08-IP Multicast Command Reference

HomeSupportRoutersCR16000-F SeriesReference GuidesCommand ReferencesH3C CR16000-F Routers Command References-Release795x-6W10008-IP Multicast Command Reference
13-MLD commands
Title Size Download
13-MLD commands 235.82 KB

Contents

MLD commands· 1

display mld attack-suppression per-interface configuration· 1

display mld attack-suppression per-interface entry· 1

display mld attack-suppression source-mac configuration· 3

display mld attack-suppression source-mac entry· 4

display mld group· 6

display mld interface· 9

display mld proxy group· 13

display mld proxy routing-table· 14

display mld ssm-mapping· 17

display mld user-authorization· 18

last-listener-query-count (MLD view) 21

last-listener-query-interval (MLD view) 21

max-response-time (MLD view) 22

mld· 23

mld access-policy· 23

mld attack-suppression per-interface aging-time· 24

mld attack-suppression per-interface check-interval 25

mld attack-suppression per-interface enable· 26

mld attack-suppression per-interface threshold· 26

mld attack-suppression source-mac aging-time· 27

mld attack-suppression source-mac check-interval 28

mld attack-suppression source-mac enable· 28

mld attack-suppression source-mac threshold· 29

mld authorization-enable· 30

mld enable· 30

mld fast-leave· 31

mld group-policy· 32

mld join-by-session· 33

mld last-listener-query-count 34

mld last-listener-query-interval 35

mld max-response-time· 35

mld non-stop-routing· 36

mld other-querier-present-timeout 36

mld proxy enable· 37

mld proxy forwarding· 38

mld query-interval 38

mld robust-count 39

mld startup-query-count 40

mld startup-query-interval 40

mld static-group· 41

mld user-vlan-aggregation dot1q· 43

mld version· 44

other-querier-present-timeout (MLD view) 44

proxy multipath (MLD view) 45

query-interval (MLD view) 45

reset mld attack-suppression per-interface entry· 46

reset mld attack-suppression per-interface statistics· 47

reset mld attack-suppression source-mac entry· 48

reset mld attack-suppression source-mac statistics· 49

reset mld group· 49

robust-count (MLD view) 50

ssm-mapping (MLD view) 51

startup-query-count (MLD view) 52

startup-query-interval (MLD view) 53

 


MLD commands

display mld attack-suppression per-interface configuration

Use display mld attack-suppression per-interface configuration to display the configuration of interface-based MLD suppression.

Syntax

display mld attack-suppression per-interface configuration

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the configuration of interface-based MLD suppression.

<Sysname> display mld attack-suppression per-interface configuration

MLD attack-suppression per-interface is enabled.

Check interval: 5s

Threshold: 20

Aging time: 300s

Table 1 Command output

Field

Description

Check interval

Check interval of interface-based MLD suppression.

Threshold

Threshold for triggering interface-based MLD suppression.

Aging time

Aging time of interface-based MLD suppression entries.

 

Related commands

mld attack-suppression per-interface aging-time

mld attack-suppression per-interface check-interval

mld attack-suppression per-interface enable

mld attack-suppression per-interface threshold

display mld attack-suppression per-interface entry

Use display mld attack-suppression per-interface entry to display interface-based MLD suppression entries.

Syntax

In standalone mode:

display mld attack-suppression per-interface entry slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]

In IRF mode:

display mld attack-suppression per-interface entry chassis chassis-number slot slot-number [ interface interface-type interface-number ] [ attack ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays interface-based MLD suppression entries for all interfaces.

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

attack: Displays interface-based MLD suppression entries for MLD attack packets. If you do not specify this keyword, the command displays all interface-based MLD suppression entries that have been created.

verbose: Displays detailed information about interface-based MLD suppression entries. If you do not specify this keyword, the command displays brief information about interface-based MLD suppression entries.

Examples

# (In standalone mode.) Display interface-based MLD suppression entries for MLD attack packets.

<Sysname> display mld attack-suppression per-interface entry slot1 attack

Total entries: 1

Interface            Attack start time      Expires

GE3/1/4              2018/09/10 15:53:34    00:01:15

# (In standalone mode.) Display detailed information about interface-based MLD suppression entries.

<Sysname> display mld attack-suppression per-interface entry slot1 verbose

Total entries: 2

Interface: GE3/1/1

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

 

Interface: GE3/1/2

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop: 123456

Drv drop: 18446744073709551615

Table 2 Command output

Field

Description

Total entries

Total number of MLD suppression entries.

Interface

Interface name.

Drv status

Driver status:

·         Succeeded—The driver limits the MLD packet rate.

·         Failed—The CPU limits the MLD packet rate. The device has failed or hardware resources for MLD suppression entries have been used up.

·         N/A—The incoming MLD packets are not attack packets and the device does not limit the packet rate.

Attack start time

Time when the MLD packet attack started. This field displays N/A if no MLD attack is detected.

Expires

Remaining time of the MLD suppression entry aging timer. This field displays Off if the aging timer is disabled.

CPU receive

Number of packets that the CPU received.

CPU drop

Number of packets dropped by the CPU.

Drv drop

Number of packets dropped by the driver.

 

Related commands

reset mld attack-suppression per-interface entry

display mld attack-suppression source-mac configuration

display mld attack-suppression source-mac configuration to display the configuration of source MAC-based MLD suppression.

Syntax

display mld attack-suppression source-mac configuration

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the configuration of source MAC-based MLD suppression.

<Sysname> display mld attack-suppression source-mac configuration

MLD attack-suppression source-mac is enabled.

Check interval: 5s

Threshold: 20

Aging time: 300s

Table 3 Command output

Field

Description

Check interval

Check interval of source MAC-based MLD suppression.

Threshold

Threshold for triggering source MAC-based MLD suppression.

Aging time

Aging time of source MAC-based MLD suppression entries.

 

Related commands

mld attack-suppression source-mac aging-time

mld attack-suppression source-mac check-interval

mld attack-suppression source-mac enable

mld attack-suppression source-mac threshold

display mld attack-suppression source-mac entry

Use display mld attack-suppression source-mac entry to display source MAC-based MLD suppression entries.

Syntax

In standalone mode:

display mld attack-suppression source-mac entry slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]

In IRF mode:

display mld attack-suppression source-mac entry chassis chassis-number slot slot-number [ interface interface-type interface-number | mac-address address ]* [ attack ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays source MAC-based MLD suppression entries for all interfaces.

mac-address address: Specifies a source MAC address. If you do not specify this option, the command displays MLD suppression entries for all MAC addresses.

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

attack: Displays source MAC-based MLD suppression entries for MLD attack packets. If you do not specify this keyword, the command displays all source MAC-based MLD suppression entries that have been created.

verbose: Displays detailed information about source MAC-based MLD suppression entries. If you do not specify this keyword, the command displays brief information about source MAC-based MLD suppression entries.

Examples

# (In standalone mode.) Display source MAC-based MLD suppression entries.

<Sysname> display mld attack-suppression source-mac entry slot1 attack

Total entries: 1

Interface            MAC address       Attack start time      Expires

GE3/1/4              0001-0001-0004    2018/09/10 15:53:34    00:01:15

# (In standalone mode.) Display detailed information about source MAC-based MLD suppression entries.

<Sysname> display mld attack-suppression source-mac entry slot1 verbose

Total entries: 2

Interface: GE3/1/1

MAC address: 0001-0001-0001

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

 

Interface: GE3/1/2

MAC address: 0001-0001-0002

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop : 123456

Drv drop : 18446744073709551615

Table 4 Command output

Field

Description

Total entries

Total number of MLD suppression entries.

Interface

Interface name.

MAC address

MAC address of the attacker.

Drv status

Driver status:

·         Succeeded—MLD attack packets are dropped by the driver.

·         Failed—MLD attack packets are dropped by the CPU. The device has failed or hardware resources for MLD suppression entries have been used up.

·         N/A—The incoming MLD packets are not attack packets and they are not dropped.

