Field	Description
Check interval	Check interval of IGMP suppression.
Threshold	Threshold for triggering IGMP suppression.
Aging time	Aging time of IGMP suppression entries.

Related commands

igmp attack-suppression aging-time

igmp attack-suppression check-interval

igmp attack-suppression enable

igmp attack-suppression threshold

display igmp attack-suppression entry

Use display igmp attack-suppression entry to display IGMP suppression entries.

Syntax

display igmp attack-suppression entry slot slot-number { per-interface [ interface interface-type interface-number ] | source-ip [ interface interface-type interface-number | ip-address address ]* | source-mac [ interface interface-type interface-number | mac-address address ]* } [ attack ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays IGMP suppression entries for all interfaces.

mac-address address: Specifies a source MAC address. If you do not specify a source MAC address, this command displays IGMP suppression entries for all source MAC addresses.

ip-address address: Specifies a source IP address. If you do not specify a source IP address, this command displays IGMP suppression entries for all source IP addresses.

slot slot-number: Specifies a card by its slot number.

attack: Displays IGMP suppression entries for IGMP attack packets. If you do not specify this keyword, the command displays all IGMP suppression entries.

verbose: Displays detailed information about IGMP suppression entries. If you do not specify this keyword, the command displays brief information about IGMP suppression entries.

Examples

# Display interface-based IGMP suppression entries for IGMP attack packets.

<Sysname> display igmp attack-suppression entry slot 1 per-interface attack

Total entries: 1

Interface Attack start time Expires

XGE3/0/4 2018/09/10 15:53:34 00:01:15

# Display detailed information about interface-based IGMP suppression entries.

<Sysname> display igmp attack-suppression entry slot 1 per-interface verbose

Total entries: 2

Interface: XGE3/0/1

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop: 123456

Drv drop: 18446744073709551615

# Display source MAC-based IGMP suppression entries for IGMP attack packets.

<Sysname> display igmp attack-suppression entry slot 1 source-mac attack

Total entries: 1

Interface MAC address Attack start time Expires

XGE3/0/4 0001-0001-0004 2018/09/10 15:53:34 00:01:15

# Display detailed information about source MAC-based IGMP suppression entries.

<Sysname> display igmp attack-suppression entry slot 1 source-mac verbose

Total entries: 2

Interface: XGE3/0/1

MAC address: 0001-0001-0001

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

MAC address: 0001-0001-0002

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop : 123456

Drv drop : 18446744073709551615

# Display source IP-based IGMP suppression entries for IGMP attack packets.

<Sysname> display igmp attack-suppression entry source-ip slot 1 attack

Total entries: 1

Interface IP address Attack start time Expires

XGE3/0/4 10.1.23.1 2019/06/12 15:38:46 00:00:21

# Display detailed information about source IP-based IGMP suppression entries.

<Sysname> display igmp attack-suppression entry source-ip slot 1 verbose

Total entries: 2

Interface: XGE3/0/1

IP address: 10.1.23.1

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

IP address: 10.1.23.2

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop : 123456

Drv drop : 18446744073709551615

Table 2 Command output

Field	Description
Total entries	Total number of IGMP suppression entries.
Interface	Interface name.
MAC address	MAC address of the attacker.
IP address	IP address of the attacker.
Drv status	Driver status: · Succeeded—The driver limits the IGMP packet rate. · Failed—The CPU limits the IGMP packet rate. The device has failed or hardware resources for IGMP suppression entries have been used up. · N/A—The incoming IGMP packets are not attack packets and the device does not limit the packet rate. · Not support—The device hardware does not support IGMP suppression. CPU resources are consumed if the device performs software-based rate limiting.
Attack start time	Time when the IGMP attack started. This field displays N/A if no IGMP attack is detected.
Expires	Remaining time of the IGMP suppression entry aging timer. This field displays Off if the aging timer is disabled.
CPU receive	Number of packets that the CPU received.
CPU drop	Number of packets dropped by the CPU.
Drv drop	Number of packets dropped by the driver.

Related commands

reset igmp attack-suppression entry

display igmp group

Use display igmp group to display information about IGMP multicast groups (multicast groups that hosts have joined through IGMP).

Syntax

display igmp [ vpn-instance vpn-instance-name ] [ group [ group-address | interface interface-type interface-number ] [ static | verbose ] | statistics ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about IGMP multicast groups on the public network.

group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays information about all IGMP multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about IGMP multicast groups for all interfaces.

static: Specifies IGMP multicast groups that hosts have joined statically. If you do not specify this keyword, the command displays information about IGMP multicast groups that hosts have joined dynamically.

statistics: Displays the number of IGMP multicast groups that hosts have joined statically and dynamically and the number of IGMP multicast groups that hosts have joined dynamically. If you do not specify this keyword, the command displays information about IGMP multicast groups.

verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information about IGMP multicast groups.

Examples

# Display information about IGMP multicast groups that hosts have dynamically joined on the public network.

<Sysname> display igmp group

IGMP groups in total: 3

Ten-GigabitEthernet3/0/1(10.10.1.20):

IGMP groups reported in total: 3

Group address Last reporter Uptime Expires

225.1.1.1 10.10.1.10 00:02:04 00:01:15

225.1.1.2 10.10.1.10 00:02:04 00:01:15

225.1.1.3 10.10.1.10 00:02:04 00:01:15

Table 3 Command output

Field	Description
IGMP groups in total	Total number of IGMP multicast groups.
IGMP groups reported in total	Total number of IGMP multicast groups that hosts attached to the interface have joined dynamically.
Group address	Multicast group address.
Last reporter	Address of the last host that reported its membership to the multicast group.
Uptime	Length of time since the multicast group was reported.
Expire	Remaining lifetime for the multicast group. This field displays Off if the timer is disabled.

