in total):

Router ports (2 in total):

XGE1/0/1

XGE1/0/2

Table 9 Command output

Field	Description
Router slots (0 in total)	Member IDs of the member devices that have router ports and the total number of the member devices (excluding the specified member device).
Router ports (2 in total)	Static router ports, and the total number of the static router ports.

display mld-snooping statistics

Use display mld-snooping statistics to display statistics for the MLD messages and IPv6 PIM hello messages learned through MLD snooping.

Syntax

display mld-snooping statistics

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display statistics for the MLD messages and IPv6 PIM hello messages learned through MLD snooping.

<Sysname> display mld-snooping statistics

Received MLD general queries: 0

Received MLDv1 specific queries: 0

Received MLDv1 reports: 0

Received MLD dones: 0

Sent MLDv1 specific queries: 0

Received MLDv2 reports: 0

Received MLDv2 reports with right and wrong records: 0

Received MLDv2 specific queries: 0

Received MLDv2 specific sg queries: 0

Sent MLDv2 specific queries: 0

Sent MLDv2 specific sg queries: 0

Received IPv6 PIM hello: 0

Received error MLD messages: 0

Table 10 Command output

Field	Description
general queries	Number of MLD general queries.
specific queries	Number of MLD multicast-address-specific queries.
reports	Number of MLD reports.
dones	Number of MLD done messages.
reports with right and wrong records	Number of MLD reports with correct and incorrect records.
specific sg queries	Number of MLD multicast-address-and-source-specific queries.
IPv6 PIM hello	Number of IPv6 PIM hello messages.
error MLD messages	Number of MLD messages with errors.

Related commands

reset mld-snooping statistics

dot1p-priority (MLD-snooping view)

Use dot1p-priority to set the 802.1p priority for MLD messages globally.

Use undo dot1p-priority to restore the default.

Syntax

dot1p-priority priority-number

undo dot1p-priority

Default

The 802.1p priority for MLD messages is not configured.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

priority-number: Specifies an 802.1p priority for MLD messages, in the range of 0 to 7. A higher value means a higher priority.

Usage guidelines

You can set the 802.1p priority globally for all VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# Set the 802.1p priority for MLD messages to 3 globally.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] dot1p-priority 3

Related commands

mld-snooping dot1p-priority

enable (MLD-snooping view)

Use enable to enable MLD snooping for VLANs.

Use undo enable to disable MLD snooping for VLANs.

Syntax

enable vlan vlan-list

undo enable vlan vlan-list

Default

MLD snooping is disabled in a VLAN.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The value range for the VLAN ID is 1 to 4094.

Usage guidelines

You must globally enable MLD snooping before you execute this command.

You can enable MLD snooping for the specified VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the configuration in VLAN view has the same priority as the configuration in MLD-snooping view, and the most recent configuration takes effect.

Examples

# Enable MLD snooping globally, and enable MLD snooping for VLAN 2 through VLAN 10.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] enable vlan 2 to 10

Related commands

· mld-snooping

· mld-snooping enable

entry-limit (MLD-snooping view)

Use entry-limit to set the global maximum number of MLD snooping forwarding entries, including dynamic entries and static entries.

Use undo entry-limit to restore the default.

Syntax

entry-limit limit

undo entry-limit

Default

The default setting is 4294967295.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

limit: Specifies the global maximum number of MLD snooping forwarding entries, in the range of 0 to 4294967295.

Examples

# Set the global maximum number of MLD snooping forwarding entries to 512.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] entry-limit 512

fast-leave (MLD-snooping view)

Use fast-leave to enable fast-leave processing globally.

Use undo fast-leave to disable fast-leave processing globally.

Syntax

fast-leave [ vlan vlan-list ]

undo fast-leave [ vlan vlan-list ]

Default

Fast-leave processing is disabled.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

Usage guidelines

This feature enables the switch to immediately remove a port from the forwarding entry for an IPv6 multicast group when the port receives a done message.

You can enable fast-leave processing globally for all ports in MLD-snooping view or for a port in interface view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Globally enable fast-leave processing for VLAN 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] fast-leave vlan 2

Related commands

mld-snooping fast-leave

group-policy (MLD-snooping view)

Use group-policy to configure a global IPv6 multicast group policy to control the IPv6 multicast groups that receiver hosts can join.