Attack start time

Time when the MLD packet attack started. This field displays N/A if no MLD attack is detected.

Expires

Remaining time of the MLD suppression entry aging timer. This field displays Off if the aging timer is disabled.

CPU receive

Number of packets that the CPU received.

CPU drop

Number of packets dropped by the CPU.

Drv drop

Number of packets dropped by the driver.

 

Related commands

reset mld attack-suppression source-mac entry

display mld group

Use display mld group to display information about MLD multicast groups (IPv6 multicast groups that hosts have joined through MLD).

Syntax

display mld group [ ipv6-group-address | interface interface-type interface-number ] [ static | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-group-address: Specifies an IPv6 multicast group address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays information about all MLD multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about MLD multicast groups for all interfaces.

static: Specifies MLD multicast groups that hosts have joined statically. If you do not specify this keyword, the command displays information about MLD multicast groups that hosts have joined dynamically.

verbose: Displays detailed information about MLD multicast groups.

Examples

# Display information about MLD multicast groups that hosts have dynamically joined on the public network.

<Sysname> display mld group

MLD groups in total: 1

 GigabitEthernet3/1/1(FE80::101):

  MLD groups reported in total: 1

   Group address: FF03::101

    Last reporter: FE80::10

    Uptime: 00:02:04

    Expires: 00:01:15

Table 5 Command output

Field

Description

MLD groups in total

Total number of MLD multicast groups.

MLD groups reported in total

Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically.

Group address

IPv6 multicast group address.

Last reporter

IPv6 address of the receiver host that last reported membership for the group.

Uptime

Length of time since the IPv6 multicast group was joined.

Expires

Remaining lifetime for the IPv6 multicast group. This field displays Off if the timer is disabled.

 

# Display detailed information about MLD multicast group FF3E::101 that hosts have statically joined on the public network. In this example, the router is configured with MLDv2.

<Sysname> display mld group ff3e::101 verbose

 GigabitEthernet3/1/1(FE80::101):

  MLD groups reported in total: 1

   Group: FF3E::101

     Uptime: 00:01:46

     Exclude expires: 00:04:16

     Mapping expires: 00:02:16

     Last reporter: FE80::10

     Last-listener-query-counter: 0

     Last-listener-query-timer-expiry: Off

     Mapping last-listener-query-counter: 0

     Mapping last-listener-query-timer-expiry: Off

     Group mode: Exclude

     Version1-host-present-timer-expiry: Off

     Source list (sources in total: 1):

       Source: 10::10

          Uptime: 00:00:09

          V2 expires: 00:04:11

          Mapping expires: 00:02:16

          Last-listener-query-counter: 0

          Last-listener-query-timer-expiry: Off

Table 6 Command output

Field

Description

MLD groups reported in total

Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically.

Group

IPv6 multicast group address.

Uptime

Length of time since the IPv6 multicast group was reported.

Exclude expires

Remaining time for the IPv6 multicast group in Exclude mode. This field displays Off if the timer is disabled.

Mapping expires

Remaining time for the IPv6 multicast group specified in MLD SSM mappings.

This field is displayed only when the device is configured with MLD SSM mappings.

Last reporter

IPv6 address of the receiver host that last reported membership for this group.

Last-listener-query-counter

Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group.

Last-listener-query-timer-expiry

Remaining time for the MLD last listener query timer for the multicast group. This field displays Off if the timer is disabled.

Mapping last-listener-query-counter

Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast group specified in MLD SSM mappings.

This field is displayed only when the device is configured with MLD SSM mappings.

Mapping last-listener-query-timer-expiry

Remaining time for the last listener query timer of the IPv6 multicast group specified in MLD SSM mappings.

This field displays Off if the timer is disabled.

This field is displayed only when the device is configured with MLD SSM mappings.

Group mode

IPv6 multicast source filtering mode:

·         IncludeInclude mode.

·         Exclude—Exclude mode.

For a device that runs MLDv1:

·         If MLD SSM mappings are not configured, this field displays Exclude.

·         If MLD SSM mappings are configured, this field displays Include or Exclude depending on the SSM mappings and the IPv6 multicast groups that the host joins.

Version1-host-present-timer-expiry

Remaining time for the MLDv1 host present timer.

This field displays Off if the timer is disabled.

This field is displayed only when the device runs MLDv2.

Source list (sources in total 1)

List of IPv6 multicast sources and total number of IPv6 multicast sources.

This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

Source

IPv6 multicast source address.

This field is displayed only when the device runs MLDv2 or the device is configured with MLD SSM mappings.

Uptime

Length of time since the IPv6 multicast source was reported.

This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

V2 expires

Remaining time for the IPv6 multicast source when the device runs MLDv2.

This field displays Off if the timer is disabled.

This field displays three hyphens (---) if the IPv6 multicast source is specified in MLD SSM mappings.

This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

Mapping expires

Remaining time for the IPv6 multicast sources specified in MLD SSM mappings.

Last-listener-query-counter

Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast source and group.

This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

Last-listener-query-timer-expiry

Remaining time for the last listener query timer for the IPv6 multicast source and group.

This field displays Off if the timer is disabled.

This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

 

# Display information about the MLD multicast groups that hosts have statically joined on the public network.

<Sysname> display mld group static

 Entries in total: 2

  (*, FF03::101)

   Interface: GE3/1/1

   Expires: Never

 

  (2001::101, FF3E::202)

   Interface: GE3/1/1

   Expires: Never

Table 7 Command output

Field

Description

Entries in total

Total number of the IPv6 multicast groups that hosts have joined statically.

(*, FF03::101)

(*, G) entry.

(2001::101, FF3E::202)

(S, G) entry.

Expires

Remaining lifetime for the IPv6 multicast group.

This field always displays Never, which means that the IPv6 multicast group never expires.

 

Related commands

reset mld group

display mld interface

Use display mld interface to display MLD information for interfaces.

Syntax

display mld interface [ interface-type interface-number ] [ proxy ] [ verbose ]

display mld interface [ access-interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

access-interface interface-type interface-number: Specifies an access interface by its type and number, which is the actual interface through which a multicast user accesses the network.

interface-type interface-number: Specifies an interface by its type and number.

proxy: Displays the MLD proxy interface information.

verbose: Displays detailed MLD information.

Usage guidelines

A multicast-UA interface is a virtual interface created for maintaining MLD information.

When an IPoE, PPPoE, or portal user assigned with the STB service comes online, the access module sends a notification to MLD. If per-session IPv6 multicast forwarding is enabled on the access interface, MLD creates a multicast-UA interface for the user upon receiving the notification. When the user goes offline, MLD deletes the multicast-UA interface immediately after receiving the notification from the access module. For more information about specifying the STB service for users in an ISP domain, see AAA configuration in BRAS Services Configuration Guide.

When a user comes online through an interface configured with QinQ and per-session IPv6 multicast forwarding, MLD creates a multicast-UA interface upon receiving an MLD report from the user. For users that belong to the same SVLAN and CVLAN, only one multicast-UA interface is created. The multicast-UA interface ages out if the interface neither maintains membership information for any IPv6 multicast groups nor receives MLD reports for a period of time. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.

To display MLD information for multicast-UA interfaces created for multicast users that come online through the same access interface, specify the access-interface interface-type interface-number option.

If you do not specify any parameters, this command displays MLD information for all interfaces.

Examples

# Display detailed MLD information for GigabitEthernet 3/1/1 (non-proxy interface) on the public network.

<Sysname> display mld interface gigabitethernet 3/1/1 verbose

 GigabitEthernet3/1/1(FE80::200:AFF:FE01:101):

   MLD is enabled.

