- Table of Contents
-
- 08-IP Multicast Command Reference
- 00-Preface
- 01-IGMP snooping commands
- 02-PIM snooping commands
- 03-Multicast VLAN commands
- 04-Multicast routing and forwarding commands
- 05-IGMP commands
- 06-PIM commands
- 07-MSDP commands
- 08-Multicast VPN commands
- 09-MLD snooping commands
- 10-IPv6 PIM snooping commands
- 11-IPv6 multicast VLAN commands
- 12-IPv6 multicast routing and forwarding commands
- 13-MLD commands
- 14-IPv6 PIM commands
- Related Documents
-
Title | Size | Download |
---|---|---|
13-MLD commands | 235.82 KB |
display mld attack-suppression per-interface configuration
display mld attack-suppression per-interface entry
display mld attack-suppression source-mac configuration
display mld attack-suppression source-mac entry
display mld proxy routing-table
display mld user-authorization
last-listener-query-count (MLD view)
last-listener-query-interval (MLD view)
mld attack-suppression per-interface aging-time
mld attack-suppression per-interface check-interval
mld attack-suppression per-interface enable
mld attack-suppression per-interface threshold
mld attack-suppression source-mac aging-time
mld attack-suppression source-mac check-interval
mld attack-suppression source-mac enable
mld attack-suppression source-mac threshold
mld last-listener-query-interval
mld other-querier-present-timeout
mld user-vlan-aggregation dot1q
other-querier-present-timeout (MLD view)
reset mld attack-suppression per-interface entry
reset mld attack-suppression per-interface statistics
reset mld attack-suppression source-mac entry
reset mld attack-suppression source-mac statistics
startup-query-count (MLD view)
startup-query-interval (MLD view)
MLD commands
display mld attack-suppression per-interface configuration
Use display mld attack-suppression per-interface configuration to display the configuration of interface-based MLD suppression.
Syntax
display mld attack-suppression per-interface configuration
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the configuration of interface-based MLD suppression.
<Sysname> display mld attack-suppression per-interface configuration
MLD attack-suppression per-interface is enabled.
Check interval: 5s
Threshold: 20
Aging time: 300s
Table 1 Command output
Field |
Description |
Check interval |
Check interval of interface-based MLD suppression. |
Threshold |
Threshold for triggering interface-based MLD suppression. |
Aging time |
Aging time of interface-based MLD suppression entries. |
Related commands
mld attack-suppression per-interface aging-time
mld attack-suppression per-interface check-interval
mld attack-suppression per-interface enable
mld attack-suppression per-interface threshold
display mld attack-suppression per-interface entry
Use display mld attack-suppression per-interface entry to display interface-based MLD suppression entries.
Syntax
In standalone mode:
display mld attack-suppression per-interface entry slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]
In IRF mode:
display mld attack-suppression per-interface entry chassis chassis-number slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays interface-based MLD suppression entries for all interfaces.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
attack: Displays interface-based MLD suppression entries for MLD attack packets. If you do not specify this keyword, the command displays all interface-based MLD suppression entries that have been created.
verbose: Displays detailed information about interface-based MLD suppression entries. If you do not specify this keyword, the command displays brief information about interface-based MLD suppression entries.
Examples
# (In standalone mode.) Display interface-based MLD suppression entries for MLD attack packets.
<Sysname> display mld attack-suppression per-interface entry slot1 attack
Total entries: 1
Interface Attack start time Expires
GE3/1/4 2018/09/10 15:53:34 00:01:15
# (In standalone mode.) Display detailed information about interface-based MLD suppression entries.
<Sysname> display mld attack-suppression per-interface entry slot1 verbose
Total entries: 2
Interface: GE3/1/1
Drv status: N/A
Attack start time: N/A
Expires: Off
CPU receive: 10
CPU drop: 0
Drv drop: 0
Interface: GE3/1/2
Drv status: Succeeded
Attack start time: 2018/09/10 15:53:34
Expires: 00:01:15
CPU receive: 123456789
CPU drop: 123456
Drv drop: 18446744073709551615
Table 2 Command output
Field |
Description |
Total entries |
Total number of MLD suppression entries. |
Interface |
Interface name. |
Drv status |
Driver status: · Succeeded—The driver limits the MLD packet rate. · Failed—The CPU limits the MLD packet rate. The device has failed or hardware resources for MLD suppression entries have been used up. · N/A—The incoming MLD packets are not attack packets and the device does not limit the packet rate. |
Time when the MLD packet attack started. This field displays N/A if no MLD attack is detected. |
|
Expires |
Remaining time of the MLD suppression entry aging timer. This field displays Off if the aging timer is disabled. |
CPU receive |
Number of packets that the CPU received. |
CPU drop |
Number of packets dropped by the CPU. |
Drv drop |
Number of packets dropped by the driver. |
Related commands
reset mld attack-suppression per-interface entry
display mld attack-suppression source-mac configuration
display mld attack-suppression source-mac configuration to display the configuration of source MAC-based MLD suppression.
Syntax
display mld attack-suppression source-mac configuration
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the configuration of source MAC-based MLD suppression.
<Sysname> display mld attack-suppression source-mac configuration
MLD attack-suppression source-mac is enabled.
Check interval: 5s
Threshold: 20
Aging time: 300s
Table 3 Command output
Field |
Description |
Check interval |
Check interval of source MAC-based MLD suppression. |
Threshold |
Threshold for triggering source MAC-based MLD suppression. |
Aging time |
Aging time of source MAC-based MLD suppression entries. |
Related commands
mld attack-suppression source-mac aging-time
mld attack-suppression source-mac check-interval
mld attack-suppression source-mac enable
mld attack-suppression source-mac threshold
display mld attack-suppression source-mac entry
Use display mld attack-suppression source-mac entry to display source MAC-based MLD suppression entries.
Syntax
In standalone mode:
display mld attack-suppression source-mac entry slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]
In IRF mode:
display mld attack-suppression source-mac entry chassis chassis-number slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays source MAC-based MLD suppression entries for all interfaces.
mac-address address: Specifies a source MAC address. If you do not specify this option, the command displays MLD suppression entries for all MAC addresses.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
attack: Displays source MAC-based MLD suppression entries for MLD attack packets. If you do not specify this keyword, the command displays all source MAC-based MLD suppression entries that have been created.
verbose: Displays detailed information about source MAC-based MLD suppression entries. If you do not specify this keyword, the command displays brief information about source MAC-based MLD suppression entries.
Examples
# (In standalone mode.) Display source MAC-based MLD suppression entries.
<Sysname> display mld attack-suppression source-mac entry slot1 attack
Total entries: 1
Interface MAC address Attack start time Expires
GE3/1/4 0001-0001-0004 2018/09/10 15:53:34 00:01:15
# (In standalone mode.) Display detailed information about source MAC-based MLD suppression entries.
<Sysname> display mld attack-suppression source-mac entry slot1 verbose
Total entries: 2
Interface: GE3/1/1
MAC address: 0001-0001-0001
Drv status: N/A
Attack start time: N/A
Expires: Off
CPU receive: 10
CPU drop: 0
Drv drop: 0
Interface: GE3/1/2
MAC address: 0001-0001-0002
Drv status: Succeeded
Attack start time: 2018/09/10 15:53:34
Expires: 00:01:15
CPU receive: 123456789
CPU drop : 123456
Drv drop : 18446744073709551615
Table 4 Command output
Field |
Description |
Total entries |
Total number of MLD suppression entries. |
Interface |
Interface name. |
MAC address |
MAC address of the attacker. |
Driver status: · Succeeded—MLD attack packets are dropped by the driver. · Failed—MLD attack packets are dropped by the CPU. The device has failed or hardware resources for MLD suppression entries have been used up. · N/A—The incoming MLD packets are not attack packets and they are not dropped. |
|
Attack start time |
Time when the MLD packet attack started. This field displays N/A if no MLD attack is detected. |
Expires |
Remaining time of the MLD suppression entry aging timer. This field displays Off if the aging timer is disabled. |
CPU receive |
Number of packets that the CPU received. |
CPU drop |
Number of packets dropped by the CPU. |
Drv drop |
Number of packets dropped by the driver. |
Related commands
reset mld attack-suppression source-mac entry
display mld group
Use display mld group to display information about MLD multicast groups (IPv6 multicast groups that hosts have joined through MLD).