Use undo group-policy to remove the configured global IPv6 multicast group policy.

Syntax

group-policy acl6-number [ vlan vlan-list ]

undo group-policy [ vlan vlan-list ]

Default

IPv6 multicast group policies are not configured, and receiver hosts can join any IPv6 multicast groups.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

acl6-number: Specifies an IPv6 basic or advanced ACL by its number in the range of 2000 to 3999. Receiver hosts can join only IPv6 multicast groups that the ACL permits. If the ACL does not exist or the ACL does not contain valid rules, receiver hosts cannot join IPv6 multicast groups.

Usage guidelines

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

· For the rule to take effect, do not specify the vpn-instance vpn-instance option.

· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.

· In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡ MLDv1 reports.

¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry IPv6 multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

You can configure different ACL rules on a port in different VLANs. However, for a given VLAN, a newly configured ACL rule overrides the existing one.

This configuration takes effect only on the IPv6 multicast groups that the port joins dynamically.

You can configure an IPv6 multicast group policy globally for all ports in MLD-snooping view or for a port in interface view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Globally configure an IPv6 multicast group policy for VLAN 2 so that the hosts in this VLAN can join only IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 number 2000

[Sysname-acl6-basic-2000] rule permit source ff03::101 128

[Sysname-acl6-basic-2000] quit

[Sysname] mld-snooping

[Sysname-mld-snooping] group-policy 2000 vlan 2

Related commands

mld-snooping group-policy

host-aging-time (MLD-snooping view)

Use host-aging-time to set the aging timer for dynamic member ports globally.

Use undo host-aging-time to restore the default.

Syntax

host-aging-time interval

undo host-aging-time

Default

The default setting is 260 seconds.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

interval: Specifies an aging timer for dynamic member ports, in the range of 1 to 8097894 seconds.

Usage guidelines

To avoid mistakenly deleting IPv6 multicast group members, set the aging timer for dynamic member ports to be greater than the value calculated by using the following formula:

[ MLD general query interval ] + [ maximum response time for MLD general queries ]

As a best practice, set the aging timer of dynamic member ports to the value calculated by using the following formula:

[ MLD general query interval ] × 2 + [ maximum response time for MLD general queries ]

You can set the timer globally for all VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# Set the aging timer for dynamic member ports to 300 seconds globally.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] host-aging-time 300

Related commands

mld-snooping host-aging-time

last-listener-query-interval (MLD-snooping view)

Use last-listener-query-interval to set the global MLD last listener query interval.

Use undo last-listener-query-interval to restore the default.

Syntax

last-listener-query-interval interval

undo last-listener-query-interval

Default

The global MLD last listener query interval is 1 second.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

The MLD last listener query interval determines the interval for sending MLD multicast-address-specific queries and the maximum response time for MLD multicast-address-specific queries.

You can set the interval for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD last listener query interval to 3 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] last-listener-query-interval 3

Related commands

mld-snooping last-listener-query-interval

max-response-time (MLD-snooping view)

Use max-response-time to set the global maximum response time for MLD general queries.

Use undo max-response-time to restore the default.

Syntax

max-response-time interval

undo max-response-time

Default

The global maximum response time for MLD general queries is 10 seconds.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

interval: Specifies the maximum response time for MLD general queries, in the range of 1 to 3174 seconds.

Usage guidelines

To avoid mistakenly deleting IPv6 multicast group members, set the MLD general query interval to be greater than the maximum response time for MLD general queries.

You can set the time globally for all VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# Set the global maximum response time for MLD general queries to 5 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] max-response-time 5

Related commands

mld-snooping max-response-time

mld-snooping

Use mld-snooping to enable MLD snooping globally and enter MLD-snooping view.

Use undo mld-snooping to disable MLD snooping globally.

Syntax

mld-snooping

undo mld-snooping

Default

MLD snooping is globally disabled.

Views

System view

Predefined user roles

network-admin

Examples

# Enable MLD snooping globally and enter MLD -snooping view.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping]

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping done source-ip

Use mld-snooping done source-ip to configure a source IPv6 address for MLD done messages.

Use undo mld-snooping done source-ip to restore the default.