   MLD version: 1

   Query interval for MLD: 125s

   Other querier present time for MLD: 255s

   Maximum query response time for MLD: 10s

   Last listener query interval: 1s

   Last listener query count: 2

   Startup query interval: 31s

   Startup query count: 2

   General query timer expiry (hh:mm:ss): 00:00:23

   Querier for MLD: FE80::200:AFF:FE01:101 (This router)

   MLD activity: 1 join(s), 0 done(s)

   IPv6 multicast routing on this interface: Enabled

   Robustness: 2

   Require-router-alert: Disabled

   Fast-leave: Disabled

   Startup-query: Off

   Other-querier-present-timer-expiry (hh:mm:ss): Off

   Authorization: Disabled

   Join-by-session: Disabled

   User-VLAN-aggregation: Disabled

   Access interface: GigabitEthernet3/1/1

   MLD groups reported in total: 1

# Display detailed MLD information for all MLD proxy interfaces on the public network.

<Sysname> display mld interface proxy verbose

 GigabitEthernet3/1/2(FE80::100:CEF:FE01:101):

   MLD proxy is enabled.

   MLD version: 1

   IPv6 multicast routing on this interface: Enabled

   Require-router-alert: Disabled

   Version1-querier-present-timer-expiry (hh:mm:ss): Off

# Display detailed MLD information for user access interface GigabitEthernet 3/1/2 on the public network.

<Sysname> display mld interface access-interface gigabitethernet 3/1/2 verbose

 Multicast-UA0(FE80::102:2):

   MLD is enabled.

   MLD version: 1

   Query interval for MLD: 125s

   Other querier present time for MLD: 255s

   Maximum query response time for MLD: 10s

   Last listener query interval: 1s

   Last listener query count: 2

   Startup query interval: 31s

   Startup query count: 2

   General query timer expiry (hh:mm:ss): 00:01:14

   Querier for MLD: FE80::102:2 (This router)

   MLD activity: 0 join(s), 0 done(s)

   IPv6 multicast routing on this interface: Enabled

   Robustness: 2

   Require-router-alert: Disabled

   Fast-leave: Disabled

   Startup-query: Off

   Other-querier-present-timer-expiry (hh:mm:ss): Off

   Authorization: Disabled

   Join-by-session: Enabled

   User-VLAN-aggregation: Disabled

   Access interface: GigabitEthernet3/1/2

   MLD groups reported in total: 1

Table 8 Command output

Field

Description

GigabitEthernet3/1/1(FE80::200:AFF:FE01:101)

Interface and its IPv6 link-local address.

MLD is enabled

MLD is enabled on the interface.

MLD version

Version of MLD that the interface runs.

Query interval for MLD

MLD query interval, in seconds.

Other querier present time for MLD

MLD other querier present interval, in seconds.

Maximum query response time for MLD

Maximum response time for MLD general query messages, in seconds.

Last listener query interval

Interval for sending MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries, in seconds.

Last listener query count

Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group.

Startup query interval

MLD startup query interval, in seconds.

Startup query count

Number of MLD general queries sent on startup.

General query timer expiry

Remaining time for the MLD general query timer. This field displays Off if the timer is disabled.

Querier for MLD

IPv6 link-local address of the MLD querier.

MLD activity: 1 join(s), 0 done(s)

MLD activity statistics:

·         join(s)—Total number of IPv6 multicast groups that the interface has joined.

·         done(s)—Total number of IPv6 multicast groups that the interface has left.

IPv6 multicast routing on this interface

Whether IPv6 multicast routing is enabled: Enabled or Disabled.

Robustness

Robustness variable of the MLD querier.

Require-router-alert

Whether the feature of dropping MLD messages without Router-Alert is enabled: Enabled or Disabled.

Fast-leave

Whether fast-leave processing is enabled: Enabled or Disabled.

Startup-query

Whether the MLD querier sends MLD general queries at the startup query interval on startup:

·         OnThe MLD querier performs the above action.

·         OffThe MLD querier does not perform the above action.

Other-querier-present-timer-expiry

Remaining time for MLD other querier present timer. This field displays Off if the timer is disabled.

Authorization

Whether the IPv6 multicast access control feature is enabled: Enabled or Disabled.

Join-by-session

Whether the per-session IPv6 multicast forwarding feature is enabled: Enabled or Disabled.

User-VLAN-aggregation

Whether the IPv6 multicast packet VLAN tagging feature is enabled: Enabled or Disabled.

Access interface

Actual interface through which the multicast user accesses the network.

This field is displayed only when MLD information is maintained on a multicast-UA interface.

MLD groups reported in total

Total number of IPv6 multicast groups that the interface has joined dynamically.

This field is not displayed if the interface does not join IPv6 multicast groups.

MLD proxy is enabled

MLD proxying is enabled.

Version1-querier-present-timer-expiry

Remaining time for the MLDv1 querier present timer. This field displays Off if the timer is disabled.

 

display mld proxy group

Use display mld proxy group to display information about IPv6 multicast groups maintained by the MLD proxy.

Syntax

display mld proxy group [ ipv6-group-address | interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast group membership entries for all IPv6 multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about IPv6 multicast groups maintained by the MLD proxy for all interfaces.

verbose: Displays detailed information.

Examples

# Display information about IPv6 multicast groups maintained by the MLD proxy on the public network.

<Sysname> display mld proxy group

MLD proxy group records in total: 2

 GigabitEthernet3/1/1(FE80::16:1):

  MLD proxy group records in total: 2

   Group address: FF1E::1

    Member state: Idle

    Expires: Off

 

   Group address: FF1E::2

    Member state: Idle

    Expires: Off

# Display detailed information about IPv6 multicast group FF1E::1 maintained by the MLD proxy on the public network.

<Sysname> display mld proxy group ff1e::1 verbose

 GigabitEthernet3/1/1(FE80::16:1):

  MLD proxy group records in total: 2

   Group: FF1E::1

     Group mode: Include

     Member state: Idle

     Expires: Off

     Source list (sources in total: 1):

       100::1

Table 9 Command output

Field

Description

MLD proxy group records in total

Total number of IPv6 multicast group membership entries maintained by the MLD proxy.

GigabitEthernet3/1/1(FE80::16:1)

Interface and its IPv6 address.

Pending proxy group

Pending IPv6 multicast group membership entries maintained by the MLD proxy.

Group address/Group

IPv6 multicast group address.

Member state

Member host states:

·         Delay—The member host has joined a group and started a delay timer.

·         Idle—The member host has joined a group, but didn't start a delay timer.

Expires

Remaining delay time for a member host to send a responding report. This field displays Off if the timer is disabled.

Group mode

IPv6 multicast source filtering mode:

·         Include.

·         Exclude.

Source list (sources in total: 1)

List of IPv6 multicast sources in the group membership database maintained by the MLD proxy, and the total number of the IPv6 multicast sources.

 

display mld proxy routing-table

Use display mld proxy routing-table to display IPv6 multicast routing entries maintained by the MLD proxy.

Syntax

display mld proxy routing-table [ ipv6-source-address [ prefix-length ] | ipv6-group-address [ prefix-length ] ] * [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an  IPv6 multicast source, this command displays IPv6 multicast routing entries maintained by the MLD proxy for all IPv6 multicast sources.

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast routing entries for all IPv6 multicast groups maintained by the MLD proxy.

prefix-length: Specifies an address prefix length. For an IPv6 multicast source address, the value range for this argument is 0 to 128. For an IPv6 multicast group address, the value range for this argument is 8 to 128. The default value is 128.

verbose: Displays detailed information about IPv6 multicast routing entries maintained by the MLD proxy.

Examples

# Display IPv6 multicast routing entries maintained by the MLD proxy on the public network.

<Sysname> display mld proxy routing-table

 Total 1 (*, G) entries, 2 (S, G) entries.

 

 (100::1, FF1E::1)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (1 in total):

         1: GigabitEthernet3/1/2

             Protocol: MLD

 

 (*, FF1E::2)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (1 in total):

         1: GigabitEthernet3/1/2

             Protocol: STATIC

 

 (2::2, FF1E::2)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (2 in total):

         1: LoopBack1

             Protocol: STATIC

         2: GigabitEthernet3/1/2

             Protocol: PROXY

# Display detailed information about IPv6 multicast routing entries maintained by the MLD proxy on the public network.

<Sysname> display mld proxy routing-table verbose

 Total 1 (*, G) entries, 2 (S, G) entries.