Syntax
display mld group [ ipv6-group-address | interface interface-type interface-number ] [ static | verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6-group-address: Specifies an IPv6 multicast group address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays information about all MLD multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about MLD multicast groups for all interfaces.
static: Specifies MLD multicast groups that hosts have joined statically. If you do not specify this keyword, the command displays information about MLD multicast groups that hosts have joined dynamically.
verbose: Displays detailed information about MLD multicast groups.
Examples
# Display information about MLD multicast groups that hosts have dynamically joined on the public network.
<Sysname> display mld group
MLD groups in total: 1
GigabitEthernet3/1/1(FE80::101):
MLD groups reported in total: 1
Group address: FF03::101
Last reporter: FE80::10
Uptime: 00:02:04
Expires: 00:01:15
Table 5 Command output
Field |
Description |
MLD groups in total |
Total number of MLD multicast groups. |
MLD groups reported in total |
Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically. |
Group address |
IPv6 multicast group address. |
Last reporter |
IPv6 address of the receiver host that last reported membership for the group. |
Uptime |
Length of time since the IPv6 multicast group was joined. |
Expires |
Remaining lifetime for the IPv6 multicast group. This field displays Off if the timer is disabled. |
# Display detailed information about MLD multicast group FF3E::101 that hosts have statically joined on the public network. In this example, the router is configured with MLDv2.
<Sysname> display mld group ff3e::101 verbose
GigabitEthernet3/1/1(FE80::101):
MLD groups reported in total: 1
Group: FF3E::101
Uptime: 00:01:46
Exclude expires: 00:04:16
Mapping expires: 00:02:16
Last reporter: FE80::10
Last-listener-query-counter: 0
Last-listener-query-timer-expiry: Off
Mapping last-listener-query-counter: 0
Mapping last-listener-query-timer-expiry: Off
Group mode: Exclude
Version1-host-present-timer-expiry: Off
Source list (sources in total: 1):
Source: 10::10
Uptime: 00:00:09
V2 expires: 00:04:11
Mapping expires: 00:02:16
Last-listener-query-counter: 0
Last-listener-query-timer-expiry: Off
Table 6 Command output
Field |
Description |
MLD groups reported in total |
Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically. |
Group |
IPv6 multicast group address. |
Uptime |
Length of time since the IPv6 multicast group was reported. |
Exclude expires |
Remaining time for the IPv6 multicast group in Exclude mode. This field displays Off if the timer is disabled. |
Mapping expires |
Remaining time for the IPv6 multicast group specified in MLD SSM mappings. This field is displayed only when the device is configured with MLD SSM mappings. |
Last reporter |
IPv6 address of the receiver host that last reported membership for this group. |
Last-listener-query-counter |
Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group. |
Last-listener-query-timer-expiry |
Remaining time for the MLD last listener query timer for the multicast group. This field displays Off if the timer is disabled. |
Mapping last-listener-query-counter |
Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast group specified in MLD SSM mappings. This field is displayed only when the device is configured with MLD SSM mappings. |
Mapping last-listener-query-timer-expiry |
Remaining time for the last listener query timer of the IPv6 multicast group specified in MLD SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with MLD SSM mappings. |
Group mode |
IPv6 multicast source filtering mode: · Include—Include mode. · Exclude—Exclude mode. For a device that runs MLDv1: · If MLD SSM mappings are not configured, this field displays Exclude. · If MLD SSM mappings are configured, this field displays Include or Exclude depending on the SSM mappings and the IPv6 multicast groups that the host joins. |
Version1-host-present-timer-expiry |
Remaining time for the MLDv1 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs MLDv2. |
Source list (sources in total 1) |
List of IPv6 multicast sources and total number of IPv6 multicast sources. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings. |
Source |
IPv6 multicast source address. This field is displayed only when the device runs MLDv2 or the device is configured with MLD SSM mappings. |
Uptime |
Length of time since the IPv6 multicast source was reported. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings. |
V2 expires |
Remaining time for the IPv6 multicast source when the device runs MLDv2. This field displays Off if the timer is disabled. This field displays three hyphens (---) if the IPv6 multicast source is specified in MLD SSM mappings. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings. |
Mapping expires |
Remaining time for the IPv6 multicast sources specified in MLD SSM mappings. |
Last-listener-query-counter |
Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast source and group. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings. |
Last-listener-query-timer-expiry |
Remaining time for the last listener query timer for the IPv6 multicast source and group. This field displays Off if the timer is disabled. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings. |
# Display information about the MLD multicast groups that hosts have statically joined on the public network.
<Sysname> display mld group static
Entries in total: 2
(*, FF03::101)
Interface: GE3/1/1
Expires: Never
(2001::101, FF3E::202)
Interface: GE3/1/1
Expires: Never
Table 7 Command output
Field |
Description |
Entries in total |
Total number of the IPv6 multicast groups that hosts have joined statically. |
(*, FF03::101) |
(*, G) entry. |
(2001::101, FF3E::202) |
(S, G) entry. |
Expires |
Remaining lifetime for the IPv6 multicast group. This field always displays Never, which means that the IPv6 multicast group never expires. |
reset mld group
display mld interface
Use display mld interface to display MLD information for interfaces.
Syntax
display mld interface [ interface-type interface-number ] [ proxy ] [ verbose ]
display mld interface [ access-interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
access-interface interface-type interface-number: Specifies an access interface by its type and number, which is the actual interface through which a multicast user accesses the network.
interface-type interface-number: Specifies an interface by its type and number.
proxy: Displays the MLD proxy interface information.
verbose: Displays detailed MLD information.
Usage guidelines
A multicast-UA interface is a virtual interface created for maintaining MLD information.
When an IPoE, PPPoE, or portal user assigned with the STB service comes online, the access module sends a notification to MLD. If per-session IPv6 multicast forwarding is enabled on the access interface, MLD creates a multicast-UA interface for the user upon receiving the notification. When the user goes offline, MLD deletes the multicast-UA interface immediately after receiving the notification from the access module. For more information about specifying the STB service for users in an ISP domain, see AAA configuration in BRAS Services Configuration Guide.
When a user comes online through an interface configured with QinQ and per-session IPv6 multicast forwarding, MLD creates a multicast-UA interface upon receiving an MLD report from the user. For users that belong to the same SVLAN and CVLAN, only one multicast-UA interface is created. The multicast-UA interface ages out if the interface neither maintains membership information for any IPv6 multicast groups nor receives MLD reports for a period of time. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.
To display MLD information for multicast-UA interfaces created for multicast users that come online through the same access interface, specify the access-interface interface-type interface-number option.
If you do not specify any parameters, this command displays MLD information for all interfaces.
Examples
# Display detailed MLD information for GigabitEthernet 3/1/1 (non-proxy interface) on the public network.
<Sysname> display mld interface gigabitethernet 3/1/1 verbose
GigabitEthernet3/1/1(FE80::200:AFF:FE01:101):
MLD is enabled.
MLD version: 1
Query interval for MLD: 125s
Other querier present time for MLD: 255s
Maximum query response time for MLD: 10s
Last listener query interval: 1s
Last listener query count: 2
Startup query interval: 31s
Startup query count: 2
General query timer expiry (hh:mm:ss): 00:00:23
Querier for MLD: FE80::200:AFF:FE01:101 (This router)
MLD activity: 1 join(s), 0 done(s)
IPv6 multicast routing on this interface: Enabled
Robustness: 2
Require-router-alert: Disabled
Fast-leave: Disabled
Startup-query: Off
Other-querier-present-timer-expiry (hh:mm:ss): Off
Authorization: Disabled
Join-by-session: Disabled
User-VLAN-aggregation: Disabled
Access interface: GigabitEthernet3/1/1
MLD groups reported in total: 1
# Display detailed MLD information for all MLD proxy interfaces on the public network.
<Sysname> display mld interface proxy verbose
GigabitEthernet3/1/2(FE80::100:CEF:FE01:101):
MLD proxy is enabled.