Syntax

mld-snooping done source-ip ipv6-address

undo mld-snooping done source-ip

Default

The source IPv6 address of the MLD done messages is the IPv6 link-local address of the current VLAN interface. If the current VLAN interface does not have an IPv6 link-local address, the source IPv6 address is FE80::02FF:FFFF:FE00:0001.

Views

VLAN view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address for MLD done messages.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command.

Examples

# In VLAN 2, enable MLD snooping, and specify FE80:0:0:1::1 as the source IPv6 address of MLD done messages.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping done source-ip fe80:0:0:1::1

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping dot1p-priority

Use mld-snooping dot1p-priority to set the 802.1p priority for MLD messages in a VLAN.

Use undo mld-snooping dot1p-priority to restore the default.

Syntax

mld-snooping dot1p-priority priority-number

undo mld-snooping dot1p-priority

Default

The 802.1p priority for MLD messages is not configured.

Views

VLAN view

Predefined user roles

network-admin

Parameters

priority-number: Specifies an 802.1p priority for MLD messages, in the range of 0 to 7. A higher value means a higher priority.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command.

You can set the 802.1p priority for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# In VLAN 2, enable MLD snooping, and set the 802.1p priority for MLD messages to 3.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping dot1p-priority 3

Related commands

· dot1p-priority (MLD-snooping view)

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping drop-unknown

Use mld-snooping drop-unknown to enable dropping unknown IPv6 multicast data for a VLAN.

Use undo mld-snooping drop-unknown to disable dropping unknown IPv6 multicast data for a VLAN.

Syntax

mld-snooping drop-unknown

undo mld-snooping drop-unknown

Default

Dropping unknown IPv6 multicast data in a VLAN is disabled, and unknown IPv6 multicast data is flooded in the VLAN.

Views

VLAN view

Predefined user roles

network-admin

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command.

Examples

# In VLAN 2, enable MLD snooping, and enable dropping unknown IPv6 multicast data.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping drop-unknown

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping enable

Use mld-snooping enable to enable MLD snooping for a VLAN.

Use undo mld-snooping enable to disable MLD snooping for a VLAN.

Syntax

mld-snooping enable

undo mld-snooping enable

Default

MLD snooping is disabled in a VLAN.

Views

VLAN view

Predefined user roles

network-admin

Usage guidelines

You must enable MLD snooping globally before you enable MLD snooping for a VLAN.

You can enable MLD snooping for a VLAN in VLAN view or for the specified VLANs in MLD-snooping view. For a VLAN, the configuration in VLAN view has the same priority as the configuration in MLD-snooping view, and the most recent configuration takes effect.

Examples

# Enable MLD snooping globally and for VLAN 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

Related commands

· enable (MLD-snooping view)

· mld-snooping

mld-snooping fast-leave

Use mld-snooping fast-leave to enable fast-leave processing on a port.

Use undo mld-snooping fast-leave to disable fast-leave processing on a port.

Syntax

mld-snooping fast-leave [ vlan vlan-list ]

undo mld-snooping fast-leave [ vlan vlan-list ]

Default

Fast-leave processing is disabled on a port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

This feature enables the switch to immediately remove a port from the forwarding entry for a multicast group specified when the port receives a done message.

You can enable fast-leave processing for a port in interface view or globally for all ports in MLD-snooping view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Enable fast-leave processing for VLAN 2 on Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping fast-leave vlan 2

Related commands

fast-leave (MLD-snooping view)

mld-snooping general-query source-ip

Use mld-snooping general-query source-ip to configure a source IPv6 address for MLD general queries.

Use undo mld-snooping general-query source-ip to restore the default.

Syntax

mld-snooping general-query source-ip ipv6-address

undo mld-snooping general-query source-ip

Default

The source IPv6 address for MLD general queries is the IPv6 link-local address of the current VLAN interface. If the current VLAN interface does not have an IPv6 link-local address, the source IPv6 address is FE80::02FF:FFFF:FE00:0001.

Views

VLAN view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address for MLD general queries.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command for the VLAN.

Examples

# In VLAN 2, enable MLD snooping, and specify FE80:0:0:1::1 as the source IPv6 address of MLD general queries.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping general-query source-ip fe80:0:0:1::1

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping group-limit

Use mld-snooping group-limit to set the maximum number of IPv6 multicast groups that a port can join.