 

 (100::1, FF1E::1)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (1 in total):

         1: GigabitEthernet3/1/2

             Protocol: MLD

             Querier state: Querier

             Join/Prune state: Join

 

     Non-downstream interfaces: None

 

 (*, FF1E::2)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (1 in total):

         1: GigabitEthernet3/1/2

             Protocol: STATIC

             Querier state: Querier

             Join/Prune state: Join

 

     Non-downstream interfaces (1 in total):

         1: GigabitEthernet3/1/3

             Protocol: MLD

             Querier state: Non-querier

             Join/Prune state: Join

 

 (2::2, FF1E::2)

     Upstream interface: GigabitEthernet3/1/1

     Downstream interfaces (2 in total):

         1: LoopBack1

             Protocol: STATIC

             Querier state: Querier

             Join/Prune state: Join

         2: GigabitEthernet3/1/2

             Protocol: PROXY

             Querier state: Querier

             Join/Prune state: Join

 

     Non-downstream interfaces: None

Table 10 Command output

Field

Description

Total 1 (*, G) entries, 2 (S, G) entries

Total number of (*, G ), and the total number of (S, G) entries.

(100::1, FF1E::1)

(S, G) entry.

Upstream interface

Incoming interface of a forwarding entry.

Downstream interfaces (1 in total)

Outgoing interfaces, and the total number of outgoing interfaces.

Non-downstream interfaces (1 in total)

Non-outgoing interfaces, and the total number of non-outgoing interfaces.

1: GigabitEthernet3/1/2

Index of an outgoing interface and the outgoing interface.

Protocol

Protocol type:

·         MLD—Dynamic MLD.

·         PROXY—MLD proxy.

·         STATIC—Static MLD.

Querier state

Querier state:

·         Querier.

·         Non-querier.

Join/Prune state

Joined or pruned state of the interface:

·         NI—Default state.

·         Join—Joined state.

·         Prune—Pruned state.

 

display mld ssm-mapping

Use display mld ssm-mapping to display MLD SSM mappings.

Syntax

display mld ssm-mapping ipv6-group-address

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F.

Examples

# Display MLD SSM mappings for IPv6 multicast group FF3E::101 on the public network.

<Sysname> display mld ssm-mapping ff3e::101

 Group: FF3E::101

 Source list:

        1::1

        1::2

        10::1

        100::10

Table 11 Command output

Fields

Description

Group

IPv6 multicast group address.

Source list

List of IPv6 multicast source addresses.

 

display mld user-authorization

Use display mld user-authorization to display authorization information for MLD users.

Syntax

display mld user-authorization [ access-type { ipoe | portal | ppp } ] [ access-interface interface-type interface-number | interface interface-type interface-number ] [ active-user ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

access-type: Specifies an access type.

ipoe: Specifies the IPoE users.

portal: Specifies the portal users.

ppp: Specifies the PPP users.

access-interface interface-type interface-number: Specifies a user access interface by its type and number.

interface-type interface-number: Specifies an interface by its type and number.

active-user: Specifies MLD users that have joined IPv6 multicast groups.

Usage guidelines

If you do not specify any parameters, this command displays authorization information for all MLD users.

Examples

# Display information about all authorized MLD users.

<Sysname> display mld user-authorization

 Authorized users in total: 3

 

   User name: user1@isp1

   Access type: PPP

   Interface: Multicast-UA2

   Access interface: bas-interface1 (GigabitEthernet3/1/1.2)

   User address: 102::1

   User ID: 0x20000002 (Session ID 0x1)

   Maximum allowed programs: 10

   User profile: profile1

   Authorized program list:

     FF03::101

 

   User name: user2

   Access type: IPoE

   Interface: Multicast-UA0

   Access interface: GigabitEthernet3/1/1.1

   VLAN ID: 100

   Second VLAN ID: 10

   User address: 101::1

   User ID: 0x40000001 (VLAN ID 100, Second VLAN ID 10)

   Maximum allowed programs: 10

   User profile: profile1

   Authorized program list:

     FF03::101

     FF03::102

     FF03::103

 

   User name: user3

   Access type: Portal

   Interface: Multicast-UA1

   Access interface: GigabitEthernet3/1/2

   User address: 103::1

   User ID: 0x10000001

   Maximum allowed programs: 10

   User profile: profile1

   Authorized program list:

     FF03::101

     FF03::103

# Display authorization information for MLD users that have joined IPv6 multicast groups.

<Sysname> display mld user-authorization active-user

 Authorized users in total: 3

 Active users in total: 1

 

   User name: user1@isp1

   Access type: PPP

   Interface: Multicast-UA2

   Access interface: bas-interface1 (GigabitEthernet3/1/1.2)

   User address: 102::1

   User ID: 0x20000002 (Session ID 0x1)

   Maximum allowed programs: 4

   User profile: profile1

   Authorized program list:

     FF03::101

# Display authorization information for MLD users that access the network through PPP.

<Sysname> display mld user-authorization access-type ppp

 Authorized users in total: 2

 Matching users in total: 1

 

   User name: user1@isp1

   Access type: PPP

   Interface: Multicast-UA2

   Access interface: bas-interface1 (GigabitEthernet3/1/1.2)

   User address: 102::1

   User ID: 0x20000002 (Session ID 0x1)

   Maximum allowed programs: 10

   User profile: profile1

   Authorized program list:

     FF03::101

# Display authorization information for MLD users that access the network through PPP and have joined IPv6 multicast groups.

<Sysname> display mld user-authorization access-type ppp active-user

 Authorized users in total: 2

 Active users in total: 1

 Matching users in total: 1

 

   User name: user1@isp1

   Access type: PPP

   Interface: Multicast-UA2

   Access interface: bas-interface1 (GigabitEthernet3/1/1.2)

   User address: 102::1

   User ID: 0x20000002 (Session ID 0x1)

   Maximum allowed programs: 4

   User profile: profile1

   Authorized program list:

     FF03::101

Table 12  Command output

Field

Description

Authorized users in total

Total number of access users.

Matching users in total

Total number of matching MLD users.

Access type

Access type: IPoE, Portal, or PPP.

Interface

Multicast user interface.

Access interface

Actual interface through which the user accesses the network.

User address

IP address of the user. This field is not displayed if the device does not obtain the IP address of the user.

Gateway address

Gateway IP address of the user. This field is not displayed if the device does not obtain the gateway IP address of the user.

User MAC address

MAC address of the user. This field is not displayed if the device does not obtain the MAC address of the user.

User ID

ID of the user.

Leased user ID

ID of the IPoE leased user. This field is displayed only for IPoE leased users.

Session ID

ID of the user session. This field is displayed only for PPPoE users.

VLAN ID

Outer VLAN ID (or the unique VLAN ID) for the user. This field is not displayed if the user does not have a VLAN ID.

Second VLAN ID

Inner VLAN ID for the user. This field is not displayed if the user does not have an inner VLAN ID.

PVC ID

PVC ID. This field is displayed only when the multicast user accesses the network through an ATM interface.

Maximum allowed programs

Maximum number of the IPv6 multicast groups that the user can join.

User profile

User profile name of the authorized user.

The user can join IPv6 multicast groups permitted by the MLD user access control policy in the user profile. You can use the mld access-policy command to configure an MLD user access control policy.

Authorized program list

List of the IPv6 multicast groups that the user is authorized to join.

Active users in total

Total number of MLD users that have joined IPv6 multicast groups.

 

last-listener-query-count (MLD view)

Use last-listener-query-count to set the MLD last listener query count globally.

Use undo last-listener-query-count to restore the default.

Syntax

mld last-member-query-count count

undo mld last-member-query-count

Default

The MLD last listener query count equals the MLD querier's robustness variable.