MLD version: 1
IPv6 multicast routing on this interface: Enabled
Require-router-alert: Disabled
Version1-querier-present-timer-expiry (hh:mm:ss): Off
# Display detailed MLD information for user access interface GigabitEthernet 3/1/2 on the public network.
<Sysname> display mld interface access-interface gigabitethernet 3/1/2 verbose
Multicast-UA0(FE80::102:2):
MLD is enabled.
MLD version: 1
Query interval for MLD: 125s
Other querier present time for MLD: 255s
Maximum query response time for MLD: 10s
Last listener query interval: 1s
Last listener query count: 2
Startup query interval: 31s
Startup query count: 2
General query timer expiry (hh:mm:ss): 00:01:14
Querier for MLD: FE80::102:2 (This router)
MLD activity: 0 join(s), 0 done(s)
IPv6 multicast routing on this interface: Enabled
Robustness: 2
Require-router-alert: Disabled
Fast-leave: Disabled
Startup-query: Off
Other-querier-present-timer-expiry (hh:mm:ss): Off
Authorization: Disabled
Join-by-session: Enabled
User-VLAN-aggregation: Disabled
Access interface: GigabitEthernet3/1/2
MLD groups reported in total: 1
Table 8 Command output
Field |
Description |
GigabitEthernet3/1/1(FE80::200:AFF:FE01:101) |
Interface and its IPv6 link-local address. |
MLD is enabled |
MLD is enabled on the interface. |
MLD version |
Version of MLD that the interface runs. |
Query interval for MLD |
MLD query interval, in seconds. |
Other querier present time for MLD |
MLD other querier present interval, in seconds. |
Maximum query response time for MLD |
Maximum response time for MLD general query messages, in seconds. |
Last listener query interval |
Interval for sending MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries, in seconds. |
Last listener query count |
Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group. |
Startup query interval |
MLD startup query interval, in seconds. |
Startup query count |
Number of MLD general queries sent on startup. |
General query timer expiry |
Remaining time for the MLD general query timer. This field displays Off if the timer is disabled. |
Querier for MLD |
IPv6 link-local address of the MLD querier. |
MLD activity: 1 join(s), 0 done(s) |
MLD activity statistics: · join(s)—Total number of IPv6 multicast groups that the interface has joined. · done(s)—Total number of IPv6 multicast groups that the interface has left. |
IPv6 multicast routing on this interface |
Whether IPv6 multicast routing is enabled: Enabled or Disabled. |
Robustness |
Robustness variable of the MLD querier. |
Require-router-alert |
Whether the feature of dropping MLD messages without Router-Alert is enabled: Enabled or Disabled. |
Fast-leave |
Whether fast-leave processing is enabled: Enabled or Disabled. |
Startup-query |
Whether the MLD querier sends MLD general queries at the startup query interval on startup: · On—The MLD querier performs the above action. · Off—The MLD querier does not perform the above action. |
Other-querier-present-timer-expiry |
Remaining time for MLD other querier present timer. This field displays Off if the timer is disabled. |
Authorization |
Whether the IPv6 multicast access control feature is enabled: Enabled or Disabled. |
Join-by-session |
Whether the per-session IPv6 multicast forwarding feature is enabled: Enabled or Disabled. |
User-VLAN-aggregation |
Whether the IPv6 multicast packet VLAN tagging feature is enabled: Enabled or Disabled. |
Access interface |
Actual interface through which the multicast user accesses the network. This field is displayed only when MLD information is maintained on a multicast-UA interface. |
MLD groups reported in total |
Total number of IPv6 multicast groups that the interface has joined dynamically. This field is not displayed if the interface does not join IPv6 multicast groups. |
MLD proxy is enabled |
MLD proxying is enabled. |
Version1-querier-present-timer-expiry |
Remaining time for the MLDv1 querier present timer. This field displays Off if the timer is disabled. |
display mld proxy group
Use display mld proxy group to display information about IPv6 multicast groups maintained by the MLD proxy.
Syntax
display mld proxy group [ ipv6-group-address | interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast group membership entries for all IPv6 multicast groups.
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about IPv6 multicast groups maintained by the MLD proxy for all interfaces.
verbose: Displays detailed information.
Examples
# Display information about IPv6 multicast groups maintained by the MLD proxy on the public network.
<Sysname> display mld proxy group
MLD proxy group records in total: 2
GigabitEthernet3/1/1(FE80::16:1):
MLD proxy group records in total: 2
Group address: FF1E::1
Member state: Idle
Expires: Off
Group address: FF1E::2
Member state: Idle
Expires: Off
# Display detailed information about IPv6 multicast group FF1E::1 maintained by the MLD proxy on the public network.
<Sysname> display mld proxy group ff1e::1 verbose
GigabitEthernet3/1/1(FE80::16:1):
MLD proxy group records in total: 2
Group: FF1E::1
Group mode: Include
Member state: Idle
Expires: Off
Source list (sources in total: 1):
100::1
Table 9 Command output
Field |
Description |
MLD proxy group records in total |
Total number of IPv6 multicast group membership entries maintained by the MLD proxy. |
GigabitEthernet3/1/1(FE80::16:1) |
Interface and its IPv6 address. |
Pending proxy group |
Pending IPv6 multicast group membership entries maintained by the MLD proxy. |
Group address/Group |
IPv6 multicast group address. |
Member state |
Member host states: · Delay—The member host has joined a group and started a delay timer. · Idle—The member host has joined a group, but didn't start a delay timer. |
Expires |
Remaining delay time for a member host to send a responding report. This field displays Off if the timer is disabled. |
Group mode |
IPv6 multicast source filtering mode: · Include. · Exclude. |
Source list (sources in total: 1) |
List of IPv6 multicast sources in the group membership database maintained by the MLD proxy, and the total number of the IPv6 multicast sources. |
display mld proxy routing-table
Use display mld proxy routing-table to display IPv6 multicast routing entries maintained by the MLD proxy.
Syntax
display mld proxy routing-table [ ipv6-source-address [ prefix-length ] | ipv6-group-address [ prefix-length ] ] * [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays IPv6 multicast routing entries maintained by the MLD proxy for all IPv6 multicast sources.
ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast routing entries for all IPv6 multicast groups maintained by the MLD proxy.
prefix-length: Specifies an address prefix length. For an IPv6 multicast source address, the value range for this argument is 0 to 128. For an IPv6 multicast group address, the value range for this argument is 8 to 128. The default value is 128.
verbose: Displays detailed information about IPv6 multicast routing entries maintained by the MLD proxy.
Examples
# Display IPv6 multicast routing entries maintained by the MLD proxy on the public network.
<Sysname> display mld proxy routing-table
Total 1 (*, G) entries, 2 (S, G) entries.
(100::1, FF1E::1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: MLD
(*, FF1E::2)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: STATIC
(2::2, FF1E::2)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (2 in total):
1: LoopBack1
Protocol: STATIC
2: GigabitEthernet3/1/2
Protocol: PROXY
# Display detailed information about IPv6 multicast routing entries maintained by the MLD proxy on the public network.
<Sysname> display mld proxy routing-table verbose
Total 1 (*, G) entries, 2 (S, G) entries.
