- Table of Contents
-
- 08-IP Multicast Command Reference
- 00-Preface
- 01-IGMP snooping commands
- 02-PIM snooping commands
- 03-Multicast VLAN commands
- 04-Multicast routing and forwarding commands
- 05-IGMP commands
- 06-PIM commands
- 07-MSDP commands
- 08-Multicast VPN commands
- 09-MLD snooping commands
- 10-IPv6 PIM snooping commands
- 11-IPv6 multicast VLAN commands
- 12-IPv6 multicast routing and forwarding commands
- 13-MLD commands
- 14-IPv6 PIM commands
- Related Documents
-
Title | Size | Download |
---|---|---|
05-IGMP commands | 245.39 KB |
display igmp attack-suppression per-interface configuration
display igmp attack-suppression per-interface entry
display igmp attack-suppression source-mac configuration
display igmp attack-suppression source-mac entry
display igmp proxy routing-table
display igmp user-authorization
igmp attack-suppression per-interface aging-time
igmp attack-suppression per-interface check-interval
igmp attack-suppression per-interface enable
igmp attack-suppression per-interface threshold
igmp attack-suppression source-mac aging-time
igmp attack-suppression source-mac check-interval
igmp attack-suppression source-mac enable
igmp attack-suppression source-mac threshold
igmp last-member-query-interval
igmp other-querier-present-interval
igmp user-vlan-aggregation dot1q
last-member-query-count (IGMP view)
last-member-query-interval (IGMP view)
other-querier-present-interval (IGMP view)
reset igmp attack-suppression per-interface entry
reset igmp attack-suppression per-interface statistics
reset igmp attack-suppression source-mac entry
reset igmp attack-suppression source-mac statistics
startup-query-count (IGMP view)
startup-query-interval (IGMP view)
IGMP commands
display igmp attack-suppression per-interface configuration
Use display igmp attack-suppression per-interface configuration to display the configuration of interface-based IGMP suppression.
Syntax
display igmp attack-suppression per-interface configuration
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the configuration of interface-based IGMP suppression.
<Sysname> display igmp attack-suppression per-interface configuration
IGMP attack-suppression per-interface is enabled.
Check interval: 5s
Threshold: 20
Aging time: 300s
Table 1 Command output
Field |
Description |
Check interval |
Check interval of interface-based IGMP suppression. |
Threshold |
Threshold for triggering interface-based IGMP suppression. |
Aging time |
Aging time of interface-based IGMP suppression entries. |
Related commands
igmp attack-suppression per-interface aging-time
igmp attack-suppression per-interface check-interval
igmp attack-suppression per-interface enable
igmp attack-suppression per-interface threshold
display igmp attack-suppression per-interface entry
Use display igmp attack-suppression per-interface entry to display interface-based IGMP suppression entries.
Syntax
In standalone mode:
display igmp attack-suppression per-interface entry slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]
In IRF mode:
display igmp attack-suppression per-interface entry chassis chassis-number slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays interface-based IGMP suppression entries for all interfaces.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
attack: Displays interface-based IGMP suppression entries for IGMP attack packets. If you do not specify this keyword, the command displays all interface-based IGMP suppression entries that have been created.
verbose: Displays detailed information about interface-based IGMP suppression entries. If you do not specify this keyword, the command displays brief information about interface-based IGMP suppression entries.
Examples
# (In standalone mode.) Display interface-based IGMP suppression entries for IGMP attack packets.
<Sysname> display igmp attack-suppression per-interface entry slot 1 attack
Total entries: 1
Interface Attack start time Expires
GE1/0/4 2018/09/10 15:53:34 00:01:15
# (In standalone mode.) Display detailed information about interface-based IGMP suppression entries.
<Sysname> display igmp attack-suppression per-interface entry slot 1 verbose
Total entries: 2
Interface: GE1/0/1
Drv status: N/A
Attack start time: N/A
Expires: Off
CPU receive: 10
CPU drop: 0
Drv drop: 0
Interface: GE1/0/2
Drv status: Succeeded
Attack start time: 2018/09/10 15:53:34
Expires: 00:01:15
CPU receive: 123456789
CPU drop: 123456
Drv drop: 18446744073709551615
Table 2 Command output
Field |
Description |
Total entries |
Total number of IGMP suppression entries. |
Interface |
Interface name. |
Drv status |
Driver status: · Succeeded—The driver limits the IGMP packet rate. · Failed—The CPU limits the IGMP packet rate. The device has failed or hardware resources for IGMP suppression entries have been used up. · N/A—The incoming IGMP packets are not attack packets and the device does not limit the packet rate. |
Time when the IGMP packet attack started. This field displays N/A if no IGMP attack is detected. |
|
Expires |
Remaining time of the IGMP suppression entry aging timer. This field displays Off if the aging timer is disabled. |
CPU receive |
Number of packets that the CPU received. |
CPU drop |
Number of packets dropped by the CPU. |
Drv drop |
Number of packets dropped by the driver. |
Related commands
reset igmp attack-suppression per-interface entry
display igmp attack-suppression source-mac configuration
Use display igmp attack-suppression source-mac configuration to display the configuration of source MAC-based IGMP suppression.
Syntax
display igmp attack-suppression source-mac configuration
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the configuration of source MAC-based IGMP suppression.
<Sysname> display igmp attack-suppression source-mac configuration
IGMP attack-suppression source-mac is enabled.
Check interval: 5s
Threshold: 20
Aging time: 300s
Table 3 Command output
Field |
Description |
Check interval |
Check interval of source MAC-based IGMP suppression. |
Threshold |
Threshold for triggering source MAC-based IGMP suppression. |
Aging time |
Aging time of source MAC-based IGMP suppression entries. |
Related commands
igmp attack-suppression source-mac aging-time
igmp attack-suppression source-mac check-interval
igmp attack-suppression source-mac enable
igmp attack-suppression source-mac threshold
display igmp attack-suppression source-mac entry
Use display igmp attack-suppression source-mac entry to display source MAC-based IGMP suppression entries.
Syntax
In standalone mode:
display igmp attack-suppression source-mac entry slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]
In IRF mode:
display igmp attack-suppression source-mac entry chassis chassis-number slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays source MAC-based IGMP suppression entries for all interfaces.
mac-address address: Specifies a source MAC address. If you do not specify a MAC address, this command displays IGMP suppression entries for all MAC addresses.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
attack: Displays source MAC-based IGMP suppression entries for IGMP attack packets. If you do not specify this keyword, the command displays all source MAC-based IGMP suppression entries that have been created.
verbose: Displays detailed information about source MAC-based IGMP suppression entries. If you do not specify this keyword, the command displays brief information about source MAC-based IGMP suppression entries.
Examples
# (In standalone mode.) Display source MAC-based IGMP suppression entries for IGMP attack packets.
<Sysname> display igmp attack-suppression source-mac entry slot 1 attack
Total entries: 1
Interface MAC address Attack start time Expires
GE1/0/4 0001-0001-0004 2018/09/10 15:53:34 00:01:15
# (In standalone mode.) Display detailed information about source MAC-based IGMP suppression entries.
<Sysname> display igmp attack-suppression source-mac entry slot 1 verbose
Total entries: 2
Interface: GE1/0/1
MAC address: 0001-0001-0001
Drv status: N/A
Attack start time: N/A
Expires: Off
CPU receive: 10
CPU drop: 0
Drv drop: 0
Interface: GE1/0/2
MAC address: 0001-0001-0002
Drv status: Succeeded
Attack start time: 2018/09/10 15:53:34
Expires: 00:01:15
CPU receive: 123456789
CPU drop : 123456
Drv drop : 18446744073709551615
Table 4 Command output
Field |
Description |
Total entries |
Total number of IGMP suppression entries. |
Interface |
Interface name. |
MAC address |
MAC address of the attacker. |
Driver status: · Succeeded—IGMP attack packets are dropped by the driver. · Failed—IGMP attack packets are dropped by the CPU. The device has failed or hardware resources for IGMP suppression entries have been used up. · N/A—The incoming IGMP packets are not attack packets and they are not dropped. |
|
Attack start time |
Time when the IGMP packet attack started. This field displays N/A if no IGMP attack is detected. |
Expires |
Remaining time of the IGMP suppression entry aging timer. This field displays Off if the aging timer is disabled. |
CPU receive |
Number of packets that the CPU received. |
CPU drop |
Number of packets dropped by the CPU. |
Drv drop |
Number of packets dropped by the driver. |
Related commands
reset igmp attack-suppression source-mac entry
display igmp group
Use display igmp group to display information about IGMP multicast groups (multicast groups that hosts have joined through IGMP).