Views

MLD view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD last listener query count in the range of 1 to 255.

Usage guidelines

You can set the MLD last listener query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD last listener query count to 6 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] last-listener-query-count 6

Related commands

mld last-listener-query-count

last-listener-query-interval (MLD view)

Use last-listener-query-interval to set the MLD last listener query interval globally.

Use undo last-listener-query-interval to restore the default.

Syntax

last-listener-query-interval interval

undo last-listener-query-interval

Default

The MLD last listener query interval is 1 second.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the MLD last listener query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD last listener query interval to 6 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] last-listener-query-interval 6

Related commands

mld last-listener-query-interval

max-response-time (MLD view)

Use max-response-time to set the maximum response time for MLD general queries globally.

Use undo max-response-time to restore the default.

Syntax

max-response-time time

undo max-response-time

Default

The maximum response time for MLD general queries is 10 seconds.

Views

MLD view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for MLD general queries in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global maximum response time for MLD general queries to 25 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] max-response-time 25

Related commands

mld max-response-time

mld

Use mld to enter MLD view.

Use undo mld to delete the configurations in MLD view.

Syntax

mld

undo mld

Views

System view

Predefined user roles

network-admin

Examples

# Enter MLD view of the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld]

mld access-policy

Use mld access-policy to configure an MLD user access policy.

Use undo mld access-policy to delete an MLD user access policy.

Syntax

mld access-policy ipv6-acl-number

undo mld access-policy ipv6-acl-number

Default

No MLD user access policies exist. MLD users are not authorized to join any IPv6 multicast groups.

Views

User profile view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic or advanced ACL number, in the range of 2000 to 3999. MLD users can join only IPv6 multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, MLD users cannot join IPv6 multicast groups.

Usage guidelines

You can configure multiple MLD user access policies by using this command multiple times. An MLD report is permitted if it matches one of the access policies.

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

·          For the rule to take effect, do not specify the vpn-instance vpn-instance option.

·          In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast source address.

·          In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡  MLDv1 reports.

¡  MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.

·          Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure an MLD user access policy in user profile abc to authorize MLD users to join IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 basic 2000

[Sysname-acl-ipv6-basic-2000] rule permit source ff03::101 128

[Sysname-acl-ipv6-basic-2000] quit

[Sysname] user-profile abc

[Sysname-user-profile-abc] mld access-policy 2000

mld attack-suppression per-interface aging-time

Use mld attack-suppression per-interface aging-time to set the aging time for interface-based MLD suppression entries.

Use undo mld attack-suppression per-interface aging-time to restore the default.

Syntax

mld attack-suppression per-interface aging-time time

undo mld attack-suppression per-interface aging-time

Default

The aging time is 30 seconds for interface-based MLD suppression entries.

Views

System view

Predefined user roles

network-admin

Parameters

time: Specifies the aging time of interface-based MLD suppression entries, in the range of 1 to 65535 seconds.

Usage guidelines

When the aging time of the MLD suppression entry on an interface expires, the device ages out the entry and stops limiting the packet rate only if no MLD attack exists on the interface. Then, the device recounts the number of incoming MLD packets on the interface to start a new MLD suppression process.

This command takes effect only after you execute the mld attack-suppression per-interface enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 60 seconds for interface-based MLD suppression entries.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface aging-time 60

mld attack-suppression per-interface check-interval

mld attack-suppression per-interface check-interval to set the check interval for interface-based MLD suppression.

undo mld attack-suppression per-interface check-interval to restore the default.

Syntax

mld attack-suppression per-interface check-interval interval

undo mld attack-suppression per-interface check-interval

Default

The check interval is 30 seconds for interface-based MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Specifies the check interval for interface-based MLD suppression, in the range of 1 to 255 seconds.

Usage guidelines

This command takes effect only after you execute the mld attack-suppression per-interface enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the check interval to 10 seconds for interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface check-interval 10

mld attack-suppression per-interface enable

Use mld attack-suppression per-interface enable to enable interface-based MLD suppression.

Use undo mld attack-suppression per-interface enable to disable interface-based MLD suppression.

Syntax

mld attack-suppression per-interface enable

undo mld attack-suppression per-interface enable

Default

Interface-based MLD suppression is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

The interface-based MLD suppression feature allows the device to create MLD suppression entries and count the number of received MLD packets on a per interface basis. When the number exceeds the threshold within the check interval, the device identifies these packets as attack packets and limits the rate for sending them to the CPU.

This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable MLD snooping globally on the device. MLD packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.

Examples

# Enable interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface enable

mld attack-suppression per-interface threshold

Use mld attack-suppression per-interface threshold to set the threshold for triggering interface-based MLD suppression.

Use undo mld attack-suppression per-interface threshold to restore the default.

Syntax

mld attack-suppression per-interface threshold threshold-value

undo mld attack-suppression per-interface threshold

Default

The threshold is 6000 for triggering interface-based MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

threshold-value: Specifies the threshold for triggering interface-based MLD suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of MLD packets that an interface can receive within the check interval.

Usage guidelines

An interface is attacked if the number of received MLD packets on the interface exceeds the threshold within the check interval.

This command takes effect only after you execute the mld attack-suppression per-interface enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the threshold to 300 for triggering interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface threshold 300

mld attack-suppression source-mac aging-time

Use mld attack-suppression source-mac aging-time to set the aging time for source MAC-based MLD suppression entries.

Use undo mld attack-suppression source-mac aging-time to restore the default.

Syntax

mld attack-suppression source-mac aging-time time

undo mld attack-suppression source-mac aging-time

Default

The aging time is 30 seconds for source MAC-based MLD suppression entries.

Views

System view

Predefined user roles

network-admin

Parameters

time: Specifies the aging time of source MAC-based MLD suppression entries, in the range of 1 to 65535 seconds.in seconds.

Usage guidelines

When the aging time of the MLD attack suppression entry for a MAC address expires, the device ages out the entry and accepts packets from the MAC address only if the packets from the MAC address are not attack packets. Then, the device recounts the number of MLD packets from the MAC address to start a new MLD suppression process.

This command takes effect only after you execute the mld attack-suppression source-mac enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 60 seconds for source MAC-based MLD suppression entries.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac aging-time 60

Related commands

mld attack-suppression source-mac enable

mld attack-suppression source-mac check-interval

Use mld attack-suppression source-mac check-interval to set the check interval for source MAC-based MLD suppression.

Use undo mld attack-suppression source-mac check-interval to restore the default.

Syntax

mld attack-suppression source-mac check-interval interval

undo mld attack-suppression source-mac check-interval

Default

The check interval is 30 seconds for source MAC-based MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Specifies the check interval for source MAC-based MLD suppression, in the range of 1 to 255 seconds.

Usage guidelines

This command takes effect only after you execute the mld attack-suppression source-mac enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the check interval to 10 seconds for source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac check-interval 10

Related commands

mld attack-suppression source-mac enable

mld attack-suppression source-mac threshold

mld attack-suppression source-mac enable

Use mld attack-suppression source-mac enable to enable source MAC-based MLD suppression.

Use undo mld attack-suppression source-mac enable to disable source MAC-based MLD suppression.

Syntax

mld attack-suppression source-mac enable

undo mld attack-suppression source-mac enable

Default

Source MAC-based MLD suppression is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

The source MAC-based MLD suppression feature allows the device to create MLD suppression entries and count the number of received MLD packets on a per source MAC basis. When the number of MLD packets from a MAC address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal MLD packets, the device drops the MLD attack packets from the MAC address.

This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable MLD snooping globally on the device. MLD packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.

Examples

# Enable source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac enable

mld attack-suppression source-mac threshold

Use mld attack-suppression source-mac threshold to set the threshold for triggering source MAC-based MLD suppression.

Use undo mld attack-suppression source-mac threshold to restore the default.