(100::1, FF1E::1)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: MLD
Querier state: Querier
Join/Prune state: Join
Non-downstream interfaces: None
(*, FF1E::2)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (1 in total):
1: GigabitEthernet3/1/2
Protocol: STATIC
Querier state: Querier
Join/Prune state: Join
Non-downstream interfaces (1 in total):
1: GigabitEthernet3/1/3
Protocol: MLD
Querier state: Non-querier
Join/Prune state: Join
(2::2, FF1E::2)
Upstream interface: GigabitEthernet3/1/1
Downstream interfaces (2 in total):
1: LoopBack1
Protocol: STATIC
Querier state: Querier
Join/Prune state: Join
2: GigabitEthernet3/1/2
Protocol: PROXY
Querier state: Querier
Join/Prune state: Join
Non-downstream interfaces: None
Table 10 Command output
Field |
Description |
Total 1 (*, G) entries, 2 (S, G) entries |
Total number of (*, G ), and the total number of (S, G) entries. |
(100::1, FF1E::1) |
(S, G) entry. |
Upstream interface |
Incoming interface of a forwarding entry. |
Downstream interfaces (1 in total) |
Outgoing interfaces, and the total number of outgoing interfaces. |
Non-downstream interfaces (1 in total) |
Non-outgoing interfaces, and the total number of non-outgoing interfaces. |
1: GigabitEthernet3/1/2 |
Index of an outgoing interface and the outgoing interface. |
Protocol |
Protocol type: · MLD—Dynamic MLD. · PROXY—MLD proxy. · STATIC—Static MLD. |
Querier state |
Querier state: · Querier. · Non-querier. |
Join/Prune state |
Joined or pruned state of the interface: · NI—Default state. · Join—Joined state. · Prune—Pruned state. |
display mld ssm-mapping
Use display mld ssm-mapping to display MLD SSM mappings.
Syntax
display mld ssm-mapping ipv6-group-address
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F.
Examples
# Display MLD SSM mappings for IPv6 multicast group FF3E::101 on the public network.
<Sysname> display mld ssm-mapping ff3e::101
Group: FF3E::101
Source list:
1::1
1::2
10::1
100::10
Table 11 Command output
Fields |
Description |
Group |
IPv6 multicast group address. |
Source list |
List of IPv6 multicast source addresses. |
display mld user-authorization
Use display mld user-authorization to display authorization information for MLD users.
Syntax
display mld user-authorization [ access-type { ipoe | portal | ppp } ] [ access-interface interface-type interface-number | interface interface-type interface-number ] [ active-user ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
access-type: Specifies an access type.
ipoe: Specifies the IPoE users.
portal: Specifies the portal users.
ppp: Specifies the PPP users.
access-interface interface-type interface-number: Specifies a user access interface by its type and number.
interface-type interface-number: Specifies an interface by its type and number.
active-user: Specifies MLD users that have joined IPv6 multicast groups.
Usage guidelines
If you do not specify any parameters, this command displays authorization information for all MLD users.
Examples
# Display information about all authorized MLD users.
<Sysname> display mld user-authorization
Authorized users in total: 3
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102::1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 10
User profile: profile1
Authorized program list:
FF03::101
User name: user2
Access type: IPoE
Interface: Multicast-UA0
Access interface: GigabitEthernet3/1/1.1
VLAN ID: 100
Second VLAN ID: 10
User address: 101::1
User ID: 0x40000001 (VLAN ID 100, Second VLAN ID 10)
Maximum allowed programs: 10
User profile: profile1
Authorized program list:
FF03::101
FF03::102
FF03::103
User name: user3
Access type: Portal
Interface: Multicast-UA1
Access interface: GigabitEthernet3/1/2
User address: 103::1
User ID: 0x10000001
Maximum allowed programs: 10
User profile: profile1
Authorized program list:
FF03::101
FF03::103
# Display authorization information for MLD users that have joined IPv6 multicast groups.
<Sysname> display mld user-authorization active-user
Authorized users in total: 3
Active users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102::1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
FF03::101
# Display authorization information for MLD users that access the network through PPP.
<Sysname> display mld user-authorization access-type ppp
Authorized users in total: 2
Matching users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102::1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 10
User profile: profile1
Authorized program list:
FF03::101
# Display authorization information for MLD users that access the network through PPP and have joined IPv6 multicast groups.
<Sysname> display mld user-authorization access-type ppp active-user
Authorized users in total: 2
Active users in total: 1
Matching users in total: 1
User name: user1@isp1
Access type: PPP
Interface: Multicast-UA2
Access interface: bas-interface1 (GigabitEthernet3/1/1.2)
User address: 102::1
User ID: 0x20000002 (Session ID 0x1)
Maximum allowed programs: 4
User profile: profile1
Authorized program list:
FF03::101
Table 12 Command output
Field |
Description |
Authorized users in total |
Total number of access users. |
Matching users in total |
Total number of matching MLD users. |
Access type |
Access type: IPoE, Portal, or PPP. |
Interface |
Multicast user interface. |
Access interface |
Actual interface through which the user accesses the network. |
User address |
IP address of the user. This field is not displayed if the device does not obtain the IP address of the user. |
Gateway address |
Gateway IP address of the user. This field is not displayed if the device does not obtain the gateway IP address of the user. |
User MAC address |
MAC address of the user. This field is not displayed if the device does not obtain the MAC address of the user. |
User ID |
ID of the user. |
Leased user ID |
ID of the IPoE leased user. This field is displayed only for IPoE leased users. |
Session ID |
ID of the user session. This field is displayed only for PPPoE users. |
VLAN ID |
Outer VLAN ID (or the unique VLAN ID) for the user. This field is not displayed if the user does not have a VLAN ID. |
Second VLAN ID |
Inner VLAN ID for the user. This field is not displayed if the user does not have an inner VLAN ID. |
PVC ID |
PVC ID. This field is displayed only when the multicast user accesses the network through an ATM interface. |
Maximum allowed programs |
Maximum number of the IPv6 multicast groups that the user can join. |
User profile |
User profile name of the authorized user. The user can join IPv6 multicast groups permitted by the MLD user access control policy in the user profile. You can use the mld access-policy command to configure an MLD user access control policy. |
Authorized program list |
List of the IPv6 multicast groups that the user is authorized to join. |
Active users in total |
Total number of MLD users that have joined IPv6 multicast groups. |
last-listener-query-count (MLD view)
Use last-listener-query-count to set the MLD last listener query count globally.
Use undo last-listener-query-count to restore the default.
Syntax
mld last-member-query-count count
undo mld last-member-query-count
Default
The MLD last listener query count equals the MLD querier's robustness variable.
Views
MLD view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD last listener query count in the range of 1 to 255.
Usage guidelines
You can set the MLD last listener query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD last listener query count to 6 on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] last-listener-query-count 6
Related commands
mld last-listener-query-count
last-listener-query-interval (MLD view)
Use last-listener-query-interval to set the MLD last listener query interval globally.
Use undo last-listener-query-interval to restore the default.
Syntax
last-listener-query-interval interval
undo last-listener-query-interval
Default
The MLD last listener query interval is 1 second.
Views
MLD view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.
Usage guidelines
You can set the MLD last listener query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD last listener query interval to 6 seconds on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] last-listener-query-interval 6
Related commands
mld last-listener-query-interval
max-response-time (MLD view)
Use max-response-time to set the maximum response time for MLD general queries globally.
Use undo max-response-time to restore the default.
Syntax
max-response-time time
undo max-response-time
Default
The maximum response time for MLD general queries is 10 seconds.
Views
MLD view
Predefined user roles
network-admin
Parameters
time: Specifies the maximum response time for MLD general queries in the range of 1 to 3174 seconds.
Usage guidelines
You can set the maximum response time globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global maximum response time for MLD general queries to 25 seconds on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] max-response-time 25
Related commands
mld max-response-time
mld
Use mld to enter MLD view.
Use undo mld to delete the configurations in MLD view.
Syntax
mld
undo mld
Views
System view
Predefined user roles
network-admin
Examples
# Enter MLD view of the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld]
mld access-policy
Use mld access-policy to configure an MLD user access policy.