# Display detailed information about IGMP multicast group 232.1.1.1 that hosts have dynamically joined on the public network. In this example, the router is configured with IGMPv3.

<Sysname> display igmp group 232.1.1.1 verbose

Ten-GigabitEthernet3/0/1(10.10.1.20):

IGMP groups reported in total: 3

Group: 232.1.1.1

Uptime: 00:00:34

Exclude expires: 00:04:16

Mapping expires: 00:02:16

Last reporter: 10.10.1.10

Last-member-query-counter: 0

Last-member-query-timer-expiry: Off

Mapping last-member-query-counter: 0

Mapping last-member-query-timer-expiry: Off

Group mode: Exclude

Version1-host-present-timer-expiry: Off

Version2-host-present-timer-expiry: 00:02:11

Mapping version1-host-present-timer-expiry: Off

Source list (sources in total: 1):

Source: 10.1.1.1

Uptime: 00:00:03

V3 expires: 00:04:16

Mapping expires: 00:02:16

Last-member-query-counter: 0

Last-member-query-timer-expiry: Off

Table 4 Command output

Field	Description
IGMP groups reported in total	Total number of IGMP multicast groups that hosts attached to the interface have joined dynamically.
Group	Multicast group address.
Uptime	Length of time since the multicast group was reported.
Exclude expires	Remaining lifetime for the multicast group in Exclude mode. This field displays Off if the timer is disabled.
Mapping expires	Remaining time for the multicast group specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings.
Last reporter	Address of the last host that reported its membership to this multicast group.
Last-member-query-counter	Number of IGMP group-specific queries or IGMP source-and-group-specific queries sent for the multicast group.
Last-member-query-timer-expiry	Remaining time for the last member query timer for the multicast group. This field displays Off if the timer is disabled.
Mapping last-member-query-counter	Number of IGMP group-specific queries or IGMP source-and-group-specific queries sent for the multicast group specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings.
Mapping last-member-query-timer-expiry	Remaining time for the last member query timer of the multicast group specified in IGMP SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with IGMP SSM mappings.
Group mode	Multicast source filtering mode: · Include—Include mode. · Exclude—Exclude mode. For a device that runs IGMPv1 or IGMPv2: · If IGMP SSM mappings are not configured, this field displays Exclude. · If IGMP SSM mappings are configured, this field displays Include or Exclude depending on the SSM mappings and the multicast groups that the host joins.
Version1-host-present-timer-expiry	Remaining time for the IGMPv1 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv2 or IGMPv3.
Version2-host-present-timer-expiry	Remaining time for the IGMPv2 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv3.
Mapping version1-host-present-timer-expiry	Remaining time for the IGMPv1 host present timer when the device is configured with IGMP SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with IGMP SSM mappings.
Source list (sources in total)	List of multicast sources and total number of multicast sources. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings.
Source	Multicast source address. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings.
Uptime	Length of time since the multicast source was reported. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings.
V3 expires	Remaining time for the multicast source when the device runs IGMPv3. This field displays Off if the timer is disabled and displays three hyphens (---) if the multicast source is specified in IGMP SSM mappings. This field is displayed only when the device runs IGMPv3 or when the device is configured with IGMP SSM mappings.
Mapping expires	Remaining time for the multicast source specified in IGMP SSM mappings. This field is displayed only when the device is configured with IGMP SSM mappings.
Last-member-query-counter	Number of IGMP group-specific queries or IGMP group-and-source-specific queries sent for the multicast source and group. This field is displayed only when the device runs IGMPv3 or is configured with IGMP SSM mappings.
Last-member-query-timer-expiry	Remaining time for the last member query timer for the multicast source and group. This field displays Off if the timer is disabled. This field is displayed only when the device runs IGMPv3 or is configured with IGMP SSM mappings.

# Display information about IGMP multicast groups that hosts have statically joined on the public network.

<Sysname> display igmp group static

Entries in total: 2

Group address Source address Interface Expires

225.1.1.1 0.0.0.0 XGE3/0/1 Never

225.2.2.2 1.1.1.1 XGE3/0/1 Never

Table 5 Command output

Field	Description
Entries in total	Total number of the multicast groups that hosts have joined statically.
Group address	Multicast group address.
Source address	Multicast source address.
Interface	Interface name.
Expires	Remaining lifetime for the multicast group. This field always displays Never because the multicast group never expires.

# Display the number of IGMP multicast groups that hosts have joined dynamically and the number of IGMP multicast groups that hosts have joined statically.

<Sysname> display igmp group statistics

Dynamic groups in total: 2

Static groups in total: 1

Related commands

reset igmp group

display igmp host-tracking

Use display igmp host-tracking to display IGMP host tracking information.

Syntax

display igmp [ vpn-instance vpn-instance-name ] host-tracking [ interface interface-type interface-number ] [ group group-address ] [ source source-address ] [ active ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays IGMP host tracking information on the public network.