Syntax

mld attack-suppression source-mac threshold threshold-value

undo mld attack-suppression source-mac threshold

Default

The threshold is 6000 for triggering source MAC-based MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

threshold-value: Specifies the threshold for triggering source MAC-based MLD suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of MLD packets that the device can receive from a MAC address within the check interval.

Usage guidelines

When the number of received MLD packets from a MAC address exceeds the threshold within the check interval, the device identifies the MLD packets from this MAC address as attack packets.

This command takes effect only after you execute the mld attack-suppression source-mac enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the threshold to 300 for triggering source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac threshold 300

Related commands

mld attack-suppression source-mac check-interval

mld attack-suppression source-mac enable

mld authorization-enable

Use mld authorization-enable to enable the IPv6 multicast access control feature.

Use undo mld authorization-enable to disable the IPv6 multicast access control feature.

Syntax

mld authorization-enable

undo mld authorization-enable

Default

The IPv6 multicast access control feature is disabled.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

VT interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on local online users. Non-local users and offline users are not affected.

Examples

# Enable the IPv6 multicast access control feature on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld authorization-enable

mld enable

Use mld enable to enable MLD on an interface.

Use undo mld enable to disable MLD on an interface.

Syntax

mld enable

undo mld enable

Default

MLD is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IPv6 multicast routing is enabled on the public network.

Other MLD configurations on the interface take effect only when MLD is enabled on the interface.

Examples

# Enable IPv6 multicast routing on the public network, and enable MLD for GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] ipv6 multicast routing

[Sysname-mrib6] quit

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld enable

Related commands

ipv6 multicast routing

mld fast-leave

Use mld fast-leave to enable fast-leave processing on an interface.

Use undo mld fast-leave to disable fast-leave processing on an interface.

Syntax

mld fast-leave [ group-policy ipv6-acl-number ]

undo mld fast-leave

Default

Fast-leave processing is disabled. The MLD querier sends MLD multicast-address-specific or multicast-address-and-source-specific queries after receiving a done message.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999. If you specify an ACL, the fast-leave processing feature takes effect only on the IPv6 multicast groups that the ACL permits. The feature takes effect on all IPv6 multicast groups when one of the following conditions exists:

·          You do not specify an ACL.

·          The specified ACL does not exist.

·          The specified ACL does not have valid rules.

Usage guidelines

The fast-leave processing feature enables an MLD querier to suppress MLD multicast-address-specific or multicast-address-and-source-specific queries upon receiving MLD done messages permitted by the ACL.

When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:

·          For the rule to take effect, do not specify the vpn-instance vpn-instance option.

·          The source source-address source-prefix option specifies an IPv6 multicast group address.

·          Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Enable fast-leave processing on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld fast-leave

mld group-policy

Use mld group-policy to configure an IPv6 multicast group policy on an interface to control the IPv6 multicast groups that hosts attached to the interface can join.

Use undo mld group-policy to delete the IPv6 multicast group policy on an interface.

Syntax

mld group-policy ipv6-acl-number [ version-number ]

undo mld group-policy

Default

No IPv6 multicast group policy exists. Hosts attached to the interface can join any IPv6 multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic or advanced ACL by its number in the range of 2000 to 3999. Receiver hosts can join only the IPv6 multicast groups that the ACL permits. If the ACL does not exist or have valid rules, receiver hosts cannot join IPv6 multicast groups.

version-number: Specifies an MLD version number, 1 or 2. By default, this command takes effect on both MLDv1 reports and MLDv2 reports.

Usage guidelines

An IPv6 multicast group policy filters MLD reports to control the IPv6 multicast groups that hosts can join.

This command does not take effect on static member interfaces because static member interfaces do not send MLD reports.

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

·          For the rule to take effect, do not specify the vpn-instance vpn-instance option.

·          In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.

·          In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡  MLDv1 reports.

¡  MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.

·          Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure an IPv6 multicast group policy on GigabitEthernet 3/1/1 so that hosts attached to the interface can join only IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 basic 2005

[Sysname-acl-ipv6-basic-2005] rule permit source ff03::101 128

[Sysname-acl-ipv6-basic-2005] quit

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld group-policy 2005

mld join-by-session

Use mld join-by-session to enable per-session IPv6 multicast forwarding.

Use undo mld join-by-session to restore the default.

Syntax

mld join-by-session [ mode { both | bras | non-bras } ]

undo mld join-by-session

Default

IPv6 multicast data is forwarded on a per-interface basis.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

Predefined user roles

network-admin

Parameters

mode: Specifies a user access type. If you do not specify this option, per-session multicast forwarding is enabled for users of all access types.

both: Specifies BRAS and non-BRAS user access types.

bras: Specifies the BRAS user access type, including IPoE, PPP, and portal.

non-bras: Specifies the non-BRAS user access type. Non-BRAS users refer to users that do not need to perform authentication.

Usage guidelines

This feature enables an interface to send a separate copy of IPv6 multicast data to each user attached to the interface.

The mld join-by-session and mld user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.

Examples

# Enable per-session IPv6 multicast forwarding on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld join-by-session

mld last-listener-query-count

Use mld last-listener-query-count to set the MLD last member query count on an interface.

Use undo mld last-listener-query-count to restore the default.

Syntax

mld last-listener-query-count count

undo mld last-listener-query-count

Default

The MLD last listener query count equals the MLD querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD last listener query count in the range of 1 to 255.

Usage guidelines

You can set the MLD last listener query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD last listener query count to 6 on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld last-listener-query-count 6

Related commands

last-listener-query-count (MLD view)

mld last-listener-query-interval

Use mld last-listener-query-interval to set the MLD last listener query interval on an interface.

Use undo mld last-listener-query-interval to restore the default.

Syntax

mld last-listener-query-interval interval

undo mld last-listener-query-interval

Default

The MLD last listener query interval is 1 second.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the MLD last listener query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD last listener query interval to 6 seconds on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld last-listener-query-interval 6

Related commands

last-listener-query-interval (MLD view)

mld max-response-time

Use mld max-response-time to set the maximum response time for MLD general queries on an interface.

Use undo mld max-response-time to restore the default.

Syntax

mld max-response-time time

undo mld max-response-time

Default

The maximum response time for MLD general queries is 10 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for MLD general queries, in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the maximum response time for MLD general queries to 25 seconds on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld max-response-time 25

Related commands

max-response-time (MLD view)

mld non-stop-routing

Use mld non-stop-routing to enable MLD NSR.

Use undo mld non-stop-routing to disable MLD NSR.

Syntax

mld non-stop-routing

undo mld non-stop-routing

Default

MLD NSR is disabled.

Views

System view

Predefined user roles

network-admin

Examples

# Enable MLD NSR.

<Sysname> system-view

[Sysname] mld non-stop-routing

mld other-querier-present-timeout

Use mld other-querier-present-timeout to set the MLD other querier present timer on an interface.

Use undo mld other-querier-present-timeout to restore the default.

Syntax

mld other-querier-present-timeout time

undo mld other-querier-present-timeout

Default

The MLD other querier present timer is calculated by using the following formula:

[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD other querier present timer for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD other querier present timer to 125 seconds on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld other-querier-present-timeout 125

Related commands

other-querier-present-timeout (MLD view)

mld proxy enable

Use mld proxy enable to enable MLD proxying on an interface.

Use undo mld proxy enable to disable MLD proxying on an interface.

Syntax

mld proxy enable

undo mld proxy enable

Default

MLD proxying is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IPv6 multicast routing is enabled on the public network.

Examples

# Enable IPv6 multicast routing on the public network, and enable MLD proxying on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] ipv6 multicast routing

[Sysname-mrib6] quit

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld proxy enable

Related commands

ipv6 multicast routing

mld proxy forwarding

Use mld proxy forwarding to enable IPv6 multicast forwarding on a non-querier interface.

Use undo mld proxy forwarding to disable IPv6 multicast forwarding on a non-querier interface.