Use undo mld access-policy to delete an MLD user access policy.
Syntax
mld access-policy ipv6-acl-number
undo mld access-policy ipv6-acl-number
Default
No MLD user access policies exist. MLD users are not authorized to join any IPv6 multicast groups.
Views
User profile view
Predefined user roles
network-admin
Parameters
ipv6-acl-number: Specifies an IPv6 basic or advanced ACL number, in the range of 2000 to 3999. MLD users can join only IPv6 multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, MLD users cannot join IPv6 multicast groups.
Usage guidelines
You can configure multiple MLD user access policies by using this command multiple times. An MLD report is permitted if it matches one of the access policies.
When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast source address.
· In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.
To match the following MLD reports, set the source source-address source-prefix option to 0::0:
¡ MLDv1 reports.
¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure an MLD user access policy in user profile abc to authorize MLD users to join IPv6 multicast group FF03::101.
<Sysname> system-view
[Sysname] acl ipv6 basic 2000
[Sysname-acl-ipv6-basic-2000] rule permit source ff03::101 128
[Sysname-acl-ipv6-basic-2000] quit
[Sysname] user-profile abc
[Sysname-user-profile-abc] mld access-policy 2000
mld attack-suppression per-interface aging-time
Use mld attack-suppression per-interface aging-time to set the aging time for interface-based MLD suppression entries.
Use undo mld attack-suppression per-interface aging-time to restore the default.
Syntax
mld attack-suppression per-interface aging-time time
undo mld attack-suppression per-interface aging-time
Default
The aging time is 30 seconds for interface-based MLD suppression entries.
Views
System view
Predefined user roles
network-admin
Parameters
time: Specifies the aging time of interface-based MLD suppression entries, in the range of 1 to 65535 seconds.
Usage guidelines
When the aging time of the MLD suppression entry on an interface expires, the device ages out the entry and stops limiting the packet rate only if no MLD attack exists on the interface. Then, the device recounts the number of incoming MLD packets on the interface to start a new MLD suppression process.
This command takes effect only after you execute the mld attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the aging time to 60 seconds for interface-based MLD suppression entries.
<Sysname> system-view
[Sysname] mld attack-suppression per-interface aging-time 60
mld attack-suppression per-interface check-interval
mld attack-suppression per-interface check-interval to set the check interval for interface-based MLD suppression.
undo mld attack-suppression per-interface check-interval to restore the default.
Syntax
mld attack-suppression per-interface check-interval interval
undo mld attack-suppression per-interface check-interval
Default
The check interval is 30 seconds for interface-based MLD suppression.
Views
System view
Predefined user roles
network-admin
Parameters
interval: Specifies the check interval for interface-based MLD suppression, in the range of 1 to 255 seconds.
Usage guidelines
This command takes effect only after you execute the mld attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the check interval to 10 seconds for interface-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression per-interface check-interval 10
mld attack-suppression per-interface enable
Use mld attack-suppression per-interface enable to enable interface-based MLD suppression.
Use undo mld attack-suppression per-interface enable to disable interface-based MLD suppression.
Syntax
mld attack-suppression per-interface enable
undo mld attack-suppression per-interface enable
Default
Interface-based MLD suppression is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The interface-based MLD suppression feature allows the device to create MLD suppression entries and count the number of received MLD packets on a per interface basis. When the number exceeds the threshold within the check interval, the device identifies these packets as attack packets and limits the rate for sending them to the CPU.
This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable MLD snooping globally on the device. MLD packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.
Examples
# Enable interface-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression per-interface enable
mld attack-suppression per-interface threshold
Use mld attack-suppression per-interface threshold to set the threshold for triggering interface-based MLD suppression.
Use undo mld attack-suppression per-interface threshold to restore the default.
Syntax
mld attack-suppression per-interface threshold threshold-value
undo mld attack-suppression per-interface threshold
Default
The threshold is 6000 for triggering interface-based MLD suppression.
Views
System view
Predefined user roles
network-admin
Parameters
threshold-value: Specifies the threshold for triggering interface-based MLD suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of MLD packets that an interface can receive within the check interval.
Usage guidelines
An interface is attacked if the number of received MLD packets on the interface exceeds the threshold within the check interval.
This command takes effect only after you execute the mld attack-suppression per-interface enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the threshold to 300 for triggering interface-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression per-interface threshold 300
mld attack-suppression source-mac aging-time
Use mld attack-suppression source-mac aging-time to set the aging time for source MAC-based MLD suppression entries.
Use undo mld attack-suppression source-mac aging-time to restore the default.
Syntax
mld attack-suppression source-mac aging-time time
undo mld attack-suppression source-mac aging-time
Default
The aging time is 30 seconds for source MAC-based MLD suppression entries.
Views
System view
Predefined user roles
network-admin
Parameters
time: Specifies the aging time of source MAC-based MLD suppression entries, in the range of 1 to 65535 seconds.in seconds.
Usage guidelines
When the aging time of the MLD attack suppression entry for a MAC address expires, the device ages out the entry and accepts packets from the MAC address only if the packets from the MAC address are not attack packets. Then, the device recounts the number of MLD packets from the MAC address to start a new MLD suppression process.
This command takes effect only after you execute the mld attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the aging time to 60 seconds for source MAC-based MLD suppression entries.
<Sysname> system-view
[Sysname] mld attack-suppression source-mac aging-time 60
Related commands
mld attack-suppression source-mac enable
mld attack-suppression source-mac check-interval
Use mld attack-suppression source-mac check-interval to set the check interval for source MAC-based MLD suppression.
Use undo mld attack-suppression source-mac check-interval to restore the default.
Syntax
mld attack-suppression source-mac check-interval interval
undo mld attack-suppression source-mac check-interval
Default
The check interval is 30 seconds for source MAC-based MLD suppression.
Views
System view
Predefined user roles
network-admin
Parameters
interval: Specifies the check interval for source MAC-based MLD suppression, in the range of 1 to 255 seconds.
Usage guidelines
This command takes effect only after you execute the mld attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the check interval to 10 seconds for source MAC-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression source-mac check-interval 10
Related commands
mld attack-suppression source-mac enable
mld attack-suppression source-mac threshold
mld attack-suppression source-mac enable
Use mld attack-suppression source-mac enable to enable source MAC-based MLD suppression.
Use undo mld attack-suppression source-mac enable to disable source MAC-based MLD suppression.
Syntax
mld attack-suppression source-mac enable
undo mld attack-suppression source-mac enable
Default
Source MAC-based MLD suppression is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The source MAC-based MLD suppression feature allows the device to create MLD suppression entries and count the number of received MLD packets on a per source MAC basis. When the number of MLD packets from a MAC address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal MLD packets, the device drops the MLD attack packets from the MAC address.
This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable MLD snooping globally on the device. MLD packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.
Examples
# Enable source MAC-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression source-mac enable
mld attack-suppression source-mac threshold
Use mld attack-suppression source-mac threshold to set the threshold for triggering source MAC-based MLD suppression.
Use undo mld attack-suppression source-mac threshold to restore the default.
Syntax
mld attack-suppression source-mac threshold threshold-value
undo mld attack-suppression source-mac threshold
Default
The threshold is 6000 for triggering source MAC-based MLD suppression.
Views
System view
Predefined user roles
network-admin
Parameters
threshold-value: Specifies the threshold for triggering source MAC-based MLD suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of MLD packets that the device can receive from a MAC address within the check interval.
Usage guidelines
When the number of received MLD packets from a MAC address exceeds the threshold within the check interval, the device identifies the MLD packets from this MAC address as attack packets.
This command takes effect only after you execute the mld attack-suppression source-mac enable command.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the threshold to 300 for triggering source MAC-based MLD suppression.
<Sysname> system-view
[Sysname] mld attack-suppression source-mac threshold 300
Related commands
mld attack-suppression source-mac check-interval
mld attack-suppression source-mac enable
mld authorization-enable
Use mld authorization-enable to enable the IPv6 multicast access control feature.