Use undo mld-snooping group-limit to restore the default.

Syntax

mld-snooping group-limit limit [ vlan vlan-list ]

undo mld-snooping group-limit [ vlan vlan-list ]

Default

The default setting is 4294967295.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

limit: Specifies the maximum number of multicast groups that a port can join, in the range of 0 to 4294967295.

Usage guidelines

This command takes effect only on the IPv6 multicast groups that a port joins dynamically.

Examples

# Set the maximum number of IPv6 multicast groups that Ten-GigabitEthernet 1/0/1 in VLAN 2 can join to 10.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping group-limit 10 vlan 2

mld-snooping group-policy

Use mld-snooping group-policy to configure an IPv6 multicast group policy on a port to control the IPv6 multicast groups that the receiver hosts attached to the port can join.

Use undo mld-snooping group-policy to remove the IPv6 multicast group policy on a port.

Syntax

mld-snooping group-policy acl6-number [ vlan vlan-list ]

undo mld-snooping group-policy [ vlan vlan-list ]

Default

IPv6 multicast group policies are not configured on a port, and the hosts attached to the port can join any IPv6 multicast groups.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

· For the rule to take effect, do not specify the vpn-instance vpn-instance option.

· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡ MLDv1 reports.

¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry IPv6 multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

You can configure different ACL rules on a port in different VLANs. However, for a given VLAN, a newly configured ACL rule overrides the existing one.

This command takes effect only on the IPv6 multicast groups that a port joins dynamically.

You can configure an IPv6 multicast group policy for a port in interface view or globally for all ports in MLD-snooping view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Configure an IPv6 multicast group policy for VLAN 2 on Ten-GigabitEthernet 1/0/1 so that hosts attached to the port can join only IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 number 2000

[Sysname-acl6-basic-2000] rule permit source ff03::101 128

[Sysname-acl6-basic-2000] quit

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping group-policy 2000 vlan 2

Related commands

group-policy (MLD-snooping view)

mld-snooping host-aging-time

Use mld-snooping host-aging-time to set the aging timer for the dynamic member ports in a VLAN.

Use undo mld-snooping host-aging-time to restore the default.

Syntax

mld-snooping host-aging-time interval

undo mld-snooping host-aging-time

Default

The default setting is 260 seconds.

Views

VLAN view

Predefined user roles

network-admin

Parameters

interval: Specifies an aging timer for the dynamic member ports in a VLAN, in the range of 1 to 8097894 seconds.

Usage guidelines

You must enable MLD snooping for a VLAN before you configure this command for the VLAN.

To avoid mistakenly deleting IPv6 multicast group members, set the aging timer for dynamic member ports to be greater than the value calculated by the following formula:

[ MLD general query interval ] + [ maximum response time for MLD general queries ]

As a best practice, set the aging timer of dynamic member ports to the value calculated by using the following formula:

[ MLD general query interval ] × 2 + [ maximum response time for MLD general queries ]

You can set the timer for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# In VLAN 2, enable MLD snooping, and set the aging timer for the dynamic member ports to 300 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping host-aging-time 300

Related commands

· enable (MLD-snooping view)

· host-aging-time (MLD-snooping view)

· mld-snooping enable

mld-snooping host-join

Use mld-snooping host-join to configure a port as a simulated member host for an IPv6 multicast group.

Use undo mld-snooping host-join to restore the default.

Syntax

mld-snooping host-join ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id

undo mld-snooping host-join { ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id | all }

Default

This function is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

ipv6-group-address: Specifies an IPv6 multicast group address. The value range for this argument is FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16 and FF0y::), where "x" and "y" represent any hexadecimal numbers from 0 to F.

source-ip ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you specify an IPv6 multicast source, this command configures the port as a simulated member host for an IPv6 multicast source and group. If you do not specify an IPv6 multicast source, this command configures the port as a simulated member host for an IPv6 multicast group. This option takes effect on MLDv2 snooping devices.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

all: Specifies all IPv6 multicast groups.

Usage guidelines

The version of MLD running on a simulated member host is the same as the version of MLD snooping running on the port. The port ages out in the same way as a dynamic member port.