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays IGMP host tracking information for all interfaces.

group group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify this option, the command displays IGMP host tracking information for all multicast groups.

source source-address: Specifies a multicast source by its IP address. If you do not specify this option, the command displays IGMP host tracking information for all multicast sources.

active: Specifies active hosts. If you do not specify this keyword, the command displays IGMP host tracking information for all hosts.

Examples

# Display IGMP tracking information for all hosts.

<Sysname> display igmp host-tracking

IGMP hosts in total: 4

Ten-GigabitEthernet3/0/1(192.168.1.1):

IGMP hosts reported in total: 2

(0.0.0.0,224.1.1.1)

Host Uptime Expires

192.168.1.1 00:02:20 00:00:40

192.168.1.2 00:02:21 00:00:39

Ten-GigabitEthernet3/0/2(192.168.2.1):

IGMP hosts reported in total: 2

(1.1.1.1,224.1.1.1)

Host Uptime Expires Type

192.168.2.1 00:03:20 Expired G

192.168.2.2 00:02:20 00:00:39 G

# Display IGMP tracking information for hosts that have joined multicast group 232.1.1.1 on Ten-GigabitEthernet3/0/1.

<Sysname> display igmp host-tracking interface ten-gigabitethernet 3/0/1 group 232.1.1.1

IGMP hosts reported in total: 5

(1.1.1.1,232.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 M

192.168.1.2 00:02:21 00:00:39 M

(2.2.2.2,232.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G/M

192.168.1.2 00:02:21 00:00:39 G/M

192.168.1.3 00:02:21 00:00:39 G/M

# Display IGMP tracking information for active hosts on Ten-GigabitEthernet3/0/1.

<Sysname> display igmp host-tracking interface ten-gigabitethernet 3/0/1 active

IGMP hosts reported in total: 2

(1.1.1.1, 224.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G

(1.1.1.1, 225.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G

Table 6 Command output

Field	Description
IGMP hosts in total	Tracked hosts in total.
Ten-GigabitEthernet3/0/1(192.168.1.1)	Interface name and IP address.
IGMP hosts reported in total	Number of tracked hosts on the interface.
(0.0.0.0, 224.1.1.1)	(S, G) entry. Value 0.0.0.0 in the S position indicates all multicast sources.
Host	IP address of the host.
Uptime	Length of time elapsed since the host joined the multicast group.
Expires	Remaining timeout time for the host. The host timeout time is the same as the aging timer for the port. The timer is reset when the port receives an IGMP report from the host. This field displays Expired if the host timed out.
Type	IGMP version: · G—The IGMP version is IGMPv3 and the host joins the multicast group normally. · M—The IGMP version is IGMPv1 or IGMPv2, and the host joins the multicast group through the SSM mapping. · G/M—Both of the above conditions exist at the same time. This field is not displayed if the IGMP version is IGMPv1 or IGMPv2, and the host joins the multicast group without the SSM mapping.

Related commands

host-tracking enable

igmp host-tracking { disable | enable }

display igmp interface

Use display igmp interface to display IGMP information for interfaces.

Syntax

display igmp [ vpn-instance vpn-instance-name ] interface [ access-interface interface-type interface-number | [ interface-type interface-number ] [ host | proxy ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays IGMP information for interfaces on the public network.

access-interface interface-type interface-number: Specifies an access interface by its type and number, which is the actual interface through which a multicast user accesses the network.

interface-type interface-number: Specifies an interface by its type and number.

host: Displays information about the interfaces enabled with the IGMP host feature. For more information about the IGMP host feature, see VXLAN Configuration Guide.

proxy: Displays the IGMP proxy interface information.

verbose: Displays detailed IGMP information.

Usage guidelines

A multicast-UA interface is a virtual interface created for maintaining IGMP information.

When an IPoE or PPPoE user assigned with the STB service comes online, the access module sends a notification to IGMP. If per-session multicast forwarding is enabled on the access interface, IGMP creates a multicast-UA interface for the user upon receiving the notification. When the user goes offline, IGMP deletes the multicast-UA interface immediately after receiving the notification from the access module. For more information about specifying the STB service for users in an ISP domain, see AAA configuration in BRAS Services Configuration Guide.

When a user comes online through an interface configured with QinQ and per-session multicast forwarding, IGMP creates a multicast-UA interface upon receiving an IGMP report from the user. For users that belong to the same SVLAN and CVLAN, only one multicast-UA interface is created. The multicast-UA interface ages out if the interface neither maintains membership information for any multicast groups nor receives IGMP reports for a period of time. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.

To display IGMP information for multicast-UA interfaces created for multicast users that come online through the same access interface, specify the access-interface interface-type interface-number option.

If you do not specify any parameters, this command displays IGMP information for all interfaces.

Examples

# Display detailed IGMP information for Ten-GigabitEthernet 3/0/1.3 (non-proxy interface) on the public network.

<Sysname> display igmp interface ten-gigabitethernet 3/0/1.3 verbose

Ten-GigabitEthernet3/0/1.3(10.10.1.20):

IGMP is enabled.

IGMP version: 2

Query interval for IGMP: 125s

Other querier present time for IGMP: 255s

Maximum query response time for IGMP: 10s

Last member query interval: 1s

Last member query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:00:54

Querier for IGMP: 10.10.1.20 (This router)

IGMP activity: 1 join(s), 0 leave(s)

Multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Disabled

User-VLAN-aggregation: Enabled (Dynamic)

VSRP instance: vsrp1 (State is master, synchronization is on)

VSRP forward mode: all (Switchback delay: 180s)

IGMP groups reported in total: 1

# Display detailed IGMP information for all IGMP proxy interfaces on the public network.

<Sysname> display igmp interface proxy verbose

Ten-GigabitEthernet3/0/2(20.10.1.20):

IGMP proxy is enabled.