Use undo mld authorization-enable to disable the IPv6 multicast access control feature.
Syntax
mld authorization-enable
undo mld authorization-enable
Default
The IPv6 multicast access control feature is disabled.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
VT interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only on local online users. Non-local users and offline users are not affected.
Examples
# Enable the IPv6 multicast access control feature on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld authorization-enable
mld enable
Use mld enable to enable MLD on an interface.
Use undo mld enable to disable MLD on an interface.
Syntax
undo mld enable
Default
MLD is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only when IPv6 multicast routing is enabled on the public network.
Other MLD configurations on the interface take effect only when MLD is enabled on the interface.
Examples
# Enable IPv6 multicast routing on the public network, and enable MLD for GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] ipv6 multicast routing
[Sysname-mrib6] quit
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld enable
ipv6 multicast routing
mld fast-leave
Use mld fast-leave to enable fast-leave processing on an interface.
Use undo mld fast-leave to disable fast-leave processing on an interface.
Syntax
mld fast-leave [ group-policy ipv6-acl-number ]
undo mld fast-leave
Default
Fast-leave processing is disabled. The MLD querier sends MLD multicast-address-specific or multicast-address-and-source-specific queries after receiving a done message.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-acl-number: Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999. If you specify an ACL, the fast-leave processing feature takes effect only on the IPv6 multicast groups that the ACL permits. The feature takes effect on all IPv6 multicast groups when one of the following conditions exists:
· You do not specify an ACL.
· The specified ACL does not exist.
· The specified ACL does not have valid rules.
Usage guidelines
The fast-leave processing feature enables an MLD querier to suppress MLD multicast-address-specific or multicast-address-and-source-specific queries upon receiving MLD done messages permitted by the ACL.
When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· The source source-address source-prefix option specifies an IPv6 multicast group address.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
Examples
# Enable fast-leave processing on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld fast-leave
mld group-policy
Use mld group-policy to configure an IPv6 multicast group policy on an interface to control the IPv6 multicast groups that hosts attached to the interface can join.
Use undo mld group-policy to delete the IPv6 multicast group policy on an interface.
Syntax
mld group-policy ipv6-acl-number [ version-number ]
undo mld group-policy
Default
No IPv6 multicast group policy exists. Hosts attached to the interface can join any IPv6 multicast groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-acl-number: Specifies an IPv6 basic or advanced ACL by its number in the range of 2000 to 3999. Receiver hosts can join only the IPv6 multicast groups that the ACL permits. If the ACL does not exist or have valid rules, receiver hosts cannot join IPv6 multicast groups.
version-number: Specifies an MLD version number, 1 or 2. By default, this command takes effect on both MLDv1 reports and MLDv2 reports.
Usage guidelines
An IPv6 multicast group policy filters MLD reports to control the IPv6 multicast groups that hosts can join.
This command does not take effect on static member interfaces because static member interfaces do not send MLD reports.
When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.
· In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.
To match the following MLD reports, set the source source-address source-prefix option to 0::0:
¡ MLDv1 reports.
¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure an IPv6 multicast group policy on GigabitEthernet 3/1/1 so that hosts attached to the interface can join only IPv6 multicast group FF03::101.
<Sysname> system-view
[Sysname] acl ipv6 basic 2005
[Sysname-acl-ipv6-basic-2005] rule permit source ff03::101 128
[Sysname-acl-ipv6-basic-2005] quit
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld group-policy 2005
mld join-by-session
Use mld join-by-session to enable per-session IPv6 multicast forwarding.
Use undo mld join-by-session to restore the default.
Syntax
mld join-by-session [ mode { both | bras | non-bras } ]
undo mld join-by-session
Default
IPv6 multicast data is forwarded on a per-interface basis.
Views
Layer 3 Ethernet interface/subinterface view
Layer 3 aggregate interface/subinterface view
Predefined user roles
network-admin
Parameters
mode: Specifies a user access type. If you do not specify this option, per-session multicast forwarding is enabled for users of all access types.
both: Specifies BRAS and non-BRAS user access types.
bras: Specifies the BRAS user access type, including IPoE, PPP, and portal.
non-bras: Specifies the non-BRAS user access type. Non-BRAS users refer to users that do not need to perform authentication.
Usage guidelines
This feature enables an interface to send a separate copy of IPv6 multicast data to each user attached to the interface.
The mld join-by-session and mld user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.
Examples
# Enable per-session IPv6 multicast forwarding on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld join-by-session
mld last-listener-query-count
Use mld last-listener-query-count to set the MLD last member query count on an interface.
Use undo mld last-listener-query-count to restore the default.
Syntax
mld last-listener-query-count count
undo mld last-listener-query-count
Default
The MLD last listener query count equals the MLD querier's robustness variable.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD last listener query count in the range of 1 to 255.
Usage guidelines
You can set the MLD last listener query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD last listener query count to 6 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld last-listener-query-count 6
Related commands
last-listener-query-count (MLD view)
mld last-listener-query-interval
Use mld last-listener-query-interval to set the MLD last listener query interval on an interface.
Use undo mld last-listener-query-interval to restore the default.
Syntax
mld last-listener-query-interval interval
undo mld last-listener-query-interval
Default
The MLD last listener query interval is 1 second.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.
Usage guidelines
You can set the MLD last listener query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD last listener query interval to 6 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld last-listener-query-interval 6
Related commands
last-listener-query-interval (MLD view)
mld max-response-time
Use mld max-response-time to set the maximum response time for MLD general queries on an interface.
Use undo mld max-response-time to restore the default.
Syntax
mld max-response-time time
undo mld max-response-time
Default
The maximum response time for MLD general queries is 10 seconds.
Views
Interface view
Predefined user roles
network-admin
Parameters
time: Specifies the maximum response time for MLD general queries, in the range of 1 to 3174 seconds.
Usage guidelines
You can set the maximum response time for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the maximum response time for MLD general queries to 25 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld max-response-time 25
Related commands
max-response-time (MLD view)
mld non-stop-routing
Use mld non-stop-routing to enable MLD NSR.
Use undo mld non-stop-routing to disable MLD NSR.
Syntax
mld non-stop-routing
undo mld non-stop-routing
Default
MLD NSR is disabled.
Views
System view
Predefined user roles
network-admin
Examples
# Enable MLD NSR.
<Sysname> system-view
[Sysname] mld non-stop-routing
mld other-querier-present-timeout
Use mld other-querier-present-timeout to set the MLD other querier present timer on an interface.
Use undo mld other-querier-present-timeout to restore the default.
Syntax
mld other-querier-present-timeout time
undo mld other-querier-present-timeout
Default
The MLD other querier present timer is calculated by using the following formula:
[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.
Views
Interface view
Predefined user roles
network-admin
Parameters
time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD other querier present timer for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD other querier present timer to 125 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld other-querier-present-timeout 125
Related commands
other-querier-present-timeout (MLD view)
mld proxy enable
Use mld proxy enable to enable MLD proxying on an interface.
Use undo mld proxy enable to disable MLD proxying on an interface.
Syntax
mld proxy enable
undo mld proxy enable
Default
MLD proxying is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only when IPv6 multicast routing is enabled on the public network.
Examples
# Enable IPv6 multicast routing on the public network, and enable MLD proxying on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] ipv6 multicast routing
[Sysname-mrib6] quit
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld proxy enable
Related commands
ipv6 multicast routing
mld proxy forwarding
Use mld proxy forwarding to enable IPv6 multicast forwarding on a non-querier interface.
Use undo mld proxy forwarding to disable IPv6 multicast forwarding on a non-querier interface.
Syntax
mld proxy forwarding
undo mld proxy forwarding
Default
IPv6 multicast forwarding is disabled for a non-querier interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Typically, only MLD queriers can forward IPv6 multicast traffic and non-queriers cannot. This prevents IPv6 multicast data from being repeatedly forwarded. If a router interface on the MLD proxy device failed the querier election, enable multicast forwarding capability on this interface to forward multicast data to attached receivers.