Syntax
display igmp [ vpn-instance vpn-instance-name ] group [ group-address | interface interface-type interface-number ] [ static | verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about IGMP multicast groups on the public network.
group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays information about all IGMP multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about IGMP multicast groups for all interfaces.
static: Specifies IGMP multicast groups that hosts have joined statically. If you do not specify this keyword, the command displays information about IGMP multicast groups that hosts have joined dynamically.
verbose: Displays detailed information.
Examples
# Display information about IGMP multicast groups that hosts have dynamically joined on the public network.
<Sysname> display igmp group
IGMP groups in total: 3
GigabitEthernet3/1/1(10.10.1.20):
IGMP groups reported in total: 3
Group address Last reporter Uptime Expires
225.1.1.1 10.10.1.10 00:02:04 00:01:15
225.1.1.2 10.10.1.10 00:02:04 00:01:15
225.1.1.3 10.10.1.10 00:02:04 00:01:15
Table 5 Command output
Field |
Description |
IGMP groups in total |
Total number of IGMP multicast groups. |
IGMP groups reported in total |
Total number of IGMP multicast groups that hosts attached to the interface have joined dynamically. |
Group address |
Multicast group address. |
Last reporter |
Address of the last host that reported its membership to the multicast group. |
Uptime |
Length of time since the multicast group was reported. |
Expire |
Remaining lifetime for the multicast group. This field displays Off if the timer is disabled. |
# Display detailed information about IGMP multicast group 232.1.1.1 that hosts have dynamically joined on the public network. In this example, the router is configured with IGMPv3.
<Sysname> display igmp group 232.1.1.1 verbose
GigabitEthernet3/1/1(10.10.1.20):
IGMP groups reported in total: 3
Group: 232.1.1.1
Uptime: 00:00:34
Exclude expires: 00:04:16
Mapping expires: 00:02:16
Last reporter: 10.10.1.10
Last-member-query-counter: 0
Last-member-query-timer-expiry: Off
Mapping last-member-query-counter: 0
Mapping last-member-query-timer-expiry: Off
Group mode: Exclude
Version1-host-present-timer-expiry: Off
Version2-host-present-timer-expiry: 00:02:11
Mapping version1-host-present-timer-expiry: Off
Source list (sources in total: 1):
Source: 10.1.1.1
Uptime: 00:00:03
V3 expires: 00:04:16
Mapping expires: 00:02:16
Last-member-query-counter: 0
Last-member-query-timer-expiry: Off
Table 6 Command output
Field |
Description |
IGMP groups reported in total |
Total number of IGMP multicast groups that hosts attached to the interface have joined dynamically. |
Group |
Multicast group address. |
Uptime |
Length of time since the multicast group was reported. |
Exclude expires |
Remaining lifetime for the multicast group in Exclude mode. This field displays Off if the timer is disabled. |
Mapping expires |
Remaining time for the multicast group specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings. |
Last reporter |
Address of the last host that reported its membership to this multicast group. |
Last-member-query-counter |
Number of IGMP group-specific queries or IGMP source-and-group-specific queries sent for the multicast group. |
Last-member-query-timer-expiry |
Remaining time for the last member query timer for the multicast group. This field displays Off if the timer is disabled. |
Mapping last-member-query-counter |
Number of IGMP group-specific queries or IGMP source-and-group-specific queries sent for the multicast group specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings. |
Mapping last-member-query-timer-expiry |
Remaining time for the last member query timer of the multicast group specified in IGMP SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with IGMP SSM mappings. |
Group mode |
Multicast source filtering mode: · Include—Include mode. · Exclude—Exclude mode. For a device that runs IGMPv1 or IGMPv2: · If IGMP SSM mappings are not configured, this field displays Exclude. · If IGMP SSM mappings are configured, this field displays Include or Exclude depending on the SSM mappings and the multicast groups that the host joins. |
Version1-host-present-timer-expiry |
Remaining time for the IGMPv1 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv2 or IGMPv3. |
Version2-host-present-timer-expiry |
Remaining time for the IGMPv2 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv3. |
Mapping version1-host-present-timer-expiry |
Remaining time for the IGMPv1 host present timer when the device is configured with IGMP SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with IGMP SSM mappings. |
Source list (sources in total) |
List of multicast sources and total number of multicast sources. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings. |
Source |
Multicast source address. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings. |
Uptime |
Length of time since the multicast source was reported. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings. |
V3 expires |
Remaining time for the multicast source when the device runs IGMPv3. This field displays Off if the timer is disabled and displays three hyphens (---) if the multicast source is specified in IGMP SSM mappings. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings. |
Mapping expires |
Remaining time for the multicast source specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings. |
Last-member-query-counter |
Number of IGMP group-specific queries or IGMP group-and-source-specific queries sent for the multicast source and group. This field is displayed only when the device runs IGMPv3 or is configured with IGMP SSM mappings. |
Last-member-query-timer-expiry |
Remaining time for the last member query timer for the multicast source and group. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv3 or is configured with IGMP SSM mappings. |
# Display information about IGMP multicast groups that hosts have statically joined on the public network.
<Sysname> display igmp group static
Entries in total: 2
Group address Source address Interface Expires
225.1.1.1 0.0.0.0 GE3/1/1 Never
225.2.2.2 1.1.1.1 GE3/1/1 Never
Table 7 Command output
Field |
Description |
Entries in total |
Total number of the multicast groups that hosts have joined statically. |
Group address |
Multicast group address. |
Source address |
Multicast source address. |
Interface |
Interface name. |
Expires |
Remaining lifetime for the multicast group. This field always displays Never because the multicast group never expires. |
reset igmp group
display igmp interface
Use display igmp interface to display IGMP information for interfaces.
Syntax
display igmp [ vpn-instance vpn-instance-name ] interface [ interface-type interface-number ] [ host | proxy ] [ verbose ]
display igmp [ vpn-instance vpn-instance-name ] interface [ access-interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays IGMP information for interfaces on the public network.
access-interface interface-type interface-number: Specifies an access interface by its type and number, which is the actual interface through which a multicast user accesses the network.
interface-type interface-number: Specifies an interface by its type and number.
host: Displays information about the interfaces enabled with the IGMP host feature. For more information about the IGMP host feature, see VXLAN Configuration Guide.
proxy: Displays the IGMP proxy interface information.
verbose: Displays detailed IGMP information.
Usage guidelines
A multicast-UA interface is a virtual interface created for maintaining IGMP information.
When an IPoE, PPPoE, or portal user assigned with the STB service comes online, the access module sends a notification to IGMP. If per-session multicast forwarding is enabled on the access interface, IGMP creates a multicast-UA interface for the user upon receiving the notification. When the user goes offline, IGMP deletes the multicast-UA interface immediately after receiving the notification from the access module. For more information about specifying the STB service for users in an ISP domain, see AAA configuration in BRAS Services Configuration Guide.
When a user comes online through an interface configured with QinQ and per-session multicast forwarding, IGMP creates a multicast-UA interface upon receiving an IGMP report from the user. For users that belong to the same SVLAN and CVLAN, only one multicast-UA interface is created. The multicast-UA interface ages out if the interface neither maintains membership information for any multicast groups nor receives IGMP reports for a period of time. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.
To display IGMP information for multicast-UA interfaces created for multicast users that come online through the same access interface, specify the access-interface interface-type interface-number option.
If you do not specify any parameters, this command displays IGMP information for all interfaces.
Examples
# Display detailed IGMP information for GigabitEthernet 3/1/1 (non-proxy interface) on the public network.
<Sysname> display igmp interface gigabitethernet 3/1/1 verbose
GigabitEthernet3/1/1(10.10.1.20):
IGMP is enabled.
IGMP version: 2
Query interval for IGMP: 125s
Other querier present time for IGMP: 255s
Maximum query response time for IGMP: 10s
Last member query interval: 1s
Last member query count: 2
Startup query interval: 31s
Startup query count: 2
General query timer expiry (hh:mm:ss): 00:00:54
Querier for IGMP: 10.10.1.20 (This router)
IGMP activity: 1 join(s), 0 leave(s)
Multicast routing on this interface: Enabled
Robustness: 2
Require-router-alert: Disabled
Fast-leave: Disabled
Startup-query: Off
Other-querier-present-timer-expiry (hh:mm:ss): Off
Authorization: Disabled
Join-by-session: Disabled
User-VLAN-aggregation: Disabled
IGMP groups reported in total: 1
# Display detailed IGMP information for all IGMP proxy interfaces on the public network.
<Sysname> display igmp interface proxy verbose
GigabitEthernet3/1/2(20.10.1.20):
IGMP proxy is enabled.