Examples

# Configure Ten-GigabitEthernet 1/0/1 as a simulated member host for the IPv6 multicast source and group (2002::22, FF3E::101) in VLAN 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping version 2

[Sysname-vlan2] quit

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping host-join ff3e::101 source-ip 2002::22 vlan 2

mld-snooping last-listener-query-interval

Use mld-snooping last-listener-query-interval to set the MLD last listener query interval for a VLAN.

Use undo mld-snooping last-listener-query-interval to restore the default.

Syntax

mld-snooping last-listener-query-interval interval

undo mld-snooping last-listener-query-interval

Default

The MLD last listener query interval in a VLAN is 1 second.

Views

VLAN view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

The MLD last listener query interval determines the interval for sending MLD multicast-address-specific queries and the maximum response time for MLD multicast-address-specific queries in a VLAN.

You must enable MLD snooping for a VLAN before you configure this command for the VLAN.

You can set the interval for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# In VLAN 2, enable MLD snooping, and set the MLD last listener query interval to 3 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping last-listener-query-interval 3

Related commands

· enable (MLD-snooping view)

· last-listener-query-interval (MLD-snooping view)

· mld-snooping enable

mld-snooping max-response-time

Use mld-snooping max-response-time to set the maximum response time for MLD general queries in a VLAN.

Use undo mld-snooping max-response-time to restore the default.

Syntax

mld-snooping max-response-time interval

undo mld-snooping max-response-time

Default

The maximum response time for MLD general queries in a VLAN is 10 seconds.

Views

VLAN view

Predefined user roles

network-admin

Parameters

interval: Specifies the maximum response time for MLD general queries, in the range of 1 to 3174 seconds.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command for the VLAN.

To avoid mistakenly deleting IPv6 multicast group members, set the maximum response time for MLD general queries to be less than the MLD general query interval.

You can set the time for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# In VLAN 2, enable MLD snooping, and set the maximum response time for MLD general queries to 5 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping max-response-time 5

Related commands

· enable (MLD-snooping view)

· max-response-time (MLD-snooping view)

· mld-snooping enable

mld-snooping overflow-replace

Use mld-snooping overflow-replace to enable the IPv6 multicast group replacement feature on a port.

Use undo mld-snooping overflow-replace to disable the multicast group replacement feature on a port.

Syntax

mld-snooping overflow-replace [ vlan vlan-list ]

undo mld-snooping overflow-replace [ vlan vlan-list ]

Default

The IPv6 multicast group replacement feature is disabled on a port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

This command takes effect only on the IPv6 multicast groups that a port dynamically joins.

You can enable the IPv6 multicast group replacement feature for a port in interface view or globally for all ports in MLD-snooping view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Enable the IPv6 multicast group replacement feature for VLAN 2 on Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping overflow-replace vlan 2

Related commands

overflow-replace (MLD-snooping view)

mld-snooping querier

Use mld-snooping querier to enable the MLD snooping querier for a VLAN.

Use undo mld-snooping querier to disable the MLD snooping querier.

Syntax

mld-snooping querier

undo mld-snooping querier

Default

The MLD snooping querier for a VLAN is disabled.

Views

VLAN view

Predefined user roles

network-admin

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command for the VLAN.

This command takes effect on a sub-VLAN only after you remove the sub-VLAN from the IPv6 multicast VLAN.

Examples

# In VLAN 2, enable MLD snooping, and enable the MLD snooping querier.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping querier

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

· subvlan (IPv6 multicast VLAN view)

mld-snooping report source-ip

Use mld-snooping report source-ip to configure a source IPv6 address for MLD reports.

Use undo mld-snooping report source-ip to restore the default.

Syntax

mld-snooping report source-ip ipv6-address

undo mld-snooping report source-ip

Default

The source IPv6 address for MLD reports is the IPv6 link-local address of current VLAN interface. If the current VLAN interface does not have an IPv6 link-local address, the source IPv6 address is FE80::02FF:FFFF:FE00:0001.

Views

VLAN view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address for MLD reports.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command.