Syntax

mld proxy forwarding

undo mld proxy forwarding

Default

IPv6 multicast forwarding is disabled for a non-querier interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Typically, only MLD queriers can forward IPv6 multicast traffic and non-queriers cannot. This prevents IPv6 multicast data from being repeatedly forwarded. If a router interface on the MLD proxy device failed the querier election, enable multicast forwarding capability on this interface to forward multicast data to attached receivers.

Examples

# Enable IPv6 multicast forwarding on GigabitEthernet 3/1/1 (non-querier interface).

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld proxy forwarding

mld query-interval

Use mld query-interval to set the MLD general query interval on an interface.

Use undo mld query-interval to restore the default.

Syntax

mld query-interval interval

undo mld query-interval

Default

The MLD general query interval is 125 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD general interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD general interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD general query interval to 60 seconds on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld query-interval 60

Related commands

query-interval (MLD view)

mld robust-count

Use mld robust-count to set the MLD querier's robustness variable on an interface.

Use undo mld robust-count to restore the default.

Syntax

mld robust-count count

undo mld robust-count

Default

The MLD querier's robustness variable is 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD querier's robustness variable in the range of 1 to 255.

Usage guidelines

The MLD querier's robustness variable defines the number of times to retransmit MLD queries if packet loss occurs. A higher robustness variable makes the MLD querier more robust, but it increases the timeout time for IPv6 multicast groups.

You can set the MLD querier's robustness variable for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD querier's robustness variable to 5 on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld robust-count 5

Related commands

robust-count (MLD view)

mld startup-query-count

Use mld startup-query-count to set the MLD startup query count on an interface.

Use undo mld startup-query-count to restore the default.

Syntax

mld startup-query-count count

undo mld startup-query-count

Default

The MLD startup query count equals the MLD querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD startup query count in the range of 1 to 255.

Usage guidelines

You can set the MLD startup query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD startup query count to 5 on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld startup-query-count 5

Related commands

startup-query-count (MLD view)

mld startup-query-interval

Use mld startup-query-interval to set the MLD startup query interval on an interface.

Use undo mld startup-query-interval to restore the default.

Syntax

mld startup-query-interval interval

undo mld startup-query-interval

Default

The MLD startup query interval equals one quarter of the MLD general query interval.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD startup query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD startup query interval to 100 seconds on GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld startup-query-interval 100

Related commands

startup-query-interval (MLD view)

mld static-group

Use mld static-group to configure an interface as a static group member of an IPv6 multicast group.

Use undo mld static-group to restore the default.

Syntax

mld static-group ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ]

undo mld static-group { all | ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ] }

Default

An interface is not a static member of IPv6 multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. In the batch configuration, this IPv6 multicast group address represents the start address.

inc-step-mask group-mask-length: Specifies the mask length step for IPv6 multicast groups in batch configuration. The mask length is an integer in the range of 9 to 128.

group-number: Specifies the number of IPv6 multicast group addresses in batch configuration, an integer in the range of 2 to 512.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command configures an interface as a static group member of the multicast groups with all IPv6 multicast source addresses.

dot1q vid vlan-list: Specifies a space-separated list of up to 10 outer VLAN ID items. Each item specifies an outer VLAN ID or a range of outer VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a single-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

dot1q vid vlan-id second-dot1q vlan-list: Specifies the outer and inner VLAN IDs. The vlan-id argument specifies the outer VLAN ID in the range of 1 to 4094. The vlan-list argument specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a double-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

all: Specifies all IPv6 multicast groups that the interface has statically joined.

Usage guidelines

For IPv6 multicast routing entries to be created, specify an IPv6 multicast source address if the specified IPv6 multicast group address is in the SSM group range.

For the same IPv6 multicast group, the non-VLAN-based, single-VLAN-based, or double-VLAN-based static member interface configurations are mutually exclusive.

When you configure a subinterface as a non-VLAN-based static member interface, do not configure the mld join-by-session or mld user-vlan-aggregation dot1q command on the subinterface. Otherwise, IPv6 static IPv6 multicast forwarding entries cannot be created.

When you configure a subinterface as a VLAN-based static member interface, a static multicast forwarding entry can be created under either of the following conditions:

·          Users that belong to the specified VLANs come online if the mld user-vlan-aggregation dot1q command is not configured on the subinterface.

·          The VLAN IDs specified in this command are the same as or included in the VLAN IDs specified in the mld user-vlan-aggregation dot1q command configured on the subinterface.

When you configure an interface as a static group member of IPv6 multiple multicast groups or multicast sources and groups in batch, follow these restrictions and guidelines:

·          IPv6 multicast group addresses in different batch configurations can overlap.

·          The undo command does not support deleting one IPv6 multicast group from batch configuration. When you delete a batch configuration, make sure the setting in the undo command matches the batch configuration.

·          If two batch configurations have the same parameter settings except the setting of the number group-number option, the new configuration takes effect.

Examples

# Configure GigabitEthernet 1/0/1 as a static group member of IPv6 multicast groups ff03::101 and ff03::102 in batch. In the batch configuration, the start multicast group address is ff03::101, the mask step is 128, and the number of multicast groups is 2.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mld static-group ff03::101 inc-step-mask 128 number 2

# Configure GigabitEthernet 1/0/1 as a static group member of IPv6 multicast sources and groups (2001::101, ff03::101) and (2001::101, ff03::102) in batch. In the batch configuration, the start IPv6 multicast group address is ff03::101, the IPv6 multicast source address is 2001::101, the mask length step is 128, and the number of IPv6 multicast groups is 2.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mld static-group ff03::101 inc-step-mask 128 number 2 source 2001::101

# Configure GigabitEthernet 1/0/1.1 as a VLAN-based static group member of IPv6 multicast groups ff03::101 and ff03::102 in batch. In the batch configuration, the start multicast group address is ff03::101, the mask length step is 128, the number of multicast groups is 2, and the VLAN ID is 10.

<Sysname> system-view

[Sysname] interface GigabitEthernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] mld static-group ff03::101 inc-step-mask 128 number 2 dot1q vid 10

mld user-vlan-aggregation dot1q

Use mld user-vlan-aggregation dot1q to configure VLAN tagging on IPv6 multicast packets.

Use undo mld user-vlan-aggregation dot1q to restore the default.

Syntax

mld user-vlan-aggregation dot1q vid vlan-id [ second-dot1q vlan-id ]

undo mld user-vlan-aggregation dot1q

Default

The IPv6 multicast packets are not tagged with VLAN IDs.

Views

Layer 3 Ethernet subinterface view

Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Parameters

vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094.

second-dot1q vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094.

Usage guidelines

The mld join-by-session and mld user-vlan-aggregation dot1q commands are mutually exclusive. You cannot configure them on the same device.

Examples

# Configure IPv6 multicast packets to be tagged with outer VLAN ID 10 and inner VLAN ID 20 on GigabitEthernet 3/1/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1.1

[Sysname-GigabitEthernet3/1/1.1] mld user-vlan-aggregation dot1q vid 10 second-dot1q 20

mld version

Use mld version to specify an MLD version for an interface.

Use undo mld version to restore the default.

Syntax

mld version version-number

undo mld version

Default

The MLD version is 1.

Views

Interface view

Predefined user roles

network-admin

Parameters

version-number: Specifies an MLD version, 1 or 2.

Examples

# Specify MLD version 2 for GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mld version 2

other-querier-present-timeout (MLD view)

Use other-querier-present-timeout to set the MLD other querier present timer globally.

Use undo other-querier-present-timeout to restore the default.

Syntax

other-querier-present-timeout time

undo other-querier-present-timeout

Default

The MLD other querier present timer is calculated by using the following formula:

[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.

Views

MLD view

Predefined user roles

network-admin

Parameters

time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD other querier present timer globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD other querier present timer to 125 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] other-querier-present-timeout 125

Related commands

mld other-querier-present-timeout

proxy multipath (MLD view)

Use proxy multipath to enable load splitting on the MLD proxy.