Examples
# Enable IPv6 multicast forwarding on GigabitEthernet 3/1/1 (non-querier interface).
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld proxy forwarding
mld query-interval
Use mld query-interval to set the MLD general query interval on an interface.
Use undo mld query-interval to restore the default.
Syntax
mld query-interval interval
undo mld query-interval
Default
The MLD general query interval is 125 seconds.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD general interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD general interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD general query interval to 60 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld query-interval 60
Related commands
query-interval (MLD view)
mld robust-count
Use mld robust-count to set the MLD querier's robustness variable on an interface.
Use undo mld robust-count to restore the default.
Syntax
mld robust-count count
undo mld robust-count
Default
The MLD querier's robustness variable is 2.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD querier's robustness variable in the range of 1 to 255.
Usage guidelines
The MLD querier's robustness variable defines the number of times to retransmit MLD queries if packet loss occurs. A higher robustness variable makes the MLD querier more robust, but it increases the timeout time for IPv6 multicast groups.
You can set the MLD querier's robustness variable for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD querier's robustness variable to 5 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld robust-count 5
Related commands
robust-count (MLD view)
mld startup-query-count
Use mld startup-query-count to set the MLD startup query count on an interface.
Use undo mld startup-query-count to restore the default.
Syntax
mld startup-query-count count
undo mld startup-query-count
Default
The MLD startup query count equals the MLD querier's robustness variable.
Views
Interface view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD startup query count in the range of 1 to 255.
Usage guidelines
You can set the MLD startup query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD startup query count to 5 on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld startup-query-count 5
Related commands
startup-query-count (MLD view)
mld startup-query-interval
Use mld startup-query-interval to set the MLD startup query interval on an interface.
Use undo mld startup-query-interval to restore the default.
Syntax
mld startup-query-interval interval
undo mld startup-query-interval
Default
The MLD startup query interval equals one quarter of the MLD general query interval.
Views
Interface view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD startup query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the MLD startup query interval to 100 seconds on GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld startup-query-interval 100
Related commands
startup-query-interval (MLD view)
mld static-group
Use mld static-group to configure an interface as a static group member of an IPv6 multicast group.
Use undo mld static-group to restore the default.
Syntax
mld static-group ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ]
undo mld static-group { all | ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ] }
Default
An interface is not a static member of IPv6 multicast groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. In the batch configuration, this IPv6 multicast group address represents the start address.
inc-step-mask group-mask-length: Specifies the mask length step for IPv6 multicast groups in batch configuration. The mask length is an integer in the range of 9 to 128.
group-number: Specifies the number of IPv6 multicast group addresses in batch configuration, an integer in the range of 2 to 512.
ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command configures an interface as a static group member of the multicast groups with all IPv6 multicast source addresses.
dot1q vid vlan-list: Specifies a space-separated list of up to 10 outer VLAN ID items. Each item specifies an outer VLAN ID or a range of outer VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a single-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.
dot1q vid vlan-id second-dot1q vlan-list: Specifies the outer and inner VLAN IDs. The vlan-id argument specifies the outer VLAN ID in the range of 1 to 4094. The vlan-list argument specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a double-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.
all: Specifies all IPv6 multicast groups that the interface has statically joined.
Usage guidelines
For IPv6 multicast routing entries to be created, specify an IPv6 multicast source address if the specified IPv6 multicast group address is in the SSM group range.
For the same IPv6 multicast group, the non-VLAN-based, single-VLAN-based, or double-VLAN-based static member interface configurations are mutually exclusive.
When you configure a subinterface as a non-VLAN-based static member interface, do not configure the mld join-by-session or mld user-vlan-aggregation dot1q command on the subinterface. Otherwise, IPv6 static IPv6 multicast forwarding entries cannot be created.
When you configure a subinterface as a VLAN-based static member interface, a static multicast forwarding entry can be created under either of the following conditions:
· Users that belong to the specified VLANs come online if the mld user-vlan-aggregation dot1q command is not configured on the subinterface.
· The VLAN IDs specified in this command are the same as or included in the VLAN IDs specified in the mld user-vlan-aggregation dot1q command configured on the subinterface.
When you configure an interface as a static group member of IPv6 multiple multicast groups or multicast sources and groups in batch, follow these restrictions and guidelines:
· IPv6 multicast group addresses in different batch configurations can overlap.
· The undo command does not support deleting one IPv6 multicast group from batch configuration. When you delete a batch configuration, make sure the setting in the undo command matches the batch configuration.
· If two batch configurations have the same parameter settings except the setting of the number group-number option, the new configuration takes effect.
Examples
# Configure GigabitEthernet 1/0/1 as a static group member of IPv6 multicast groups ff03::101 and ff03::102 in batch. In the batch configuration, the start multicast group address is ff03::101, the mask step is 128, and the number of multicast groups is 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld static-group ff03::101 inc-step-mask 128 number 2
# Configure GigabitEthernet 1/0/1 as a static group member of IPv6 multicast sources and groups (2001::101, ff03::101) and (2001::101, ff03::102) in batch. In the batch configuration, the start IPv6 multicast group address is ff03::101, the IPv6 multicast source address is 2001::101, the mask length step is 128, and the number of IPv6 multicast groups is 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mld static-group ff03::101 inc-step-mask 128 number 2 source 2001::101
# Configure GigabitEthernet 1/0/1.1 as a VLAN-based static group member of IPv6 multicast groups ff03::101 and ff03::102 in batch. In the batch configuration, the start multicast group address is ff03::101, the mask length step is 128, the number of multicast groups is 2, and the VLAN ID is 10.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1.1
[Sysname-GigabitEthernet1/0/1.1] mld static-group ff03::101 inc-step-mask 128 number 2 dot1q vid 10
mld user-vlan-aggregation dot1q
Use mld user-vlan-aggregation dot1q to configure VLAN tagging on IPv6 multicast packets.
Use undo mld user-vlan-aggregation dot1q to restore the default.
Syntax
mld user-vlan-aggregation dot1q vid vlan-id [ second-dot1q vlan-id ]
undo mld user-vlan-aggregation dot1q
Default
The IPv6 multicast packets are not tagged with VLAN IDs.
Views
Layer 3 Ethernet subinterface view
Layer 3 aggregate subinterface view
Predefined user roles
network-admin
Parameters
vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094.
second-dot1q vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094.
Usage guidelines
The mld join-by-session and mld user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.
Examples
# Configure IPv6 multicast packets to be tagged with outer VLAN ID 10 and inner VLAN ID 20 on GigabitEthernet 3/1/1.1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1.1
[Sysname-GigabitEthernet3/1/1.1] mld user-vlan-aggregation dot1q vid 10 second-dot1q 20
mld version
Use mld version to specify an MLD version for an interface.
Use undo mld version to restore the default.
Syntax
mld version version-number
undo mld version
Default
The MLD version is 1.
Views
Interface view
Predefined user roles
network-admin
Parameters
version-number: Specifies an MLD version, 1 or 2.
Examples
# Specify MLD version 2 for GigabitEthernet 3/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/1/1
[Sysname-GigabitEthernet3/1/1] mld version 2
other-querier-present-timeout (MLD view)
Use other-querier-present-timeout to set the MLD other querier present timer globally.
Use undo other-querier-present-timeout to restore the default.
Syntax
other-querier-present-timeout time
undo other-querier-present-timeout
Default
The MLD other querier present timer is calculated by using the following formula:
[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.
Views
MLD view
Predefined user roles
network-admin
Parameters
time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD other querier present timer globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD other querier present timer to 125 seconds on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] other-querier-present-timeout 125
Related commands
mld other-querier-present-timeout
proxy multipath (MLD view)
Use proxy multipath to enable load splitting on the MLD proxy.