IGMP version: 2

Multicast routing on this interface: Enabled

Require-router-alert: Disabled

Version1-querier-present-timer-expiry (hh:mm:ss): Off

# Display detailed IGMP information for all interfaces enabled with the IGMP host feature on the public network.

<Sysname> display igmp interface host verbose

Ten-GigabitEthernet3/0/3(30.10.1.20):

IGMP host is enabled.

IGMP version: 2

Multicast routing on this interface: Enabled

Require-router-alert: Disabled

Version1-querier-present-timer-expiry (hh:mm:ss): Off

# Display detailed IGMP information for user access interface Ten-GigabitEthernet 3/0/2 on the public network.

<Sysname> display igmp interface access-interface ten-gigabitethernet 3/0/2 verbose

Multicast-UA0(102.1.1.2):

IGMP is enabled.

IGMP version: 2

Query interval for IGMP: 125s

Other querier present time for IGMP: 255s

Maximum query response time for IGMP: 10s

Last member query interval: 1s

Last member query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:00:23

Querier for IGMP: 102.1.1.2 (This router)

IGMP activity: 1 join(s), 0 leave(s)

Multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Enabled

User-VLAN-aggregation: Disabled

Access interface: Ten-GigabitEthernet3/0/2

VSRP instance: vsrp1 (State is master, synchronization is on)

VSRP forward mode: all (Switchback delay: 180s)

IGMP groups reported in total: 1

# Display detailed IGMP information for Multicast-UA 0 on the public network.

<Sysname> display igmp interface Multicast-UA 0 verbose

Multicast-UA0(10.10.1.20):

IGMP is enabled.

IGMP version: 2

Query interval for IGMP: 125s

Other querier present time for IGMP: 255s

Maximum query response time for IGMP: 10s

Last member query interval: 1s

Last member query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:00:54

Querier for IGMP: 10.10.1.20 (This router)

IGMP activity: 1 join(s), 0 leave(s)

Multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Enabled

User-VLAN-aggregation: Disabled

User-ID: 0x40000001

VLAN ID: 100

Second VLAN ID: 10

User address: 1.1.1.1

User profile: profile1

Access type: IPoE

Access interface: Ten-GigabitEthernet3/0/1.1

VSRP instance: vsrp1 (State is master, synchronization is on)

VSRP forward mode: all (Switchback delay: 180s)

IGMP groups reported in total: 1

Table 7 Command output

Field	Description
Ten-GigabitEthernet3/0/1(10.10.1.20)	Interface and its IP address.
IGMP is enabled	IGMP is enabled on the interface.
IGMP version	Version of IGMP that the interface runs.
Query interval for IGMP	IGMP general query interval, in seconds.
Other querier present time for IGMP	IGMP other querier present interval, in seconds.
Maximum query response time for IGMP	Maximum response time for IGMP general queries, in seconds.
Last member query interval	Interval for sending IGMP group-specific queries or IGMP group-and-source-specific queries, in seconds.
Last member query count	Number of IGMP group-specific queries or IGMP group-and-source-specific queries sent for the multicast group.
Startup query interval	Interval for sending IGMP general queries on startup, in seconds.
Startup query count	Number of IGMP general queries that the device sends on startup.
General query timer expiry	Remaining time for the IGMP general query timer. This field displays Off if the timer is disabled.
Querier for IGMP	IP address of the IGMP querier. This field is not displayed when the device runs IGMPv1 and the device is not the IGMP querier. NOTE: In IGMPv1, the PIM DR acts as the IGMP querier. You can use the display pim interface command to display PIM information.
No querier elected	No IGMP querier election is performed. This field is displayed when the device runs IGMPv1 and is not the IGMP querier. NOTE: In IGMPv1, the PIM DR acts as the IGMP querier. You can use the display pim interface command to display PIM information.
IGMP activity: 1 join(s), 0 leave(s)	Statistics of IGMP activities: · join(s)—Total number of multicast groups that this interface has joined. · leave(s)—Total number of multicast groups that this interface has left.
Multicast routing on this interface	Whether IP multicast routing is enabled: Enabled or Disabled.
Robustness	Robustness variable of the IGMP querier.
Require-router-alert	Whether the feature of dropping IGMP messages without Router-Alert is enabled: Enabled or Disabled,
Fast-leave	Whether the fast-leave processing feature is enabled: Enabled or Disabled.
Startup-query	Whether the IGMP querier sends IGMP general queries at the startup query interval on startup: · On—The IGMP querier performs the above action. · Off—The IGMP querier does not perform the above action.
Other-querier-present-timer-expiry	Remaining time for the other querier present timer. This field displays Off if the timer is disabled.
Authorization	Whether the multicast access control feature is enabled: Enabled or Disabled.
Join-by-session	Whether the per-session multicast forwarding feature is enabled: Enabled or Disabled.
User-VLAN-aggregation	VLAN tagging configuration for multicast packets: · Enabled—The multicast packet VLAN tagging feature is enabled. · Disabled—The multicast packet VLAN tagging feature is disabled. · Dynamic—The multicast packets are tagged with VLANs of online users. · Dot1q vid n1 second-dot1q n2—The multicast packets are tagged with outer VLAN ID n1 and inner VLAN ID n2.
User-ID	ID of the multicast user on the interface.
VLAN ID	Outer VLAN ID or the only VLAN ID in the multicast user's packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Second VLAN ID	Inner VLAN ID in the multicast user's packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
User address	IP address of the multicast user. This field is not displayed if the device does not obtain the user's IP address.
User profile	Name of the user profile assigned to the multicast user. The multicast user can join multicast groups permitted by the IGMP user access control policy in the user profile. To configure an IGMP user access control policy, use the igmp access-policy command.
Access interface	Actual interface through which the multicast user accesses the network. This field is displayed only when IGMP information is maintained on a multicast-UA interface.
VSRP instance (State is master, synchronization is on)	Name of the VSRP instance associated with the IGMP-enabled interface, VSRP instance status, and the status of IGMP data synchronization. This field is not displayed if the interface is not associated with a VSRP instance. VSRP instance status: · master—The device acts as the master in the VSRP instance. · backup—The device acts as the backup in the VSRP instance. · down—The device is not running in the VSRP instance. · unknown—The state of the device is unknown. Status of IGMP data synchronization: · on—IGMP data synchronization is enabled on the interface. · off—IGMP data synchronization is disabled on the interface.
VSRP forward mode: all (Switchback delay: 180s)	VSRP forwarding mode and switchback mode. This field is not displayed if the interface is not associated with a VSRP instance or is not enabled with load balancing. VSRP forwarding mode: · Odd—Forwards multicast flows with an odd-numbered multicast group address. · Even—Forwards multicast flows with an even-numbered multicast group address. · All—Forwards all multicast flows. · None—Does not forward any multicast flows. Switchback mode: · Switchback delay—The switchback delay is 180 seconds. · No switchback.
IGMP groups reported in total	Total number of multicast groups that the interface has joined dynamically. This field is not displayed if the interface does not join multicast groups.
IGMP proxy is enabled	IGMP proxying is enabled on the interface.
IGMP host is enabled	The IGMP host feature is enabled on the interface.
Version1-querier-present-timer-expiry	Remaining time for the IGMPv1 querier present timer. This field displays Off if the timer is disabled.