IGMP version: 2
Multicast routing on this interface: Enabled
Require-router-alert: Disabled
Version1-querier-present-timer-expiry (hh:mm:ss): Off
# Display detailed IGMP information for all interfaces enabled with the IGMP host feature on the public network.
<Sysname> display igmp interface host verbose
GigabitEthernet3/1/3(30.10.1.20):
IGMP host is enabled.
IGMP version: 2
Multicast routing on this interface: Enabled
Require-router-alert: Disabled
Version1-querier-present-timer-expiry (hh:mm:ss): Off
# Display detailed IGMP information for user access interface GigabitEthernet 3/1/2 on the public network.
<Sysname> display igmp interface access-interface gigabitethernet 3/1/2 verbose
Multicast-UA0(102.1.1.2):
IGMP is enabled.
IGMP version: 2
Query interval for IGMP: 125s
Other querier present time for IGMP: 255s
Maximum query response time for IGMP: 10s
Last member query interval: 1s
Last member query count: 2
Startup query interval: 31s
Startup query count: 2
General query timer expiry (hh:mm:ss): 00:00:23
Querier for IGMP: 102.1.1.2 (This router)
IGMP activity: 1 join(s), 0 leave(s)
Multicast routing on this interface: Enabled
Robustness: 2
Require-router-alert: Disabled
Fast-leave: Disabled
Startup-query: Off
Other-querier-present-timer-expiry (hh:mm:ss): Off
Authorization: Disabled
Join-by-session: Enabled
User-VLAN-aggregation: Disabled
Access interface: GigabitEthernet3/1/2
IGMP groups reported in total: 1
Table 8 Command output
Field |
Description |
GigabitEthernet3/1/1(10.10.1.20) |
Interface and its IP address. |
IGMP is enabled |
IGMP is enabled on the interface. |
IGMP version |
Version of IGMP that the interface runs. |
Query interval for IGMP |
IGMP general query interval, in seconds. |
Other querier present time for IGMP |
IGMP other querier present interval, in seconds. |
Maximum query response time for IGMP |
Maximum response time for IGMP general queries, in seconds. |
Last member query interval |
Interval for sending IGMP group-specific queries or IGMP group-and-source-specific queries, in seconds. |
Last member query count |
Number of IGMP group-specific queries or IGMP group-and-source-specific queries sent for the multicast group. |
Startup query interval |
Interval for sending IGMP general queries on startup, in seconds. |
Startup query count |
Number of IGMP general queries that the device sends on startup. |
General query timer expiry |
Remaining time for the IGMP general query timer. This field displays Off if the timer is disabled. |
Querier for IGMP |
IP address of the IGMP querier. This field is not displayed when the device runs IGMPv1 and the device is not the IGMP querier. NOTE: In IGMPv1, the PIM DR acts as the IGMP querier. You can use the display pim interface command to display PIM information. |
No querier elected |
No IGMP querier election is performed. This field is displayed when the device runs IGMPv1 and is not the IGMP querier. NOTE: In IGMPv1, the PIM DR acts as the IGMP querier. You can use the display pim interface command to display PIM information. |
IGMP activity: 1 join(s), 0 leave(s) |
Statistics of IGMP activities: · join(s)—Total number of multicast groups that this interface has joined. · leave(s)—Total number of multicast groups that this interface has left. |
Multicast routing on this interface |
Whether IP multicast routing is enabled: Enabled or Disabled. |
Robustness |
Robustness variable of the IGMP querier. |
Require-router-alert |
Whether the feature of dropping IGMP messages without Router-Alert is enabled: Enabled or Disabled, |
Fast-leave |
Whether the fast-leave processing feature is enabled: Enabled or Disabled. |
Startup-query |
Whether the IGMP querier sends IGMP general queries at the startup query interval on startup: · On—The IGMP querier performs the above action. · Off—The IGMP querier does not perform the above action. |
Other-querier-present-timer-expiry |
Remaining time for the other querier present timer. This field displays Off if the timer is disabled. |
Authorization |
Whether the multicast access control feature is enabled: Enabled or Disabled. |
Join-by-session |
Whether the per-session multicast forwarding feature is enabled: Enabled or Disabled. |
User-VLAN-aggregation |
Whether the multicast packet VLAN tagging feature is enabled: Enabled or Disabled. |
Access interface |
Actual interface through which the multicast user accesses the network. This field is displayed only when IGMP information is maintained on a multicast-UA interface. |
IGMP groups reported in total |
Total number of multicast groups that the interface has joined dynamically. This field is not displayed if the interface does not join multicast groups. |
IGMP proxy is enabled |
IGMP proxying is enabled on the interface. |
IGMP host is enabled |
The IGMP host feature is enabled on the interface. |
Version1-querier-present-timer-expiry |
Remaining time for the IGMPv1 querier present timer. This field displays Off if the timer is disabled. |
display igmp proxy group
Use display igmp proxy group to display information about multicast groups maintained by the IGMP proxy.
Syntax
display igmp [ vpn-instance vpn-instance-name ] proxy group [ group-address | interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about multicast groups maintained by the IGMP proxy on the public network.
group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays information about all multicast groups maintained by the IGMP proxy.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about multicast groups maintained by the IGMP proxy for all interfaces.
verbose: Displays detailed information.
Examples
# Display information about multicast groups maintained by the IGMP proxy on the public network.
<Sysname> display igmp proxy group
IGMP proxy group records in total: 2
GigabitEthernet3/1/1(1.1.1.20):
IGMP proxy group records in total: 2
Group address Member state Expires
225.1.1.1 Delay 00:00:02
225.1.1.2 Idle Off
# Display detailed information about multicast group 225.1.1.1 maintained by the IGMP proxy on the public network.
<Sysname> display igmp proxy group 225.1.1.1 verbose
GigabitEthernet3/1/1(1.1.1.20):
IGMP proxy group records in total: 2
Group: 225.1.1.1
Group mode: Include
Member state: Delay
Expires: 00:00:02
Source list (sources in total: 1):
1.1.1.1
Table 9 Command output
Field |
Description |
IGMP groups records in total |
Total number of multicast groups maintained by the IGMP proxy. |
GigabitEthernet3/1/1(1.1.1.20) |
IGMP proxy interface and its IP address. |
Pending proxy group |
Pending multicast groups maintained by the IGMP proxy. |
Group address/Group |
Multicast group address. |
Member state |
Member host states: · Delay—The member host has joined a group and started a delay timer. · Idle—The member host has joined a group, but didn't start a delay timer. |
Expires |
Remaining delay time for the member host to send a responding report. This field displays Off if the timer is disabled. |
Group mode |
Multicast source filtering mode: Include or Exclude. |
Source list |
Multicast source list for the multicast group maintained by the IGMP proxy. |
sources in total |
Total number of multicast sources. |
display igmp proxy routing-table
Use display igmp proxy routing-table to display multicast routing entries maintained by the IGMP proxy.
Syntax
display igmp [ vpn-instance vpn-instance-name ] proxy routing-table [ source-address [ mask { mask-length | mask } ] | group-address [ mask { mask-length | mask } ] ] * [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays multicast routing entries maintained by the IGMP proxy on the public network.
source-address: Specifies a multicast source by its IP address. If you do not specify a multicast source, this command displays multicast routing entries for all multicast sources maintained by the IGMP proxy.
group-address: Specifies a multicast group address by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays multicast routing entries for all multicast groups maintained by the IGMP proxy.
mask-length: Specifies a mask length of the multicast group address or multicast source address. For a multicast source address, the value range for this argument is 0 to 32. For a multicast group address, the value range for this argument is 4 to 32. The default value is 32 in both cases.
mask: Specifies a mask of the multicast group address or multicast source address. The default value is 255.255.255.255.
verbose: Displays detailed information about multicast routing entries maintained by the IGMP proxy.
Examples
# Display multicast routing entries maintained by the IGMP proxy on the public network.
<Sysname> display igmp proxy routing-table
Total 1 (*, G) entries, 2 (S, G) entries.