Use undo proxy multipath to disable load splitting on the MLD proxy.
Syntax
proxy multipath
undo proxy multipath
Default
The load splitting feature is disabled on the MLD proxy.
Views
MLD view
Predefined user roles
network-admin
Usage guidelines
Use this feature when the MLD proxy has multiple proxy interfaces. All proxy interfaces on the MLD proxy share IPv6 multicast traffic on a per-group basis. If you do not enable this feature, only the proxy interface with the highest IPv6 address forwards IPv6 multicast traffic.
Examples
# Enable load splitting on the MLD proxy device on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] proxy multipath
query-interval (MLD view)
Use query-interval to set the MLD general query interval globally.
Use undo query-interval to restore the default.
Syntax
query-interval interval
undo query-interval
Default
The MLD general query interval is 125 seconds.
Views
MLD view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD general query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD general query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD general query interval to 60 seconds on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] query-interval 60
Related commands
mld query-interval
reset mld attack-suppression per-interface entry
Use reset mld attack-suppression per-interface entry to remove interface-based MLD suppression entries.
Syntax
In standalone mode:
reset mld attack-suppression per-interface entry { all | slot slot-number { all | interface interface-type interface-number } }
In IRF mode:
reset mld attack-suppression per-interface entry { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
Examples
# Remove all interface-based MLD suppression entries.
<Sysname> reset mld attack-suppression per-interface entry all
Related commands
display mld attack-suppression per-interface entry
reset mld attack-suppression per-interface statistics
Use reset mld attack-suppression per-interface statistics to clear MLD packet statistics about interface-based MLD suppression entries.
Syntax
In standalone mode:
reset mld attack-suppression per-interface statistics { all | slot slot-number { all | interface interface-type interface-number } }
In IRF mode:
reset mld attack-suppression per-interface statistics { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
This command clears statistics about the following fields in the output from the display mld attack-suppression per-interface entry verbose command: CPU receive, CPU drop, and Drv drop.
Examples
# Clear MLD packet statistics about all interface-based MLD suppression entries.
<Sysname> reset mld attack-suppression per-interface statistics all
Related commands
display mld attack-suppression per-interface entry
reset mld attack-suppression source-mac entry
Use reset mld attack-suppression source-mac entry to remove source MAC-based MLD suppression entries.
Syntax
In standalone mode:
reset mld attack-suppression source-mac entry { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
In IRF mode:
reset mld attack-suppression source-mac entry { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
mac-address address: Specifies a MAC address.
Examples
# Remove all source MAC-based MLD suppression entries.
<Sysname> reset mld attack-suppression source-mac entry all
Related commands
display mld attack-suppression source-mac entry
reset mld attack-suppression source-mac statistics
Use reset mld attack-suppression source-mac statistics to clear MLD packet statistics about source MAC-based MLD suppression entries.
Syntax
In standalone mode:
reset mld attack-suppression source-mac statistics { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
In IRF mode:
reset mld attack-suppression source-mac statistics { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }
Views
User view
Predefined user roles
network-admin
Parameters
all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)
all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
interface interface-type interface-number: Specifies an interface by its type and number.
mac-address address: Specifies a MAC address.
Usage guidelines
This command clears statistics about the following fields in the output from the display mld attack-suppression source-mac entry verbose command: CPU receive, CPU drop, and Drv drop.
Examples
# Clear MLD packet statistics about all source MAC-based MLD suppression entries.
<Sysname> reset mld attack-suppression source-mac statistics all
Related commands
display mld attack-suppression source-mac entry
reset mld group
Use reset mld group to clear dynamic MLD multicast group entries.
Syntax
reset mld group { all | interface interface-type interface-number { all | ipv6-group-address [ prefix-length ] [ ipv6-source-address [ prefix-length ] ] } }
Views
User view
Predefined user roles
network-admin
Parameters
all: The first all specifies all interfaces, and the second all specifies all MLD multicast groups.
interface-type interface-number: Specifies an interface by its type and number.
ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F.
ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command clears dynamic MLD multicast group entries for all IPv6 multicast sources.
prefix-length: Specifies an address prefix length. The default is 128. For a multicast source address, the value range for this argument is 0 to 128. For a multicast group address, the value range for this argument is 8 to 128.
Usage guidelines
This command might interrupt the IPv6 multicast information transmission.
Examples
# Clear dynamic MLD multicast groups for all interfaces on the public network.
<Sysname> reset mld group all
# Clear all dynamic MLD multicast group entries for GigabitEthernet 3/1/1 on the public network.
<Sysname> reset mld group interface gigabitethernet 3/1/1 all
# Clear the dynamic entry of the MLD multicast group FF03::101:10 for GigabitEthernet 3/1/1 on the public network.
<Sysname> reset mld group interface gigabitethernet 3/1/1 ff03::101:10
robust-count (MLD view)
Use robust-count to set the MLD querier's robustness variable globally.
Use undo robust-count to restore the default.
Syntax
robust-count count
undo robust-count
Default
The MLD querier's robustness variable is 2.
Views
MLD view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD querier's robustness variable in the range of 1 to 255.
Usage guidelines
The MLD querier's robustness variable defines the number of times to retransmit MLD queries if packet loss occurs. A higher robustness variable makes the MLD querier more robust, but it increases the timeout time for IPv6 multicast groups.
You can set the MLD querier's robustness variable globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD querier's robustness variable to 5 on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] robust-count 5
Related commands
mld robust-count
ssm-mapping (MLD view)
Use ssm-mapping to configure an MLD SSM mapping.
Use undo ssm-mapping to delete MLD SSM mappings.
Syntax
ssm-mapping ipv6-source-address ipv6-acl-number
undo ssm-mapping { ipv6-source-address | all }
Default
No MLD SSM mappings exist.
Views
MLD view
Predefined user roles
network-admin
Parameters
ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address.
ipv6-acl-number: Specifies an IPv6 basic ACL number in the range of 2000 to 2999. IPv6 multicast groups in MLD reports permitted by the ACL are associated with the IPv6 multicast source. If the ACL does not exist or does not have valid rules, no IPv6 multicast groups are associated with the IPv6 multicast source.
all: Specifies all MLD SSM mappings.
Usage guidelines
When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:
· For the rule to take effect, do not specify the vpn-instance vpn-instance option.
· The source source-address source-prefix option specifies an IPv6 multicast group address.
· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
Examples
# Configure an MLD SSM mapping with IPv6 multicast source 1::1 and IPv6 multicast group range FF3E::/64 on the public network.
<Sysname> system-view
[Sysname] acl ipv6 basic 2001
[Sysname-acl-ipv6-basic-2001] rule permit source ff3e:: 64
[Sysname-acl-ipv6-basic-2001] quit
[Sysname] mld
[Sysname-mld] ssm-mapping 1::1 2001
Related commands
display mld ssm-mapping
startup-query-count (MLD view)
Use startup-query-count to set the MLD startup query count globally.
Use undo startup-query-count to restore the default.
Syntax
startup-query-count count
undo startup-query-count
Default
The MLD startup query count equals the MLD querier's robustness variable.
Views
MLD view
Predefined user roles
network-admin
Parameters
count: Specifies an MLD startup query count in the range of 1 to 255.
Usage guidelines
You can set the MLD startup query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD startup query count to 5 on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] startup-query-count 5
Related commands
mld startup-query-count
startup-query-interval (MLD view)
Use startup-query-interval to set the MLD startup query interval globally.
Use undo startup-query-interval to restore the default.
Syntax
startup-query-interval interval
undo startup-query-interval
Default
The MLD startup query interval equals one quarter of the MLD general query interval.
Views
MLD view
Predefined user roles
network-admin
Parameters
interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.
Usage guidelines
You can set the MLD startup query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.
Examples
# Set the global MLD startup query interval to 100 seconds on the public network.
<Sysname> system-view
[Sysname] mld
[Sysname-mld] startup-query-interval 100
Related commands
mld startup-query-interval