Examples

# In VLAN 2, enable MLD snooping, and specify FE80:0:0:1::1 as the source IPv6 address of the MLD reports.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping report source-ip fe80:0:0:1::1

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping query-interval

Use mld-snooping query-interval to set the MLD general query interval in a VLAN.

Use undo mld-snooping query-interval to restore the default.

Syntax

mld-snooping query-interval interval

undo mld-snooping query-interval

Default

The MLD general query interval in a VLAN is 125 seconds.

Views

VLAN view

Predefined user roles

network-admin

Parameters

interval: Set an MLD general query interval, in the range of 2 to 31744 seconds.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command for the VLAN.

To avoid mistakenly deleting IPv6 multicast group members, set the MLD general query interval to be greater than the maximum response time for MLD general queries.

Examples

# In VLAN 2, enable MLD snooping, and set the MLD general query interval to 20 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping query-interval 20

Related commands

· enable (MLD-snooping view)

· max-response-time

· mld-snooping enable

· mld-snooping max-response-time

· mld-snooping querier

mld-snooping router-aging-time

Use mld-snooping router-aging-time to set the aging timer for the dynamic router ports in a VLAN.

Use undo mld-snooping router-aging-time to restore the default.

Syntax

mld-snooping router-aging-time interval

undo mld-snooping router-aging-time

Default

The default setting is 260 seconds.

Views

VLAN view

Predefined user roles

network-admin

Parameters

interval: Specifies an aging timer for the dynamic router ports in a VLAN, in the range of 1 to 8097894 seconds.

Usage guidelines

You must enable MLD snooping for a VLAN before you configure this command for the VLAN.

You can set the timer for a VLAN in VLAN view or globally for all VLANs in MLD-snooping view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# In VLAN 2, enable MLD snooping, and set the aging timer for the dynamic router ports to 100 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping router-aging-time 100

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

· router-aging-time (MLD-snooping view)

mld-snooping router-port-deny

Use mld-snooping router-port-deny to disable a port from becoming a dynamic router port.

Use undo mld-snooping router-port-deny to restore the default.

Syntax

mld-snooping router-port-deny [ vlan vlan-list ]

undo mld-snooping router-port-deny [ vlan vlan-list ]

Default

A port can become a dynamic router port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN by its ID or a range of VLANs in the form of start-vlan-id to end-vlan-id. The VLAN ID is in the range of 1 to 4094. If you specify VLANs, this command takes effect only when the port belongs to the specified VLANs. If you do not specify a VLAN, this command takes effect on all VLANs.

Examples

# Disable Ten-GigabitEthernet 1/0/1 from becoming a dynamic router port in VLAN 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping router-port-deny vlan 2

mld-snooping source-deny

Use mld-snooping source-deny to enable IPv6 multicast source port filtering on a port to discard all the received IPv6 multicast data packets.

Use undo mld-snooping source-deny to disable IPv6 multicast source port filtering on a port.

Syntax

mld-snooping source-deny

undo mld-snooping source-deny

Default

IPv6 multicast source port filtering is disabled, and the port can connect to both IPv6 multicast sources and IPv6 multicast receivers.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

Usage guidelines

You can enable this feature for a port in interface view or for the specified ports in MLD-snooping view. For a port, the configuration in interface view has the same priority as the configuration in MLD-snooping view, and the most recent configuration takes effect.

Examples

# Enable source port filtering for IPv6 multicast data on Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping source-deny

Related commands

source-deny (MLD-snooping view)

mld-snooping special-query source-ip

Use mld-snooping special-query source-ip to configure a source IPv6 address for MLD multicast-address-specific queries.

Use undo mld-snooping special-query source-ip to restore the default.

Syntax

mld-snooping special-query source-ip ipv6-address

undo mld-snooping special-query source-ip

Default

The source IPv6 address of MLD multicast-address-specific queries is one of the following:

· The source address of MLD general queries if the MLD snooping querier has received MLD general queries.

· The IPv6 link-local address of the current VLAN interface if the MLD snooping querier does not receive an MLD general query.

· FE80::02FF:FFFF:FE00:0001 if the MLD snooping querier does not receive an MLD general query and the current VLAN interface does not have an IPv6 link-local address.

Views

VLAN view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address for MLD multicast-address-specific queries.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command for the VLAN.