Use undo proxy multipath to disable load splitting on the MLD proxy.

Syntax

proxy multipath

undo proxy multipath

Default

The load splitting feature is disabled on the MLD proxy.

Views

MLD view

Predefined user roles

network-admin

Usage guidelines

Use this feature when the MLD proxy has multiple proxy interfaces. All proxy interfaces on the MLD proxy share IPv6 multicast traffic on a per-group basis. If you do not enable this feature, only the proxy interface with the highest IPv6 address forwards IPv6 multicast traffic.

Examples

# Enable load splitting on the MLD proxy device on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] proxy multipath

query-interval (MLD view)

Use query-interval to set the MLD general query interval globally.

Use undo query-interval to restore the default.

Syntax

query-interval interval

undo query-interval

Default

The MLD general query interval is 125 seconds.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD general query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD general query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD general query interval to 60 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] query-interval 60

Related commands

mld query-interval

reset mld attack-suppression per-interface entry

Use reset mld attack-suppression per-interface entry to remove interface-based MLD suppression entries.

Syntax

In standalone mode:

reset mld attack-suppression per-interface entry { all | slot slot-number { all | interface interface-type interface-number  } }

In IRF mode:

reset mld attack-suppression per-interface entry { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)

all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

interface interface-type interface-number: Specifies an interface by its type and number.

Examples

# Remove all interface-based MLD suppression entries.

<Sysname> reset mld attack-suppression per-interface entry all

Related commands

display mld attack-suppression per-interface entry

reset mld attack-suppression per-interface statistics

Use reset mld attack-suppression per-interface statistics to clear MLD packet statistics about interface-based MLD suppression entries.

Syntax

In standalone mode:

reset mld attack-suppression per-interface statistics { all | slot slot-number { all | interface interface-type interface-number } }

In IRF mode:

reset mld attack-suppression per-interface statistics { all | chassis chassis-number slot slot-number { all | interface interface-type interface-number } }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)

all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

interface interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

This command clears statistics about the following fields in the output from the display mld attack-suppression per-interface entry verbose command: CPU receive, CPU drop, and Drv drop.

Examples

# Clear MLD packet statistics about all interface-based MLD suppression entries.

<Sysname> reset mld attack-suppression per-interface statistics all

Related commands

display mld attack-suppression per-interface entry

reset mld attack-suppression source-mac entry

Use reset mld attack-suppression source-mac entry to remove source MAC-based MLD suppression entries.

Syntax

In standalone mode:

reset mld attack-suppression source-mac entry { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }

In IRF mode:

reset mld attack-suppression source-mac entry { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)

all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a MAC address.

Examples

# Remove all source MAC-based MLD suppression entries.

<Sysname> reset mld attack-suppression source-mac entry all

Related commands

display mld attack-suppression source-mac entry

reset mld attack-suppression source-mac statistics

Use reset mld attack-suppression source-mac statistics to clear MLD packet statistics about source MAC-based MLD suppression entries.

Syntax

In standalone mode:

reset mld attack-suppression source-mac statistics { all | slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }

In IRF mode:

reset mld attack-suppression source-mac statistics { all | chassis chassis-number slot slot-number { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all cards (the first all keyword), or specifies all interfaces (the second all keyword). (In standalone mode.)

all: Specifies all member devices (the first all keyword), or specifies all interfaces (the second all keyword). (In IRF mode.)

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a MAC address.

Usage guidelines

This command clears statistics about the following fields in the output from the display mld attack-suppression source-mac entry verbose command: CPU receive, CPU drop, and Drv drop.

Examples

# Clear MLD packet statistics about all source MAC-based MLD suppression entries.

<Sysname> reset mld attack-suppression source-mac statistics all

Related commands

display mld attack-suppression source-mac entry

reset mld group

Use reset mld group to clear dynamic MLD multicast group entries.

Syntax

reset mld group { all | interface interface-type interface-number { all | ipv6-group-address [ prefix-length ] [ ipv6-source-address [ prefix-length ] ] } }

Views

User view

Predefined user roles

network-admin

Parameters

all: The first all specifies all interfaces, and the second all specifies all MLD multicast groups.

interface-type interface-number: Specifies an interface by its type and number.

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command clears dynamic MLD multicast group entries for all IPv6 multicast sources.

prefix-length: Specifies an address prefix length. The default is 128. For a multicast source address, the value range for this argument is 0 to 128. For a multicast group address, the value range for this argument is 8 to 128.

Usage guidelines

This command might interrupt the IPv6 multicast information transmission.

Examples

# Clear dynamic MLD multicast groups for all interfaces on the public network.

<Sysname> reset mld group all

# Clear all dynamic MLD multicast group entries for GigabitEthernet 3/1/1 on the public network.

<Sysname> reset mld group interface gigabitethernet 3/1/1 all

# Clear the dynamic entry of the MLD multicast group FF03::101:10 for GigabitEthernet 3/1/1 on the public network.

<Sysname> reset mld group interface gigabitethernet 3/1/1 ff03::101:10

Related commands

display mld group

robust-count (MLD view)

Use robust-count to set the MLD querier's robustness variable globally.

Use undo robust-count to restore the default.

Syntax

robust-count count

undo robust-count

Default

The MLD querier's robustness variable is 2.

Views

MLD view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD querier's robustness variable in the range of 1 to 255.

Usage guidelines

The MLD querier's robustness variable defines the number of times to retransmit MLD queries if packet loss occurs. A higher robustness variable makes the MLD querier more robust, but it increases the timeout time for IPv6 multicast groups.

You can set the MLD querier's robustness variable globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD querier's robustness variable to 5 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] robust-count 5

Related commands

mld robust-count

ssm-mapping (MLD view)

Use ssm-mapping to configure an MLD SSM mapping.

Use undo ssm-mapping to delete MLD SSM mappings.

Syntax

ssm-mapping ipv6-source-address ipv6-acl-number

undo ssm-mapping { ipv6-source-address | all }

Default

No MLD SSM mappings exist.

Views

MLD view

Predefined user roles

network-admin

Parameters

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address.

ipv6-acl-number: Specifies an IPv6 basic ACL number in the range of 2000 to 2999. IPv6 multicast groups in MLD reports permitted by the ACL are associated with the IPv6 multicast source. If the ACL does not exist or does not have valid rules, no IPv6 multicast groups are associated with the IPv6 multicast source.

all: Specifies all MLD SSM mappings.

Usage guidelines

When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:

·          For the rule to take effect, do not specify the vpn-instance vpn-instance option.

·          The source source-address source-prefix option specifies an IPv6 multicast group address.

·          Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Configure an MLD SSM mapping with IPv6 multicast source 1::1 and IPv6 multicast group range FF3E::/64 on the public network.

<Sysname> system-view

[Sysname] acl ipv6 basic 2001

[Sysname-acl-ipv6-basic-2001] rule permit source ff3e:: 64

[Sysname-acl-ipv6-basic-2001] quit

[Sysname] mld

[Sysname-mld] ssm-mapping 1::1 2001

Related commands

display mld ssm-mapping

startup-query-count (MLD view)

Use startup-query-count to set the MLD startup query count globally.

Use undo startup-query-count to restore the default.

Syntax

startup-query-count count

undo startup-query-count

Default

The MLD startup query count equals the MLD querier's robustness variable.

Views

MLD view

Predefined user roles

network-admin

Parameters

count: Specifies an MLD startup query count in the range of 1 to 255.

Usage guidelines

You can set the MLD startup query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD startup query count to 5 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] startup-query-count 5

Related commands

mld startup-query-count

startup-query-interval (MLD view)

Use startup-query-interval to set the MLD startup query interval globally.

Use undo startup-query-interval to restore the default.

Syntax

startup-query-interval interval

undo startup-query-interval

Default

The MLD startup query interval equals one quarter of the MLD general query interval.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD startup query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD startup query interval to 100 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] startup-query-interval 100

Related commands

mld startup-query-interval

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网