‌

display igmp proxy group

Use display igmp proxy group to display information about multicast groups maintained by the IGMP proxy.

Syntax

display igmp [ vpn-instance vpn-instance-name ] proxy group [ group-address | interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about multicast groups maintained by the IGMP proxy on the public network.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about multicast groups maintained by the IGMP proxy for all interfaces.

verbose: Displays detailed information.

Examples

# Display information about multicast groups maintained by the IGMP proxy on the public network.

<Sysname> display igmp proxy group

IGMP proxy group records in total: 2

Ten-GigabitEthernet3/0/1(1.1.1.20):

IGMP proxy group records in total: 2

Group address Member state Expires

225.1.1.1 Delay 00:00:02

225.1.1.2 Idle Off

# Display detailed information about multicast group 225.1.1.1 maintained by the IGMP proxy on the public network.

<Sysname> display igmp proxy group 225.1.1.1 verbose

Ten-GigabitEthernet3/0/1(1.1.1.20):

IGMP proxy group records in total: 2

Group: 225.1.1.1

Group mode: Include

Member state: Delay

Expires: 00:00:02

Source list (sources in total: 1):

1.1.1.1

Table 8 Command output

Field	Description
IGMP groups records in total	Total number of multicast groups maintained by the IGMP proxy.
Ten-GigabitEthernet3/0/1(1.1.1.20)	IGMP proxy interface and its IP address.
Pending proxy group	Pending multicast groups maintained by the IGMP proxy.
Group address/Group	Multicast group address.
Member state	Member host states: · Delay—The member host has joined a group and started a delay timer. · Idle—The member host has joined a group, but didn't start a delay timer.
Expires	Remaining delay time for the member host to send a responding report. This field displays Off if the timer is disabled.
Group mode	Multicast source filtering mode: Include or Exclude.
Source list	Multicast source list for the multicast group maintained by the IGMP proxy.
sources in total	Total number of multicast sources.

display igmp proxy routing-table

Use display igmp proxy routing-table to display multicast routing entries maintained by the IGMP proxy.

Syntax

display igmp [ vpn-instance vpn-instance-name ] proxy routing-table [ source-address [ mask { mask-length | mask } ] | group-address [ mask { mask-length | mask } ] ] * [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays multicast routing entries maintained by the IGMP proxy on the public network.

source-address: Specifies a multicast source by its IP address. If you do not specify a multicast source, this command displays multicast routing entries for all multicast sources maintained by the IGMP proxy.

group-address: Specifies a multicast group address by its IP address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays multicast routing entries for all multicast groups maintained by the IGMP proxy.

mask-length: Specifies a mask length of the multicast group address or multicast source address. For a multicast source address, the value range for this argument is 0 to 32. For a multicast group address, the value range for this argument is 4 to 32. The default value is 32 in both cases.

mask: Specifies a mask of the multicast group address or multicast source address. The default value is 255.255.255.255.

verbose: Displays detailed information about multicast routing entries maintained by the IGMP proxy.

Examples

# Display multicast routing entries maintained by the IGMP proxy on the public network.

<Sysname> display igmp proxy routing-table

Total 1 (*, G) entries, 2 (S, G) entries.