(172.168.0.12, 227.0.0.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: IGMP
(*, 225.1.1.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: STATIC
(2.2.2.2, 225.1.1.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (2 in total):
1: LoopBack1
Protocol: STATIC
2: GigabitEthernet3/1/2
Protocol: PROXY
# Display detailed information about multicast routing entries maintained by the IGMP proxy on the public network.
<Sysname> display igmp proxy routing-table verbose
Total 1 (*, G) entries, 2 (S, G) entries.
(172.168.0.12, 227.0.0.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: IGMP
Querier state: Querier
Join/Prune state:Join
Non-downstream interfaces: None
(*, 225.1.1.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: STATIC
Querier state: Querier
Join/Prune state:Join
Non-downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: IGMP
Querier state: Non-querier
Join/Prune state:Join
(2.2.2.2, 225.1.1.1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (2 in total):
1: LoopBack1
Protocol: STATIC
Querier state: Querier
Join/Prune state: Join
2: GigabitEthernet3/1/2
Protocol: PROXY
Querier state: Querier
Join/Prune state: Join
Non-downstream interfaces: None
Table 10 Command output
Field |
Description |
Total 1 (*, G) entries, 2 (S, G) entries |
Total number of (*, G) entries, and the total number of (S, G) entries. |
(172.168.0.12, 227.0.0.1) |
(S, G) entry. |
Upstream interface |
Incoming interface of the (S, G) entry. |
Downstream interfaces (1 in total) |
Outgoing interfaces of the (S, G) entry, and the total number of outgoing interfaces. |
Non-downstream interfaces (1 in total) |
Non-outgoing interfaces of the (S, G) entry, and the total number of non-outgoing interfaces. |
1: GigabitEthernet3/1/2 |
Index of an interface, and the interface. |
Protocol |
Protocol type: · IGMP—Dynamic IGMP. · PROXY—IGMP proxy. · STATIC—Static IGMP. |
Querier state |
Querier state: · Querier. · Non-querier. |
Join/Prune state |
Joined or pruned state of the interface: · NI—Default state. · Join—Joined state. · Prune—Pruned state. |
display igmp ssm-mapping
Use display igmp ssm-mapping to display IGMP SSM mappings.
Syntax
display igmp [ vpn-instance vpn-instance-name ] ssm-mapping group-address
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about the IGMP SSM mappings on the public network.
group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255.
Examples
# Display IGMP SSM mappings for multicast group 232.1.1.1 on the public network.
<Sysname> display igmp ssm-mapping 232.1.1.1
Group: 232.1.1.1
Source list:
1.2.3.4
5.5.5.5
10.1.1.1
100.1.1.10
Table 11 Command output
Field |
Description |
Group |
Multicast group address. |
Source list |
List of multicast source addresses. |
display igmp user-authorization
Use display igmp user-authorization to display authorization information for IGMP users.
Syntax
display igmp user-authorization [ access-type { ipoe | portal | ppp } ] [ access-interface interface-type interface-number | interface interface-type interface-number ] [ active-user ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
access-type: Specifies an access type.
ipoe: Specifies the IPoE users.
portal: Specifies the portal users.
ppp: Specifies the PPP users.
access-interface interface-type interface-number: Specifies a user access interface by its type and number.
interface interface-type interface-number: Specifies an interface by its type and number.
active-user: Specifies IGMP users that have joined multicast groups.
Usage guidelines
If you do not specify any parameters, this command displays authorization information for all IGMP users.
Examples
# Display authorization information for IGMP users.
<Sysname> display igmp user-authorization
Authorized users in total: 3
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102.1.1.1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
User name: user2
Access type: IPoE
Interface: Multicast-UA0
Access interface: GigabitEthernet3/1/1.1
User address: 101.1.1.1
User ID: 0x30000001 (VLAN ID 100, Second VLAN ID 10)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
225.0.0.2
225.0.0.3
User name: user3
Access type: Portal
Interface: Multicast-UA1
Access interface: GigabitEthernet3/1/2
User address: 103.1.1.1
User ID: 0x10000001
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
225.0.0.2
# Display authorization information for IGMP users that have joined multicast groups.
<Sysname> display igmp user-authorization active-user
Authorized users in total: 3
Active users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102.1.1.1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
# Display authorization information for IGMP users that access the network through PPP.
<Sysname> display igmp user-authorization access-type ppp
Authorized users in total: 3
Matching users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102.1.1.1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
# Display authorization information for IGMP users that access the network through PPP and have joined multicast groups.
<Sysname> display igmp user-authorization access-type ppp active-user
Authorized users in total: 3
Active users in total: 1
Matching users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102.1.1.1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
225.0.0.1
Table 12 Command output
Field |
Description |
Authorized users in total |
Total number of access users. |
Matching users in total |
Total number of matching IGMP users. |
Access type |
Access type: IPoE, Portal, or PPP. |
Interface |
Multicast user interface. |
Access interface |
Actual interface through which the user accesses the network. |
User VPN-instance |
Name of the VPN instance authorized to the user. This field is not displayed if no VPN instance is authorized to the user. |
User address |
IP address of the user. This field is not displayed if the device does not obtain the IP address of the user. |
Gateway address |
Gateway IP address of the user. This field is not displayed if the device does not obtain the gateway IP address of the user. |
User MAC address |
MAC address of the user. This field is not displayed if the device does not obtain the MAC address of the user. |
User ID |
ID of the user. |
Leased user ID |
ID of the IPoE leased user. This field is displayed only for IPoE leased users. |
Session ID |
ID of the user session. This field is displayed only for PPPoE users. |
VLAN ID |
Outer VLAN ID (or the unique VLAN ID) for the user. This field is not displayed if the user does not have a VLAN ID. |
Second VLAN ID |
Inner VLAN ID for the user. This field is not displayed if the user does not have an inner VLAN ID. |
PVC ID |
PVC ID. This field is displayed only when the multicast user accesses the network through an ATM interface. |
VSI index |
VSI index. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface. |
Link ID |
Link ID. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface. |
Maximum allowed programs |
Maximum number of the multicast groups that the user can join. |
User profile |
User profile name of the authorized user. The user can join multicast groups permitted by the IGMP user access control policy in the user profile. To configure an IGMP user access control policy, use the igmp access-policy command. |
Authorized program list |
List of the multicast groups that the user is authorized to join. |
Active users in total |
Total number of IGMP users that have joined multicast groups. |
igmp
Use igmp to enter IGMP view.
Use undo igmp to delete the configurations in IGMP view.
Syntax
igmp [ vpn-instance vpn-instance-name ]
undo igmp [ vpn-instance vpn-instance-name ]
Views
System view
Predefined user roles
network-admin
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command applies to the public network.
Examples
# Enter IGMP view for the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp]
# Enter IGMP view for the VPN instance mvpn.
<Sysname> system-view
[Sysname] igmp vpn-instance mvpn
[Sysname-igmp-mvpn]
igmp access-policy
Use igmp access-policy to configure an IGMP user access policy.
Use undo igmp access-policy to delete an IGMP user access policy.
Syntax
igmp access-policy ipv4-acl-number
undo igmp access-policy ipv4-acl-number
Default
No IGMP user access policies exist. IGMP users are not authorized to join any multicast groups.
Views
User profile view
Predefined user roles
network-admin
Parameters
ipv4-acl-number: Specifies an IPv4 basic or advanced ACL number, in the range of 2000 to 3999. IGMP users can join only multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, IGMP users cannot join multicast groups.
Usage guidelines
You can configure multiple IGMP user access policies by using this command multiple times. An IGMP report is permitted if it matches one of the access policies.
When you configure a rule in the IPv4 ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· In a basic ACL, the source source-address source-wildcard option specifies a multicast group address.
· In an advanced ACL, the source source-address source-wildcard option specifies a multicast source address. The destination dest-address dest-wildcard option specifies a multicast group address.
To match the following IGMP reports, set the source source-address source-wildcard option to 0.0.0.0:
¡ IGMPv1 and IGMPv2 reports.
¡ IGMPv3 IS_EX and IGMPv3 TO_EX reports that do not carry multicast source addresses.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure an access policy in user profile abc to authorize IGMP users to join multicast group 225.1.1.2.
<Sysname> system-view
[Sysname] acl basic 2000
[Sysname-acl-ipv4-basic-2000] rule permit source 225.1.1.2 0
[Sysname-acl-ipv4-basic-2000] quit
[Sysname] user-profile abc
[Sysname-user-profile-abc] igmp access-policy 2000
igmp attack-defense
Use igmp attack-defense to enable IGMP attack defense on an interface.
