- Table of Contents
-
- H3C S6300 Configuration Examples-6W100
- 01-Login Management Configuration Examples
- 02-RBAC Configuration Examples
- 03-Software Upgrade Configuration Examples
- 04-Software Patching Examples
- 05-ISSU Configuration Examples
- 06-Ethernet Link Aggregation Configuration Examples
- 07-Port Isolation Configuration Examples
- 08-Spanning Tree Configuration Examples
- 09-VLAN Configuration Examples
- 10-VLAN Tagging Configuration Examples
- 11-DHCP Snooping Configuration Examples
- 12-Cross-Subnet Dynamic IP Address Allocation Configuration Examples
- 13-IGMP Snooping Configuration Examples
- 14-MLD Snooping Configuration Examples
- 15-IPv6 Multicast VLAN Configuration Examples
- 16-ACL Configuration Examples
- 17-Control Plane-Based QoS Policy Configuration Examples
- 18-Traffic Policing Configuration Examples
- 19-GTS and Rate Limiting Configuration Examples
- 20-Priority and Queue Scheduling Configuration Examples
- 21-Traffic Filtering Configuration Examples
- 22-AAA Configuration Examples
- 23-Port Security Configuration Examples
- 24-Portal Configuration Examples
- 25-SSH Configuration Examples
- 26-IP Source Guard Configuration Examples
- 27-Ethernet OAM Configuration Examples
- 28-CFD Configuration Examples
- 29-DLDP Configuration Examples
- 30-FCoE Configuration Examples
- 31-NTP Configuration Examples
- 32-PTP Configuration Examples
- 33-SNMP Configuration Examples
- 34-NQA Configuration Examples
- 35-Mirroring Configuration Examples
- 36-sFlow Configuration Examples
- 37-OpenFlow Configuration Examples
- Related Documents
-
Title | Size | Download |
---|---|---|
14-MLD Snooping Configuration Examples | 150.92 KB |
|
H3C S6300 Switch Series |
MLD Snooping Configuration Examples |
|
Copyright © 2020 New H3C Technologies Co., Ltd. All rights reserved.
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
The information in this document is subject to change without notice.
Contents
Example: Configuring IPv6 multicast group policies
Configuration restrictions and guidelines
Example: Configuring IPv6 static ports
Introduction
This document introduces MLD snooping configuration examples.
Prerequisites
This document is not restricted to specific software or hardware versions.
The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
This document assumes that you have basic knowledge of MLD snooping.
Example: Configuring IPv6 multicast group policies
Network requirements
As shown in Figure 1:
· Router A runs MLDv1 and acts as the MLD querier in VLAN 100.
· Switch A runs MLDv1 snooping.
Configure IPv6 multicast group policies on Switch A so that Host A and Host B receive only the IPv6 multicast data addressed to the group FF1E::101.
Requirements analysis
To meet the network requirements, you must perform the following tasks:
· To avoid receiver hosts in VLAN 100 from receiving IPv6 multicast data addressed to other groups, enable dropping unknown IPv6 multicast data in VLAN 100.
· To configure IPv6 multicast group filtering, specify an IPv6 basic ACL and create ACL rules to define the groups you want the receiver hosts to join.
Software version used
This configuration example was created and verified on S6300-CMW710-R2310.
Configuration restrictions and guidelines
When you configure IPv6 multicast group polices, follow these restrictions and guidelines:
· You must globally enable MLD snooping in system view before you enable MLD snooping for a VLAN in VLAN view.
· IPv6 multicast group filtering denies all groups if the specified ACL does not exist or the ACL does not have any rules.
Configuration procedures
1. Assign an IPv6 address and prefix length to each interface on the routers in the IPv6 PIM-DM domain. (Details not shown.)
2. Configure an IPv6 unicast routing protocol on the routers in the IPv6 PIM-DM domain. (Details not shown.)
3. Enable IPv6 multicast routing globally on the routers in the IPv6 PIM-DM domain. (Details not shown.)
4. Enable IPv6 PIM-DM for the interfaces through which routers connects with each other on the routers in the IPv6 PIM-DM domain. (Details not shown.)
5. Configure Switch A:
# Enable MLD snooping globally.
<SwitchA> system-view
[SwitchA] mld-snooping
[SwitchA-mld-snooping] quit
# Create VLAN 100, and assign Ten-GigabitEthernet 1/0/1 through Ten-GigabitEthernet 1/0/4 to this VLAN.
[SwitchA] vlan 100
[SwitchA-vlan100] port ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4
# Enable MLD snooping and dropping unknown IPv6 multicast data for VLAN 100.
[SwitchA-vlan100] mld-snooping enable
[SwitchA-vlan100] mld-snooping drop-unknown
[SwitchA-vlan100] quit
# Configure IPv6 multicast group filtering for VLAN 100 so that receiver hosts in this VLAN can join only the group FF1E::101.