(172.168.0.12, 227.0.0.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: IGMP

(*, 225.1.1.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: STATIC

(2.2.2.2, 225.1.1.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (2 in total):

1: LoopBack1

Protocol: STATIC

2: Ten-GigabitEthernet3/0/2

Protocol: PROXY

# Display detailed information about multicast routing entries maintained by the IGMP proxy on the public network.

<Sysname> display igmp proxy routing-table verbose

Total 1 (*, G) entries, 2 (S, G) entries.

(172.168.0.12, 227.0.0.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: IGMP

Querier state: Querier

Join/Prune state:Join

Non-downstream interfaces: None

(*, 225.1.1.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: STATIC

Querier state: Querier

Join/Prune state:Join

Non-downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: IGMP

Querier state: Non-querier

Join/Prune state:Join

(2.2.2.2, 225.1.1.1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (2 in total):

1: LoopBack1

Protocol: STATIC

Querier state: Querier

Join/Prune state: Join

2: Ten-GigabitEthernet3/0/2

Protocol: PROXY

Querier state: Querier

Join/Prune state: Join

Non-downstream interfaces: None

Table 9 Command output

Field	Description
Total 1 (*, G) entries, 2 (S, G) entries	Total number of (*, G) entries, and the total number of (S, G) entries.
(172.168.0.12, 227.0.0.1)	(S, G) entry.
Upstream interface	Incoming interface of the (S, G) entry.
Downstream interfaces (1 in total)	Outgoing interfaces of the (S, G) entry, and the total number of outgoing interfaces.
Non-downstream interfaces (1 in total)	Non-outgoing interfaces of the (S, G) entry, and the total number of non-outgoing interfaces.
1: Ten-GigabitEthernet3/0/2	Index of an interface, and the interface.
Protocol	Protocol type: · IGMP—Dynamic IGMP. · PROXY—IGMP proxy. · STATIC—Static IGMP.
Querier state	Querier state: · Querier. · Non-querier.
Join/Prune state	Joined or pruned state of the interface: · NI—Default state. · Join—Joined state. · Prune—Pruned state.

display igmp ssm-mapping

Use display igmp ssm-mapping to display IGMP SSM mappings.

Syntax

display igmp [ vpn-instance vpn-instance-name ] ssm-mapping group-address

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255.

Examples

# Display IGMP SSM mappings for multicast group 232.1.1.1 on the public network.

<Sysname> display igmp ssm-mapping 232.1.1.1

Group: 232.1.1.1

Source list:

1.2.3.4

5.5.5.5

10.1.1.1

100.1.1.10

Table 10 Command output

Field	Description
Group	Multicast group address.
Source list	List of multicast source addresses.

display igmp user-info

Use display igmp user-info to display authorization information for IGMP users.

Syntax

display igmp user-info [ access-type { ipoe | ppp } ] [ access-interface interface-type interface-number | interface interface-type interface-number ] [ user-id user-id-number | user-ip user-ip-address ] [ active-group group-address | active-user | inactive-user ] [ statistics ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

access-type: Specifies an access type.

ipoe: Specifies the IPoE users.

ppp: Specifies the PPP users.

access-interface interface-type interface-number: Specifies a user access interface by its type and number.

interface interface-type interface-number: Specifies an interface by its type and number.

user-id user-id-number: Specifies an online multicast user by its ID, a hexadecimal integer in the range of 1 to 7FFFFF. The ID is automatically assigned to the user by the system.

user-ip user-ip-address: Specifies an online multicast user by its IP address.

active-group group-address: Displays information about IGMP users that have joined the specified authorized multicast group. The group-address argument specifies the address of the authorized multicast group, in the range of 224.0.1.0 to 239.255.255.255.

active-user: Specifies IGMP users that have joined multicast groups.

inactive-user: Specifies IGMP users that have not joined multicast groups.

statistics: Displays authorization statistics for IGMP users.

Usage guidelines

If you do not specify any parameters, this command displays authorization information for all IGMP users.

Examples

# Display authorization information for IGMP users.

<Sysname> display igmp user-info

Authorized users in total: 2

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102.1.1.1

Gateway address: 102.1.1.2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

User name: user2

Access type: IPoE

Interface: Multicast-UA0

Access interface: Ten-GigabitEthernet3/0/1.1

User address: 101.1.1.1

Gateway address: 101.1.1.2

User mac-address: 0010-9400-134c

User ID: 0x30000001 (VLAN ID 100, Second VLAN ID 10, Account ID 0x72)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

225.0.0.2

225.0.0.3

Total ordered programs: 1

Ordered program list:

Group IP Source IP

225.0.0.1 0.0.0.0

# Display authorization information for IGMP users that have joined multicast groups.

<Sysname> display igmp user-info active-user

Authorized users in total: 3

Active users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102.1.1.1

Gateway address: 102.1.1.2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

Total ordered programs: 1

Ordered program list:

Group IP Source IP

225.0.0.1 0.0.0.0

# Display authorization information for IGMP users that access the network through PPP.

<Sysname> display igmp user-info access-type ppp

Authorized users in total: 3

Matching users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102.1.1.1

Gateway address: 102.1.1.2

User mac-address: 0010-9400-134c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

# Display authorization information for IGMP users that access the network through PPP and have joined multicast groups.

<Sysname> display igmp user-info access-type ppp active-user

Authorized users in total: 3

Active users in total: 1

Matching users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102.1.1.1

Gateway address: 102.1.1.2

User mac-address: 0010-9400-134c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