Use undo igmp attack-defense to disable IGMP attack defense on an interface.
Syntax
igmp attack-defense
undo igmp attack-defense
Default
IGMP attack defense is disabled on an interface.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Usage guidelines
This feature enables the device to process IGMP messages from online users and to discard IGMP messages from non-online users.
Use this feature only on an interface that is configured with IPoE access authentication. If an interface is not configured with IPoE access authentication, this feature discards IGMP messages from all users and online users cannot join multicast groups.
Examples
# Enable IGMP attack defense on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp attack-defense
igmp attack-suppression per-interface aging-time
Use igmp attack-suppression per-interface aging-time to set the aging time for interface-based IGMP suppression entries.
Use undo igmp attack-suppression per-interface aging-time to restore the default.
Syntax
igmp attack-suppression per-interface aging-time time
undo igmp attack-suppression per-interface aging-time
Default
The aging time is 30 seconds for interface-based IGMP suppression entries.
Views
System view
Predefined user roles
network-admin
Parameters
time: Specifies the aging time of interface-based IGMP suppression entries, in the range of 1 to 65535 seconds.
Usage guidelines
When the aging time of the IGMP suppression entry on an interface expires, the device ages out the entry and stops limiting the packet rate only if no IGMP attack exists on the interface. Then, the device recounts the number of incoming IGMP packets on the interface to start a new IGMP suppression process.
This command takes effect only after you execute the igmp attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the aging time to 60 seconds for interface-based IGMP suppression entries.
<Sysname> system-view
[Sysname] igmp attack-suppression per-interface aging-time 60
igmp attack-suppression per-interface check-interval
Use igmp attack-suppression per-interface check-interval to set the check interval for interface-based IGMP suppression.
Use undo igmp attack-suppression per-interface check-interval to restore the default.
Syntax
igmp attack-suppression per-interface check-interval interval
undo igmp attack-suppression per-interface check-interval
Default
The check interval is 30 seconds for interface-based IGMP suppression.
Views
System view
Predefined user roles
network-admin
Parameters
interval: Specifies the check interval for interface-based IGMP suppression, in the range of 1 to 255 seconds.
Usage guidelines
This command takes effect only after you execute the igmp attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the check interval to 10 seconds for interface-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression per-interface check-interval 10
igmp attack-suppression per-interface enable
Use igmp attack-suppression per-interface enable to enable interface-based IGMP suppression.
Use undo igmp attack-suppression per-interface enable to disable interface-based IGMP suppression.
Syntax
igmp attack-suppression per-interface enable
undo igmp attack-suppression per-interface enable
Default
Interface-based IGMP suppression is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The interface-based IGMP suppression feature allows the device to create IGMP suppression entries and count the number of received IGMP packets on a per interface basis. When the number exceeds the threshold within the check interval, the device identifies these packets as attack packets and limits the rate for sending them to the CPU.
This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable IGMP snooping globally on the device. IGMP packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.
Examples
# Enable interface-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression per-interface enable
igmp attack-suppression per-interface threshold
Use igmp attack-suppression per-interface threshold to set the threshold for triggering interface-based IGMP suppression.
Use undo igmp attack-suppression per-interface threshold to restore the default.
Syntax
igmp attack-suppression per-interface threshold threshold-value
undo igmp attack-suppression per-interface threshold
Default
The threshold is 6000 for triggering interface-based IGMP suppression.
Views
System view
Predefined user roles
network-admin
Parameters
threshold-value: Specifies the threshold for triggering interface-based IGMP suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of IGMP packets that an interface can receive within the check interval.
Usage guidelines
An interface is attacked if the number of received IGMP packets on the interface exceeds the threshold within the check interval.
This command takes effect only after you execute the igmp attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the threshold to 300 for triggering interface-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression per-interface threshold 300
igmp attack-suppression source-mac aging-time
Use igmp attack-suppression source-mac aging-time to set the aging time for source MAC-based IGMP suppression entries.
Use undo igmp attack-suppression source-mac aging-time to restore the default.
Syntax
igmp attack-suppression source-mac aging-time time
undo igmp attack-suppression source-mac aging-time
Default
The aging time is 30 seconds for source MAC-based IGMP suppression entries.
Views
System view
Predefined user roles
network-admin
Parameters
time: Specifies the aging time of source MAC-based IGMP suppression entries, in the range of 1 to 65535 seconds.
Usage guidelines
When the aging time of the IGMP suppression entry for a MAC address expires, the device ages out the entry and accepts packets from the MAC address only if the packets from the MAC address are not attack packets. Then, the device recounts the number of IGMP packets from the MAC address to start a new IGMP suppression process.
This command takes effect only after you execute the igmp attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the aging time to 60 seconds for source MAC-based IGMP suppression entries.
<Sysname> system-view
[Sysname] igmp attack-suppression source-mac aging-time 60
Related commands
igmp attack-suppression source-mac enable
igmp attack-suppression source-mac check-interval
Use igmp attack-suppression source-mac check-interval to set the check interval for source MAC-based IGMP suppression.
Use undo igmp attack-suppression source-mac check-interval to restore the default.
Syntax
igmp attack-suppression source-mac check-interval interval
undo igmp attack-suppression source-mac check-interval
Default
The check interval is 30 seconds for source MAC-based IGMP suppression.
Views
System view
Predefined user roles
network-admin
Parameters
interval: Specifies the check interval for source MAC-based IGMP suppression, in the range of 1 to 255 seconds.
Usage guidelines
This command takes effect only after you execute the igmp attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the check interval to 10 seconds for source MAC-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression source-mac check-interval 10
Related commands
igmp attack-suppression source-mac enable
igmp attack-suppression source-mac threshold
igmp attack-suppression source-mac enable
Use igmp attack-suppression source-mac enable to enable source MAC-based IGMP suppression.
Use undo igmp attack-suppression source-mac enable to disable source MAC-based IGMP suppression.
Syntax
igmp attack-suppression source-mac enable
undo igmp attack-suppression source-mac enable
Default
Source MAC-based IGMP suppression is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The source MAC-based IGMP suppression feature allows the device to create IGMP suppression entries and count the number of received IGMP packets on a per source MAC basis. When the number of IGMP packets from a MAC address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal IGMP packets, the device drops the IGMP attack packets from the MAC address.
This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable IGMP snooping globally on the device. IGMP packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.
Examples
# Enable source MAC-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression source-mac enable
igmp attack-suppression source-mac threshold
Use igmp attack-suppression source-mac threshold to set the threshold for triggering source MAC-based IGMP suppression.
Use undo igmp attack-suppression source-mac threshold to restore the default.
Syntax
igmp attack-suppression source-mac threshold threshold-value
undo igmp attack-suppression source-mac threshold
Default
The threshold is 6000 for triggering source MAC-based IGMP suppression.
Views
System view
Predefined user roles
network-admin
Parameters
threshold-value: Specifies the threshold for triggering source MAC-based IGMP suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of IGMP packets that the device can receive from a MAC address within the check interval.
Usage guidelines
When the number of received IGMP packets from a MAC address exceeds the threshold within the check interval, the device identifies the IGMP packets from this MAC address as attack packets.
This command takes effect only after you execute the igmp attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the threshold to 300 for triggering source MAC-based IGMP suppression.
<Sysname> system-view
[Sysname] igmp attack-suppression source-mac threshold 300
Related commands
igmp attack-suppression source-mac check-interval
igmp attack-suppression source-mac enable
igmp authorization-enable
Use igmp authorization-enable to enable the multicast access control feature.
Use undo igmp authorization-enable to disable the multicast access control feature.
Syntax
igmp authorization-enable
undo igmp authorization-enable
Default
The multicast access control feature is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
VT interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only on local online users. Non-local users and offline users are not affected.
Examples
# Enable the multicast access control feature on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp authorization-enable
igmp enable
Use igmp enable to enable IGMP on an interface.
Use undo igmp enable to disable IGMP on an interface.
Syntax
undo igmp enable
Default
IGMP is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only when IP multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.
Other IGMP configurations on the interface take effects only when IGMP is enabled on the interface.
Examples
# Enable IP multicast routing on the public network, and enable IGMP on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] multicast routing
[Sysname-mrib] quit
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp enable
multicast routing
igmp fast-leave
Use igmp fast-leave to enable fast-leave processing on an interface.