Examples

# In VLAN 2, enable MLD snooping, and specify FE80:0:0:1::1 as the source IPv6 address of MLD multicast-address-specific queries.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping special-query source-ip fe80:0:0:1::1

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

mld-snooping static-group

Use mld-snooping static-group to configure a port as a static member port of an IPv6 multicast group.

Use undo mld-snooping static-group to remove the static member port.

Syntax

mld-snooping static-group ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id

undo mld-snooping static-group { ipv6-group-address [ source-ip ipv6-source-address ] vlan vlan-id | all }

Default

A port is not a static member port of IPv6 multicast groups.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value can be 0::0 or in the range of FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where "x" and "y" represent any hexadecimal numbers from 0 to F.

source-ip ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you specify an IPv6 multicast source, this command configures the port as a static member port of an IPv6 multicast source and group. If you do not specify an IPv6 multicast source, this command configures the port as a static member port of an IPv6 multicast group. This option takes effect on MLDv2 snooping devices.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

all: Specifies all VLANs.

Examples

# Configure Ten-GigabitEthernet 1/0/1 as a static member port for the IPv6 multicast source and group (2002::22, FF3E::101) in VLAN 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping version 2

[Sysname-vlan2] quit

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping static-group ff3e::101 source-ip 2002::22 vlan 2

mld-snooping static-router-port

Use mld-snooping static-router-port to configure a port as a static router port.

Use undo mld-snooping static-router-port to remove a static router port.

Syntax

mld-snooping static-router-port vlan vlan-id

undo mld-snooping static-router-port { all | vlan vlan-id }

Default

A port is not a static router port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

all: Specifies all VLANs.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

Examples

# Configure Ten-GigabitEthernet 1/0/1 as a static router port in VLAN 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mld-snooping static-router-port vlan 2

mld-snooping version

Use mld-snooping version to specify an MLD snooping version in a VLAN.

Use undo mld-snooping version to restore the default.

Syntax

mld-snooping version version-number

undo mld-snooping version

Default

The MLD snooping version in a VLAN is 1.

Views

VLAN view

Predefined user roles

network-admin

Parameters

version-number: Specifies an MLD snooping version, 1 or 2.

Usage guidelines

You must enable MLD snooping for a VLAN before you execute this command.

You can specify the version for a VLAN in VLAN view or for the specified VLANs in MLD-snooping view. For a VLAN, the configuration in VLAN view has the same priority as the configuration in MLD-snooping view, and the most recent configuration takes effect.

Examples

# In VLAN 2, enable MLD snooping, and specify MLD snooping version 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] quit

[Sysname] vlan 2

[Sysname-vlan2] mld-snooping enable

[Sysname-vlan2] mld-snooping version 2

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

· version (MLD-snooping view)

overflow-replace (MLD-snooping view)

Use overflow-replace to enable the IPv6 multicast group replacement feature globally.

Use undo overflow-replace to disable the IPv6 multicast group replacement feature globally.

Syntax

overflow-replace [ vlan vlan-list ]

undo overflow-replace [ vlan vlan-list ]

Default

The IPv6 multicast group replacement feature is disabled globally.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

Usage guidelines

This command takes effect only on the IPv6 multicast groups that a port joins dynamically.

You can enable IPv6 multicast group replacement globally for all ports in MLD-snooping view or for a port in interface view. For a port, the port-specific configuration takes priority over the global configuration.

Examples

# Enable the IPv6 multicast group replacement feature globally for VLAN 2.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] overflow-replace vlan 2

Related commands

mld-snooping overflow-replace

report-aggregation (MLD-snooping view)

Use report-aggregation to enable MLD report suppression.

Use undo report-aggregation to disable MLD report suppression.

Syntax

report-aggregation

undo report-aggregation

Default

MLD report suppression is enabled.

Views

MLD-snooping view

Predefined user roles

network-admin

Examples

# Disable MLD report suppression.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] undo report-aggregation

reset mld-snooping group

Use reset mld-snooping group to remove the dynamic MLD snooping forwarding entries for IPv6 multicast groups.