[SwitchA] acl ipv6 number 2001
[SwitchA-acl6-basic-2001] rule permit source ff1e::101 128
[SwitchA-acl6-basic-2001] quit
[SwitchA] mld-snooping
[SwitchA–mld-snooping] group-policy 2001 vlan 100
[SwitchA–mld-snooping] quit
Verifying the configuration
# Send MLD reports from Host A and Host B to join the groups FF1E::101 and FF1E::202. (Details not shown.)
# Send IPv6 multicast data from the source to the groups FF1E::101 and FF1E::202. (Details not shown.)
# Display information about dynamic MLD snooping forwarding entries for VLAN 100 on Switch A.
[SwitchA] display mld-snooping group vlan 100
Total 1 entries.
VLAN 100: Total 1 entries.
(::, FF1E::101)
Host slots (1 in total):
3
Host ports (2 in total):
XGE1/0/3 (00:03:23)
XGE1/0/4 (00:04:10)
The output shows that Host A and Host B have joined the group FF1E::101 through the member ports Ten-GigabitEthernet 1/0/4 and Ten-GigabitEthernet 1/0/3. Host A and Host B do not join the group FF1E::202. IPv6 multicast group filtering has taken effect.
Configuration files
Switch A:
#
acl ipv6 number 2001
rule 0 permit source FF1E::101/128
#
mld-snooping
group-policy 2001 vlan 100
#
vlan 100
mld-snooping enable
mld-snooping drop-unknown
#
interface Ten-GigabitEthernet1/0/1
port access vlan 100
#
interface Ten-GigabitEthernet1/0/2
port access vlan 100
#
interface Ten-GigabitEthernet1/0/3
port access vlan 100
#
interface Ten-GigabitEthernet1/0/4
port access vlan 100
#
Example: Configuring IPv6 static ports
Network requirements
As shown in Figure 2:
· All switches in VLAN 100 run MLD snooping.
· Router A runs MLDv1 and acts as the MLD querier.
· STP runs in VLAN 100. The path of Switch A—Switch B is blocked to avoid loops.
Configure MLD snooping static ports to meet the following requirements:
· IPv6 multicast data uninterruptedly flows to Host A and Host B after a link switchover occurs between Switch A and Switch B.
· Host A and Host B permanently receive the IPv6 multicast data addressed to the group FF1E::101.
Requirements analysis
To meet the network requirements, you must perform the following tasks:
· By default, when a link switchover occurs, multicast data can flow along the new link after a minimum of one MLD query-response cycle. Multicast delivery is interrupted during this process.
Configure Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 on Switch A and Ten-GigabitEthernet 1/0/2 on Switch C as static router ports. Then, IPv6 multicast data will always be forwarded to these ports, and multicast delivery is uninterrupted.
· Configure Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 on Switch B as static member ports of the group FF1E::101. Then, IPv6 multicast data for the group will always be forwarded out of these ports, and Host A and Host B can always receiver the data.
Software version used
This configuration example was created and verified on S6300-CMW710-R2310.
Configuration restrictions and guidelines
You must globally enable MLD snooping in system view before you enable MLD snooping for a VLAN in VLAN view.
Configuration procedures
1. Assign an IPv6 address and prefix length to each interface on the routers in the IPv6 PIM-DM domain. (Details not shown.)
2. Configure an IPv6 unicast routing protocol on the routers in the IPv6 PIM-DM domain. (Details not shown.)
3. Enable IPv6 multicast routing globally on the routers in the IPv6 PIM-DM domain. (Details not shown.)
4. Enable IPv6 PIM-DM for the interfaces through which routers connects with each other on the routers in the IPv6 PIM-DM domain. (Details not shown.)
5. Configure Switch A:
# Enable MLD snooping globally.
<SwitchA> system-view
[SwitchA] mld-snooping
[SwitchA-mld-snooping] quit
# Create VLAN 100, assign Ten-GigabitEthernet 1/0/1 through Ten-GigabitEthernet 1/0/4 to this VLAN, and enable MLD snooping for this VLAN.
[SwitchA] vlan 100
[SwitchA-vlan100] port ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4
[SwitchA-vlan100] mld-snooping enable
[SwitchA-vlan100] quit
# Configure Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 as static router ports.
[SwitchA] interface ten-gigabitethernet 1/0/2
[SwitchA-Ten-GigabitEthernet1/0/2] mld-snooping static-router-port vlan 100
[SwitchA-Ten-GigabitEthernet1/0/2] quit
[SwitchA] interface ten-gigabitethernet 1/0/3
[SwitchA-Ten-GigabitEthernet1/0/3] mld-snooping static-router-port vlan 100
[SwitchA-Ten-GigabitEthernet1/0/3] quit
6. Configure Switch B:
# Enable MLD snooping globally.
<SwitchB> system-view
[SwitchB] mld-snooping
[SwitchB-mld-snooping] quit
# Create VLAN 100, assign Ten-GigabitEthernet 1/0/1 and Ten-GigabitEthernet 1/0/4 to this VLAN, and enable MLD snooping for this VLAN.