Total ordered programs: 1

Ordered program list:

Group IP Source IP

225.0.0.1 0.0.0.0

# Display authorization information for IGMP users that have not joined multicast groups.

<Sysname> display igmp user-info inactive-user

Authorized users in total: 3

Inactive users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102.1.1.1

Gateway address: 102.1.1.2

User mac-address: 0010-9400-134c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

225.0.0.1

# Display authorization statistics for IGMP users that have joined multicast groups.

<Sysname> display igmp user-info group 225.0.0.1 statistics

Authorized users in total: 8

Matching users in total: 2

Table 11 Command output

Field	Description
Authorized users in total	Total number of authorized access users.
Active users in total	Total number of access users that have joined the authorized multicast group.
Inactive users in total	Total number of access users that have not joined the authorized multicast group.
Matching users in total	Total number of matching IGMP users.
Access type	Access type: · IPoE. · PPP.
Interface	Multicast user interface.
Access interface	Actual interface through which the user accesses the network.
User VPN-instance	Name of the VPN instance authorized to the user. This field is not displayed if no VPN instance is authorized to the user.
User address	IP address of the user. This field is not displayed if the device does not obtain the IP address of the user.
Gateway address	Gateway IP address of the user. This field is not displayed if the device does not obtain the gateway IP address of the user.
User mac-address	MAC address of the user. This field is not displayed if the device does not obtain the MAC address of the user.
User ID	ID of the user.
Leased user ID	ID of the IPoE leased user. This field is displayed only for IPoE leased users.
Session ID	ID of the user session. This field is displayed only for PPPoE users.
VLAN ID	Outer VLAN ID or the only VLAN ID in the user packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Second VLAN ID	Inner VLAN ID in the user packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Account ID	Account ID. The device collectively limits the traffic rate of users that share the same account. This field is displayed only when the user is an IPoE or PPPoE user that shares a user account with other users. For more information about shared-account users, see AAA configuration in BRAS Services Configuration Guide.
PVC ID	PVC ID. This field is displayed only when the multicast user accesses the network through an ATM interface.
VSI index	VSI index. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface.
Link ID	Link ID. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface.
Maximum allowed groups	Maximum number of the multicast groups that the user can join.
User profile	Name of the user profile name assigned to the multicast user. The multicast user can join multicast groups permitted by the IGMP user access control policy in the user profile. To configure an IGMP user access control policy, use the igmp access-policy command.
Authorized group list	List of the multicast groups that the user is authorized to join.
Active users in total	Total number of IGMP users that have joined multicast groups.
Total ordered programs	Total number of multicast sources and groups that the user has actually joined.
Ordered program list	List of multicast sources and groups that the user has actually joined.
Group IP	Address of the multicast group in a multicast source and group that the user has actually joined.
Source IP	Address of the multicast source in a multicast source and group that the user has actually joined. This field displays 0.0.0.0 if the multicast user has joined a multicast group.

host-tracking enable (IGMP view)

Use host-tracking enable to enable IGMP host tracking globally.

Use undo host-tracing enable to disable IGMP host tracking globally.

Syntax

host-tracking enable

undo host-tracking enable

Default

IGMP host tracking is disabled globally.

Views

IGMP view

Predefined user roles

network-admin

Usage guidelines

This feature allows the device to record IP addresses, running time, timeout time, and other information about receiver hosts. You can monitor and manage receiver hosts based on the recorded information.

You can enable IGMP host tracking globally for all interfaces, or use the igmp host-tracking enable command in interface view to enable host tracking for an interface. For an interface, the interface-specific configuration has higher priority than the global configuration.

Examples

# Enable IGMP host tracking globally on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] host-tracking enable

# Enable IGMP host tracking globally in VPN instance mvpn.

<Sysname> system-view

[Sysname] igmp vpn-instance mvpn

[Sysname-igmp-mvpn] host-tracking enable

Related commands

igmp host-tracking { disable | enable }

igmp

Use igmp to enter IGMP view.

Use undo igmp to delete the configurations in IGMP view.

Syntax

igmp [ vpn-instance vpn-instance-name ]

undo igmp [ vpn-instance vpn-instance-name ]

Views

System view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command applies to the public network.

Examples

# Enter IGMP view for the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp]

# Enter IGMP view for the VPN instance mvpn.

<Sysname> system-view

[Sysname] igmp vpn-instance mvpn

[Sysname-igmp-mvpn]

igmp access-policy

Use igmp access-policy to configure an IGMP user access policy.

Use undo igmp access-policy to delete an IGMP user access policy.

Syntax

igmp access-policy ipv4-acl-number

undo igmp access-policy ipv4-acl-number

Default

No IGMP user access policy exists. IGMP users are not authorized to join any multicast groups.

Views

User profile view

Predefined user roles

network-admin

Parameters

ipv4-acl-number: Specifies an IPv4 basic or advanced ACL number, in the range of 2000 to 3999. IGMP users can join only multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, IGMP users cannot join multicast groups.

Usage guidelines

When you configure a rule in the IPv4 ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· In a basic ACL, the source source-address source-wildcard option specifies a multicast group address.

· In an advanced ACL, the source source-address source-wildcard option specifies a multicast source address. The destination dest-address dest-wildcard option specifies a multicast group address.

To match the following IGMP reports, set the source source-address source-wildcard option to 0.0.0.0:

¡ IGMPv1 and IGMPv2 reports.