Use undo igmp fast-leave to disable fast-leave processing on an interface.
Syntax
igmp fast-leave [ group-policy ipv4-acl-number ]
undo igmp fast-leave
Default
Fast-leave processing is disabled. The IGMP querier sends IGMP group-specific or group-and-source-specific queries after receiving a leave message.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4-acl-number: Specifies an IPv4 basic ACL by its number in the range of 2000 to 2999. If you specify an ACL, the fast-leave processing feature takes effect only on the multicast groups that the ACL permits. The feature takes effect on all multicast groups when one of the following conditions exists:
· You do not specify an ACL.
· The specified ACL does not exist.
· The specified ACL does not have valid rules.
Usage guidelines
The fast-leave processing feature enables an IGMP querier to suppress IGMP group-specific or group-and-source-specific queries upon receiving IGMP leave messages permitted by the ACL.
When you configure a rule in the IPv4 basic ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· The source source-address source-wildcard option specifies a multicast group address.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
Examples
# Enable fast-leave processing on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp fast-leave
igmp group-policy
Use igmp group-policy to configure a multicast group policy on an interface to control the multicast groups that hosts attached to the interface can join.
Use undo igmp group-policy to delete the multicast group policy on an interface.
Syntax
igmp group-policy ipv4-acl-number [ version-number ]
undo igmp group-policy
Default
No multicast group policy exists on an interface. Hosts attached to the interface can join any multicast groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4-acl-number: Specifies an IPv4 basic or advanced ACL by its number in the range of 2000 to 3999. Hosts can join only the multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, hosts cannot join any multicast groups.
version-number: Specifies an IGMP version in the range of 1 to 3. By default, this command takes effect on IGMP reports of all versions.
Usage guidelines
A multicast group policy filters IGMP reports to control the multicast groups that the hosts can join.
This command does not take effect on static member interfaces because static member interfaces do not send IGMP reports.
When you configure a rule in the IPv4 ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· In a basic ACL, the source source-address source-wildcard option specifies a multicast group address.
· In an advanced ACL, the source source-address source-wildcard option specifies a multicast source address. The destination dest-address dest-wildcard option specifies a multicast group address.
To match the following IGMP reports, set the source source-address source-wildcard option to 0.0.0.0:
¡ IGMPv1 and IGMPv2 reports.
¡ IGMPv3 IS_EX and IGMPv3 TO_EX reports that do not carry multicast source addresses.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure a multicast group policy on GigabitEthernet 3/1/1 so that hosts attached to the interface can join only multicast group 225.1.1.1.
<Sysname> system-view
[Sysname] acl basic 2005
[Sysname-acl-ipv4-basic-2005] rule permit source 225.1.1.1 0
[Sysname-acl-ipv4-basic-2005] quit
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp group-policy 2005
igmp join-by-session
Use igmp join-by-session to enable per-session multicast forwarding.
Use undo igmp join-by-session to restore the default.
Syntax
igmp join-by-session [ mode { both | bras | non-bras } ]
undo igmp join-by-session
Default
Multicast data is forwarded on a per-interface basis.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
mode: Specifies a user access type. If you do not specify this option, per-session multicast forwarding is enabled for users of all access types.
both: Specifies BRAS and non-BRAS user access types.
bras: Specifies the BRAS user access type, including IPoE, PPP, and portal.
non-bras: Specifies the non-BRAS user access type. Non-BRAS users refer to users that do not need to perform authentication.
Usage guidelines
This feature enables an interface to send a separate copy of multicast data to each user attached to the interface.
The igmp join-by-session and igmp user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.
Examples
# Enable per-session multicast forwarding on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp join-by-session
igmp last-member-query-count
Use igmp last-member-query-count to set the IGMP last member query count on an interface.
Use undo igmp last-member-query-count to restore the default.
Syntax
igmp last-member-query-count count
undo igmp last-member-query-count
Default
The IGMP last member query count equals the IGMP querier's robustness variable.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP last member query count in the range of 1 to 255.
Usage guidelines
You can set the IGMP last member query count for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP last member query count to 6 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp last-member-query-count 6
Related commands
last-member-query-count (IGMP view)
igmp last-member-query-interval
Use igmp last-member-query-interval to set the IGMP last member query interval on an interface.
Use undo igmp last-member-query-interval to restore the default.
Syntax
igmp last-member-query-interval interval
undo igmp last-member-query-interval
Default
The IGMP last member query interval is 1 second.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP last member query interval in the range of 1 to 25 seconds.
Usage guidelines
You can set the IGMP last member query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP last member query interval to 6 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp last-member-query-interval 6
Related commands
last-member-query-interval (IGMP view)
igmp max-response-time
Use igmp max-response-time to set the maximum response time for IGMP general queries on an interface.
Use undo igmp max-response-time to restore the default.
Syntax
igmp max-response-time time
undo igmp max-response-time
Default
The maximum response time for IGMP general queries is 10 seconds.
Views
Interface view
Predefined user roles
network-admin
Parameters
time: Specifies the maximum response time for IGMP general queries, in the range of 1 to 3174 seconds.
Usage guidelines
You can set the maximum response time for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the maximum response time for IGMP general queries to 25 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp max-response-time 25
Related commands
max-response-time (IGMP view)
igmp non-stop-routing
Use igmp non-stop-routing to enable IGMP NSR.
Use undo igmp non-stop-routing to disable IGMP NSR.
Syntax
igmp non-stop-routing
undo igmp non-stop-routing
Default
IGMP NSR is disabled.
Views
System view
Predefined user roles
network-admin
Examples
# Enable IGMP NSR.
<Sysname> system-view
[Sysname] igmp non-stop-routing
igmp other-querier-present-interval
Use igmp other-querier-present-interval to set the IGMP other querier present timer on an interface.
Use undo igmp other-querier-present-interval to restore the default.
Syntax
igmp other-querier-present-interval interval
undo igmp other-querier-present-interval
Default
The IGMP other querier present timer is calculated by using the following formula:
[ IGMP general query interval ] × [ IGMP querier's robustness variable ] + [ maximum response time for IGMP general queries ] / 2.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP other querier present timer in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP other querier present timer for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP other querier present timer to 125 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp other-querier-present-interval 125
Related commands
other-querier-present-interval (IGMP view)
igmp proxy enable
Use igmp proxy enable to enable IGMP proxying on an interface.
Use to undo igmp proxy enable to disable IGMP proxying on an interface.
Syntax
igmp proxy enable
undo igmp proxy enable
Default
IGMP proxying is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only when IP multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.
Examples
# Enable IP multicast routing on the public network, and enable IGMP proxying on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] multicast routing-enable
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp proxy enable
Related commands
multicast routing
igmp proxy forwarding
Use igmp proxy forwarding to enable multicast forwarding on a non-querier interface.
Use undo igmp proxy forwarding to disable multicast forwarding on a non-querier interface.
Syntax
igmp proxy forwarding
undo igmp proxy forwarding
Default
Multicast forwarding is disabled for a non-querier interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Typically, only IGMP queriers can forward multicast traffic but non-queriers cannot. This mechanism prevents multicast data from being repeatedly forwarded. If a router interface on the IGMP proxy failed the querier election, enable multicast forwarding on the interface to forward multicast data to attached receivers.
Examples
# Enable multicast forwarding on GigabitEthernet 3/1/1. (GigabitEthernet 3/1/1 is a non-querier interface on the IGMP proxy device.)
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp proxy forwarding
igmp query-interval
Use igmp query-interval to set the IGMP general query interval on an interface.
Use undo igmp query-interval to restore the default.
Syntax
igmp query-interval interval
undo igmp query-interval
Default
The IGMP general query interval is 125 seconds.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP general query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP general query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP general query interval to 60 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp query-interval 60
Related commands
query-interval (IGMP view)
igmp robust-count
Use igmp robust-count to set the IGMP querier's robustness variable on an interface.
Use undo igmp robust-count to restore the default.
Syntax
igmp robust-count count
undo igmp robust-count
Default
The IGMP querier's robustness variable is 2.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP querier's robustness variable in the range of 1 to 255.
Usage guidelines
The IGMP querier's robustness variable defines the number of times to retransmit queries if packet loss occurs. A higher robustness variable makes the IGMP querier more robust, but it increases timeout time for multicast groups.