Syntax

reset mld-snooping group { ipv6-group-address [ ipv6-source-address ] | all } [ vlan vlan-id ]

Views

User view

Predefined user roles

network-admin

Parameters

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command removes the dynamic MLD snooping forwarding entries for all IPv6 multicast sources.

all: Specifies all IPv6 multicast groups.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094. If you do not specify a VLAN, this command removes dynamic MLD snooping forwarding entries for all VLANs.

Examples

# Remove the dynamic MLD snooping forwarding entries for all IPv6 multicast groups.

<Sysname> reset mld-snooping group all

Related commands

display mld-snooping group

reset mld-snooping router-port

Use reset mld-snooping router-port to remove dynamic router ports.

Syntax

reset mld-snooping router-port { all | vlan vlan-id }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all dynamic router ports.

vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.

Examples

# Remove all dynamic router ports.

<Sysname> reset mld-snooping router-port all

Related commands

display mld-snooping router-port

reset mld-snooping statistics

Use reset mld-snooping statistics to clear statistics for the MLD messages and IPv6 PIM hello messages learned through MLD snooping.

Syntax

reset mld-snooping statistics

Views

User view

Predefined user roles

network-admin

Examples

# Clear statistics for all MLD messages and IPv6 PIM hello messages learned through MLD snooping.

<Sysname> reset mld-snooping statistics

Related commands

display mld-snooping statistics

router-aging-time (MLD-snooping view)

Use router-aging-time to set the global aging timer for dynamic router ports.

Use undo router-aging-time to restore the default.

Syntax

router-aging-time interval

undo router-aging-time

Default

The global aging timer for dynamic router ports is 260 seconds.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

interval: Specifies an aging timer for dynamic router ports, in the range of 1 to 8097894 seconds.

Usage guidelines

You can set the timer globally for all VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the VLAN-specific configuration takes priority over the global configuration.

Examples

# Set the global aging timer for dynamic router ports to 100 seconds.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] router-aging-time 100

Related commands

mld-snooping router-aging-time

source-deny (MLD-snooping view)

Use source-deny to enable IPv6 multicast source port filtering on ports to discard all the received IPv6 multicast data packets.

Use undo source-deny to disable IPv6 multicast source port filtering on ports.

Syntax

source-deny port interface-list

undo source-deny port interface-list

Default

IPv6 multicast source port filtering is disabled, and the ports can connect to both IPv6 multicast sources and IPv6 multicast receivers.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

port interface-list: Specifies a space-separated list of port items. Each item specifies a port by its port type and number or a range of ports in the form of start-interface-type interface-number to end-interface-type interface-number.

Usage guidelines

You can enable this feature for the specified ports in MLD-snooping view or for a port in interface view. For a port, the configuration in MLD-snooping view has the same priority as the configuration in interface view, and the most recent configuration takes effect.

Examples

# Enable source port filtering for IPv6 multicast data on ports Ten-GigabitEthernet 1/0/1 through Ten-GigabitEthernet 1/0/4.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] source-deny port ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4

Related commands

mld-snooping source-deny

version (MLD-snooping view)

Use version to specify an MLD snooping version for VLANs.

Use undo version to restore the default.

Syntax

version version-number vlan vlan-list

undo version vlan vlan-list

Default

The MLD snooping version is 1.

Views

MLD-snooping view

Predefined user roles

network-admin

Parameters

version-number: Specifies an MLD snooping version, 1 or 2.

Usage guidelines

You must enable MLD snooping for the specified VLANs before you execute this command.

You can specify the version for the specified VLANs in MLD-snooping view or for a VLAN in VLAN view. For a VLAN, the configuration in MLD-snooping view has the same priority as the configuration in VLAN view, and the most recent configuration takes effect.

Examples

# Enable MLD snooping for VLAN 2 through VLAN 10, and specify MLD snooping version 2 for these VLANs.

<Sysname> system-view

[Sysname] mld-snooping

[Sysname-mld-snooping] enable vlan 2 to 10

[Sysname-mld-snooping] version 2 vlan 2 to 10

Related commands

· enable (MLD-snooping view)

· mld-snooping enable

· mld-snooping version

06-IP Multicast Command Reference

MLD snooping commands

display ipv6 l2-multicast ip

display mld-snooping static-group

dot1p-priority (MLD-snooping view)

mld-snooping

mld-snooping last-listener-query-interval

mld-snooping max-response-time

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us