[SwitchB] vlan 100
[SwitchB-vlan100] port ten-gigabitethernet 1/0/1 ten-gigabitethernet 1/0/4
[SwitchB-vlan100] mld-snooping enable
[SwitchB-vlan100] quit
# Configure Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 as static member ports for the group FF1E::101 in VLAN 100.
[SwitchB] interface ten-gigabitethernet 1/0/2
[SwitchB-Ten-GigabitEthernet1/0/2] mld-snooping static-group ff1e::101 vlan 100
[SwitchB-Ten-GigabitEthernet1/0/2] quit
[SwitchB] interface ten-gigabitethernet 1/0/3
[SwitchB-Ten-GigabitEthernet1/0/3] mld-snooping static-group ff1e::101 vlan 100
[SwitchB-Ten-GigabitEthernet1/0/3] quit
7. Configure Switch C:
# Enable MLD snooping globally.
<SwitchC> system-view
[SwitchC] mld-snooping
[SwitchC-mld-snooping] quit
# Create VLAN 100, assign Ten-GigabitEthernet 1/0/1 through Ten-GigabitEthernet 1/0/4 to this VLAN, and enable MLD snooping for this VLAN.
[SwitchC] vlan 100
[SwitchC-vlan100] port ten-gigabitethernet 1/0/1 to ten-gigabitethernet 1/0/4
[SwitchC-vlan100] mld-snooping enable
[SwitchC-vlan100] quit
# Configure Ten-GigabitEthernet1/0/2 as a static router port in VLAN 100.
[SwitchC] interface gigabitethernet 1/0/2
[SwitchC-Ten-GigabitEthernet1/0/2] mld-snooping static-router-port vlan 100
[SwitchC-Ten-GigabitEthernet1/0/2] quit
Verifying the configuration
# Display static router port information for VLAN 100 on Switch A.
[SwitchA] display mld-snooping static-router-port vlan 100
VLAN 100:
Router slots (1 in total):
3
Router ports (2 in total):
XGE1/0/2
XGE1/0/3
The output shows that Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 on Switch A have become static router ports in VLAN 100.
# Display information about static MLD snooping forwarding entries for VLAN 100 on Switch B.
[SwitchB] display mld-snooping static-group vlan 100
Total 1 entries.
VLAN 100: Total 1 entries.
(::, FF1E::101)
Host slots (1 in total):
3
Host ports (2 in total):
XGE1/0/2
XGE1/0/3
The output shows that Ten-GigabitEthernet 1/0/2 and Ten-GigabitEthernet 1/0/3 on Switch B have become static member ports of the group FF1E::101 in VLAN 100.
# Display static router port information for VLAN 100 on Switch C.
[SwitchC] display mld-snooping static-router-port vlan 100
VLAN 100:
Router slots (1 in total):
3
Router ports (1 in total):
XGE1/0/2
The output shows that Ten-GigabitEthernet 1/0/2 on Switch C has become a static router port in VLAN 100.
Configuration files
· Switch A:
#
mld-snooping
#
vlan 100
mld-snooping enable
#
interface Ten-GigabitEthernet1/0/1
port access vlan 100
#
interface Ten-GigabitEthernet1/0/2
port access vlan 100
mld-snooping static-router-port vlan 100
#
interface Ten-GigabitEthernet1/0/3
port access vlan 100
mld-snooping static-router-port vlan 100
#
interface Ten-GigabitEthernet1/0/4
port access vlan 100
#
· Switch B:
#
mld-snooping
#
vlan 100
mld-snooping enable
#
interface Ten-GigabitEthernet1/0/1
port access vlan 100
#
interface Ten-GigabitEthernet1/0/2
port access vlan 100
mld-snooping static-group FF1E::101 vlan 100
#
interface Ten-GigabitEthernet1/0/3
port access vlan 100
mld-snooping static-group FF1E::101 vlan 100
#
interface Ten-GigabitEthernet1/0/4
port access vlan 100
#
· Switch C:
#
mld-snooping
#
vlan 100
mld-snooping enable
#
interface Ten-GigabitEthernet1/0/1
port access vlan 100
#
interface Ten-GigabitEthernet1/0/2
port access vlan 100
mld-snooping static-router-port vlan 100
#
interface Ten-GigabitEthernet1/0/3
port access vlan 100
#
interface Ten-GigabitEthernet1/0/4
port access vlan 100
#
Related documentation
· H3C S6300 Switch Series Layer 2—LAN Switching Configuration Guide-Release 23xx
· H3C S6300 Switch Series Layer 2—LAN Switching Command Reference-Release 23xx