You can set the IGMP querier's robustness variable for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP querier's robustness variable to 5 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp robust-count 5
Related commands
robust-count (IGMP view)
igmp startup-query-count
Use igmp startup-query-count to set the IGMP startup query count on an interface.
Use undo igmp startup-query-count to restore the default.
Syntax
igmp startup-query-count count
undo igmp startup-query-count
Default
The IGMP startup query count equals the IGMP querier's robustness variable.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP startup query count in the range of 1 to 255.
Usage guidelines
You can set the IGMP startup query count for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP startup query count to 5 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp startup-query-count 5
Related commands
startup-query-count (IGMP view)
igmp startup-query-interval
Use igmp startup-query-interval to set the IGMP startup query interval on an interface.
Use undo igmp startup-query-interval to restore the default.
Syntax
igmp startup-query-interval interval
undo igmp startup-query-interval
Default
The IGMP startup query interval equals one quarter of the IGMP general query interval.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP startup query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP startup query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the IGMP startup query interval to 100 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp startup-query-interval 100
Related commands
startup-query-interval (IGMP view)
igmp static-group
Use igmp static-group to configure an interface as a static group member of a multicast group.
Use undo igmp static-group to restore the default.
Syntax
igmp static-group group-address [ inc-step-mask { group-mask | group-mask-length } number group-number ] [ source source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ]
undo igmp static-group { all | group-address [ inc-step-mask { group-mask | group-mask-length } number group-number ] [ source source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ] }
Default
An interface is not a static group member of multicast groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. In the batch configuration, this multicast group address represents the start address.
inc-step-mask group-mask: Specifies the mask step for multicast groups in batch configuration, the gap between two adjacent multicast group addresses. The step mask is in the dotted decimal notation format, in the range of 0.0.0.1 to 15.255.255.255.
inc-step-mask group-mask-length: Specifies the mask length step for multicast groups in batch configuration. The mask length step is an integer in the range of 5 to 32.
group-number: Specifies the number of multicast group addresses in batch configuration, an integer in the range of 2 to 512.
source-address: Specifies a multicast source by its IP address. If you do not specify a multicast source, this command configures an interface as a static member of the multicast groups with all multicast source addresses.
dot1q vid vlan-list: Specifies a space-separated list of up to 10 outer VLAN ID items. Each item specifies an outer VLAN ID or a range of outer VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this option, the command configures an interface as a single-VLAN-tagged static member interface for a multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.
dot1q vid vlan-id second-dot1q vlan-list: Specifies the outer and inner VLAN IDs. The vlan-id argument specifies the outer VLAN ID in the range of 1 to 4094. The vlan-list argument specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this option, the command configures an interface as a double-VLAN-tagged static member interface for a multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.
all: Specifies all multicast groups that the interface has statically joined.
Usage guidelines
For multicast routing entries to be created, you must specify a multicast source if the specified multicast group is in the SSM group range.
For the same multicast group, the non-VLAN-based, single-VLAN-based, or double-VLAN-based static member interface configurations are mutually exclusive.
When you configure a subinterface as a non-VLAN-based static member interface, do not configure the igmp join-by-session or igmp user-vlan-aggregation dot1q command on this subinterface. If you configure either of the commands on the subinterface, static multicast forwarding entries cannot be created.
When you configure a subinterface as a VLAN-based static member interface, a static multicast forwarding entry can be created under either of the following conditions:
· Users that belong to the specified VLANs come online if the igmp user-vlan-aggregation dot1q command is not configured on the subinterface.
· The VLAN IDs specified in this command are the same as or included in the VLAN IDs specified in the igmp user-vlan-aggregation dot1q command configured on the subinterface.
When you configure an interface as a static group member of multiple multicast groups or multicast sources and groups in batch, follow these restrictions and guidelines:
· Multicast group addresses in different batch configurations can overlap.
· The undo command does not support deleting one multicast group from batch configuration. When you delete a batch configuration, make sure the setting in the undo command matches the batch configuration.
· If two batch configurations have the same parameter settings except the setting of the number group-number option, the new configuration takes effect.
If you specify a mask length step in batch configuration, the system coverts the mask length to the mask in the output from the javascript:void(0) command. The conversion format is group-mask = 1 << (32 – group-mask-length), where the double left angle brackets ( <<) is a bitwise left shift operator. For example, 1 << 0 represents 0.0.0.1, 1 << 1 represents 0.0.0.2, and 1 << 3 represents 0.0.0.8.
Examples
# Configure GigabitEthernet 1/0/1 as a static group member of multicast groups 224.1.1.1 and 224.1.1.2 in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the mask step is 0.0.0.1, and the number of multicast groups is 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2
# Configure GigabitEthernet 1/0/1 as a static group member of multicast sources and groups (192.168.1.1, 224.1.1.1) and (192.168.1.1, 224.1.1.2) in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the multicast source address is 192.168.1.1, the mask step is 0.0.0.1, and the number of multicast groups is 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2 source 192.168.1.1
# Configure GigabitEthernet 1/0/1.1 as a VLAN-based static group member of multicast groups 224.1.1.1 and 224.1.1.2 in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the mask step is 0.0.0.1, the number of multicast groups is 2, and the VLAN ID is 10.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1.1
[Sysname-GigabitEthernet1/0/1.1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2 dot1q vid 10
igmp user-vlan-aggregation dot1q
Use igmp user-vlan-aggregation dot1q to configure VLAN tagging on multicast packets.
Use undo igmp user-vlan-aggregation dot1q to restore the default.
Syntax
igmp user-vlan-aggregation dot1q vid vlan-id [ second-dot1q vlan-id ]
undo igmp user-vlan-aggregation dot1q
Default
The multicast packets are not tagged.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Predefined user roles
network-admin
Parameters
vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094.
second-dot1q vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094.
Usage guidelines
The igmp join-by-session and igmp user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.
Examples
# Configure the multicast packets to be tagged with outer VLAN ID 10 and inner VLAN ID 20 on GigabitEthernet 3/1/1.1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1.1
[Sysname-GigabitEthernet3/1/1.1] igmp user-vlan-aggregation dot1q vid 10 second-dot1q 20
igmp version
Use igmp version to specify an IGMP version on an interface.
Use undo igmp version to restore the default.
Syntax
igmp version version-number
undo igmp version
Default
The IGMP version on an interface is 2.
Views
Interface view
Predefined user roles
network-admin
Parameters
version-number: Specifies an IGMP version in the range of 1 to 3.
Examples
# Specify IGMP version 1 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] igmp version 1
last-member-query-count (IGMP view)
Use last-member-query-count to set the IGMP last member query count globally.
Use undo last-member-query-count to restore the default.
Syntax
last-member-query-count count
undo last-member-query-count
Default
The IGMP last member query count equals the IGMP querier's robustness variable.
Views
IGMP view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP last member query count in the range of 1 to 255.
Usage guidelines
You can set the IGMP last member query count globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP last member query count to 6 on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] last-member-query-count 6
igmp last-member-query-count
last-member-query-interval (IGMP view)
Use last-member-query-interval to set the IGMP last member query interval globally.
Use undo last-member-query-interval to restore the default.
Syntax
last-member-query-interval interval
undo last-member-query-interval
Default
The IGMP last member query interval is 1 second.
Views
IGMP view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP last member query interval in the range of 1 to 25 seconds.
Usage guidelines
You can set the IGMP last member query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP last member query interval to 6 seconds on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] last-member-query-interval 6
igmp last-member-query-interval
max-response-time (IGMP view)
Use max-response-time to set the maximum response time for IGMP general queries globally.
Use undo max-response-time to restore the default.
Syntax
max-response-time time
undo max-response-time
Default
The maximum response time for IGMP general queries is 10 seconds.
Views
IGMP view
Predefined user roles
network-admin
Parameters
time: Specifies the maximum response time for IGMP general queries in the range of 1 to 3174 seconds.
Usage guidelines
You can set the maximum response time globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
#Set the global maximum response time for IGMP general queries to 25 seconds on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] max-response-time 25
Related commands
igmp max-response-time
other-querier-present-interval (IGMP view)
Use other-querier-present-interval to set the IGMP other querier present timer globally.
Use undo other-querier-present-interval to restore the default.
Syntax
other-querier-present-interval interval
undo other-querier-present-interval
Default
The IGMP other querier present timer is calculated by using the following formula:
[ IGMP general query interval ] × [ IGMP querier's robustness variable ] + [ maximum response time for IGMP general queries ] / 2.
Views
IGMP view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP other querier present timer in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP other querier present timer globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP other querier present timer to 125 seconds on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] other-querier-present-interval 125
Related commands
igmp other-querier-present-interval
proxy multipath (IGMP view)
Use proxy multipath to enable load splitting on an IGMP proxy device.
Use undo proxy multipath to disable load splitting on an IGMP proxy device.
Syntax
proxy multipath
undo proxy multipath
Default
The load splitting feature is disabled on the IGMP proxy device.
Views
IGMP view
Predefined user roles
network-admin
Usage guidelines
Use this feature when the IGMP proxy device has multiple proxy interfaces. All proxy interfaces on the IGMP proxy device share multicast traffic on a per-group basis. If you do not enable this feature, only the proxy interface with the highest IP address forwards multicast data.
Examples
# Enable load splitting on the IGMP proxy device on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] proxy multipath
query-interval (IGMP view)
Use query-interval to set the IGMP general query interval globally.
Use undo query-interval to restore the default.
Syntax
query-interval interval
undo query-interval
Default
The IGMP general query interval is 125 seconds.
Views
IGMP view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP general query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP general query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP general query interval to 60 seconds on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] query-interval 60
Related commands
igmp query-interval
reset igmp attack-suppression per-interface entry
Use reset igmp attack-suppression per-interface entry to remove interface-based IGMP suppression entries.
Syntax
In standalone mode:
reset igmp attack-suppression per-interface entry { all | slot slot-number { all | interface interface-type interface-number } }
In IRF mode:
reset igmp attack-suppression per-interface entry { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
Examples
# Remove all interface-based IGMP suppression entries.
<Sysname> reset igmp attack-suppression per-interface entry all
Related commands
display igmp attack-suppression per-interface entry
reset igmp attack-suppression per-interface statistics
Use reset igmp attack-suppression per-interface statistics to clear IGMP packet statistics about interface-based IGMP suppression entries.
Syntax
In standalone mode:
reset igmp attack-suppression per-interface statistics { all | slot slot-number { all | interface interface-type interface-number } }
In IRF mode:
reset igmp attack-suppression per-interface statistics { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
This command clears statistics about the following fields in the output from the display igmp attack-suppression per-interface entry verbose command: CPU receive, CPU drop, and Drv drop.
Examples
# Clear IGMP packet statistics about all interface-based IGMP suppression entries.
<Sysname> reset igmp attack-suppression per-interface statistics all
Related commands
display igmp attack-suppression per-interface entry
reset igmp attack-suppression source-mac entry
Use reset igmp attack-suppression source-mac entry to remove source MAC-based IGMP suppression entries.
Syntax
In standalone mode:
reset igmp attack-suppression source-mac entry { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
In IRF mode:
reset igmp attack-suppression source-mac entry { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
mac-address address: Specifies a MAC address.
Examples
# Remove all source MAC-based IGMP suppression entries.
<Sysname> reset igmp attack-suppression source-mac entry all
Related commands
display igmp attack-suppression source-mac entry
reset igmp attack-suppression source-mac statistics
Use reset igmp attack-suppression source-mac statistics to clear IGMP packet statistics about source MAC-based IGMP suppression entries.
Syntax
In standalone mode:
reset igmp attack-suppression source-mac statistics { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
In IRF mode:
reset igmp attack-suppression source-mac statistics { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
mac-address address: Specifies a MAC address.
Usage guidelines
This command clears statistics about the following fields in the output from the display igmp attack-suppression source-mac entry verbose command: CPU receive, CPU drop, and Drv drop.
Examples
# Clear IGMP packet statistics about all source MAC-based IGMP suppression entries.
<Sysname> reset igmp attack-suppression source-mac statistics all
Related commands
display igmp attack-suppression source-mac entry
reset igmp group
Use reset igmp group to clear dynamic IGMP multicast group entries.
Syntax
reset igmp [ vpn-instance vpn-instance-name ] group { all | interface interface-type interface-number { all | group-address [ mask { mask | mask-length } ] [ source-address [ mask { mask | mask-length } ] ] } }
Views
User view
Predefined user roles
network-admin
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears dynamic IGMP multicast group entries on the public network.
all: Specifies all interfaces (the first all), or all IGMP multicast groups (the second all).
interface-type interface-number: Specifies an interface by its type and number.
group-address: Specifies a multicast group by its IP address in the range of 224.0.0.0 to 239.255.255.255.
source-address: Specifies a multicast source address. If you do not specify a multicast source, this command clears dynamic IGMP multicast group entries for all multicast source addresses.
mask: Specifies an address mask. The default is 255.255.255.255.
mask-length: Specifies an address mask length. The default is 32. For a multicast group address, the value range for this argument is 4 to 32. For a multicast source address, the value range for this argument is 0 to 32.
Usage guidelines
This command might interrupt the multicast information transmission.
Examples
# Clear dynamic IGMP multicast group entries for all interfaces on the public network.
<Sysname> reset igmp group all
# Clear all dynamic IGMP multicast group entries for GigabitEthernet 3/1/1 on the public network.
<Sysname> reset igmp group interface gigabitethernet 3/1/1 all
# Clear the dynamic IGMP multicast group entry of group 225.0.0.1 for GigabitEthernet 3/1/1 on the public network.
<Sysname> reset igmp group interface gigabitethernet 3/1/1 225.0.0.1
robust-count (IGMP view)
Use robust-count to set the IGMP querier's robustness variable globally.
Use undo robust-count to restore the default.
Syntax
robust-count count
undo robust-count
Default
The IGMP querier's robustness variable is 2.
Views
IGMP view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP querier's robustness variable in the range of 1 to 255.
Usage guidelines
The IGMP querier's robustness variable defines the number of times to retransmit queries if packet loss occurs. A higher robustness variable makes the IGMP querier more robust, but it increases the timeout time for multicast groups.
You can set the IGMP querier's robustness variable globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP querier's robustness variable to 5 on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] robust-count 5
Related commands
igmp robust-count
ssm-mapping (IGMP view)
Use ssm-mapping to configure an IGMP SSM mapping.
Use undo ssm-mapping to delete IGMP SSM mappings.
Syntax
ssm-mapping source-address ipv4-acl-number
undo ssm-mapping { source-address | all }
Default
No IGMP SSM mappings exist.
Views
IGMP view
Predefined user roles
network-admin
Parameters
source-address: Specifies a multicast source by its IP address.
ipv4-acl-number: Specifies a basic ACL number in the range of 2000 to 2999. Multicast groups in IGMP reports permitted by the ACL are associated with the IPv6 multicast source. If the ACL does not exist or does not have valid rules, no multicast groups are associated with the IPv6 multicast source.
all: Specifies all IGMP SSM mappings.
Usage guidelines
When you configure a rule in the IPv4 basic ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· The source source-address source-wildcard option specifies a multicast group address.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
Examples
# Configure an IGMP SSM mapping with multicast source 125.1.1.1 and multicast group range 232.1.1.0/24 on the public network.
<Sysname> system-view
[Sysname] acl basic 2001
[Sysname-acl-ipv4-basic-2001] rule permit source 232.1.1.1 0.0.0.255
[Sysname-acl-ipv4-basic-2001] quit
[Sysname] igmp
[Sysname-igmp] ssm-mapping 125.1.1.1 2001
Related commands
display igmp ssm-mapping
startup-query-count (IGMP view)
Use startup-query-count to set the IGMP startup query count globally.
Use undo startup-query-count to restore the default.
Syntax
startup-query-count count
undo startup-query-count
Default
The IGMP startup query count equals the IGMP querier's robustness variable.
Views
IGMP view
Predefined user roles
network-admin
Parameters
count: Specifies an IGMP startup query count in the range of 1 to 255.
Usage guidelines
You can set the IGMP startup query count globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP startup query count to 5 on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] startup-query-count 5
Related commands
igmp startup-query-count
startup-query-interval (IGMP view)
Use startup-query-interval to set the IGMP startup query interval globally.
Use undo startup-query-interval to restore the default.
Syntax
startup-query-interval interval
undo startup-query-interval
Default
The IGMP startup query interval equals one quarter of the IGMP general query interval.
Views
IGMP view
Predefined user roles
network-admin
Parameters
interval: Specifies an IGMP startup query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the IGMP startup query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global IGMP startup query interval to 100 seconds on the public network.
<Sysname> system-view
[Sysname] igmp
[Sysname-igmp] startup-query-interval 100
Related commands
igmp startup-query-interval