¡ IGMPv3 IS_EX and IGMPv3 TO_EX reports that do not carry multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure an access policy in user profile abc to authorize IGMP users to join multicast group 225.1.1.2.

<Sysname> system-view

[Sysname] acl basic 2000

[Sysname-acl-ipv4-basic-2000] rule permit source 225.1.1.2 0

[Sysname-acl-ipv4-basic-2000] quit

[Sysname] user-profile abc

[Sysname-user-profile-abc] igmp access-policy 2000

igmp attack-defense

Use igmp attack-defense to enable IGMP attack defense on an interface.

Use undo igmp attack-defense to disable IGMP attack defense on an interface.

Syntax

igmp attack-defense

undo igmp attack-defense

Default

IGMP attack defense is disabled on an interface.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

Predefined user roles

network-admin

Usage guidelines

CAUTION:

Use this feature only on an interface that is configured with IPoE access authentication. If an interface is not configured with IPoE access authentication, this feature discards IGMP messages from all users and online users cannot join multicast groups.

This feature enables the device to process IGMP messages from online users and to discard IGMP messages from non-online users.

Examples

# Enable IGMP attack defense on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp attack-defense

igmp attack-suppression aging-time

Use igmp attack-suppression aging-time to set the aging time for IGMP suppression entries.

Use undo igmp attack-suppression aging-time to restore the default.

Syntax

igmp attack-suppression { per-interface | source-ip | source-mac } aging-time time

undo igmp attack-suppression { per-interface | source-ip | source-mac } aging-time

Default

The aging time is 30 seconds for IGMP suppression entries.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

time: Specifies the aging time of IGMP suppression entries, in the range of 1 to 65535 seconds.

Usage guidelines

When the aging time of a source IP-based or source MAC-based IGMP suppression entry expires, the device ages out the entry and stops rate limiting packets from this IP or MAC address. Then, the device recounts the number of incoming IGMP packets from this source IP or MAC address to detect IGMP attacks.

When the aging time of the IGMP suppression entry on an interface expires, the device ages out the entry and stops limiting the packet rate only if no IGMP attack exists on the interface. Then, the device recounts the number of incoming IGMP packets on the interface to start a new IGMP suppression process.

This command takes effect only after you execute the igmp attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 60 seconds for interface-based IGMP suppression entries.

<Sysname> system-view

[Sysname] igmp attack-suppression per-interface aging-time 60

# Set the aging time to 10 seconds for source IP-based IGMP suppression entries.

<Sysname> system-view

[Sysname] igmp attack-suppression source-ip aging-time 10

# Set the aging time to 100 seconds for source MAC-based IGMP suppression entries.

<Sysname> system-view

[Sysname] igmp attack-suppression source-mac aging-time 100

igmp attack-suppression check-interval

Use igmp attack-suppression check-interval to set the check interval for IGMP suppression.

Use undo igmp attack-suppression check-interval to restore the default.

Syntax

igmp attack-suppression { per-interface | source-ip | source-mac } check-interval interval

undo igmp attack-suppression { per-interface | source-ip | source-mac } check-interval

Default

The check interval is 30 seconds for IGMP suppression.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

interval: Specifies the check interval for IGMP suppression, in the range of 1 to 255 seconds.

Usage guidelines

This command takes effect only after you execute the igmp attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the check interval to 10 seconds for interface-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression per-interface check-interval 10

# Set the check interval to 20 seconds for source IP-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-ip check-interval 20

# Set the check interval to 10 seconds for source MAC-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-mac check-interval 10

igmp attack-suppression enable

Use igmp attack-suppression enable to enable IGMP suppression.

Use undo igmp attack-suppression enable to disable IGMP suppression.

Syntax

igmp attack-suppression { per-interface | source-ip | source-mac } enable

undo igmp attack-suppression { per-interface | source-ip | source-mac } enable

Default

IGMP suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

Usage guidelines

The source IP-based IGMP suppression feature creates IGMP suppression entries and counts the number of received IGMP packets on a per source IP address basis. When the number of packets received from an IP address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal IGMP packets, the device drops the IGMP attack packets from the IP address.

The source MAC-based IGMP suppression feature creates IGMP suppression entries and counts the number of received IGMP packets on a per MAC address basis. When the number of IGMP packets from a MAC address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal IGMP packets, the device drops the IGMP attack packets from the MAC address.

The interface-based IGMP suppression feature allows the device to create IGMP suppression entries and count the number of received IGMP packets on a per interface basis. When the number exceeds the threshold within the check interval, the device identifies these packets as attack packets and limits the rate for sending them to the CPU.

This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable IGMP snooping globally on the device. IGMP packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.

Examples

# Enable interface-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression per-interface enable

# Enable source IP-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-ip enable

# Enable source MAC-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-mac enable

igmp attack-suppression threshold

Use igmp attack-suppression threshold to set the threshold for triggering IGMP suppression.

Use undo igmp attack-suppression threshold to restore the default.

Syntax

igmp attack-suppression { per-interface | source-ip | source-mac } threshold threshold-value

undo igmp attack-suppression { per-interface | source-ip | source-mac } threshold

Default

The threshold is 6000 for triggering interface-based IGMP suppression and is 1000 for triggering source IP-based IGMP suppression and source MAC-based IGMP suppression.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

threshold-value: Specifies the threshold for triggering IGMP suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of IGMP packets that can be received within the check interval.

Usage guidelines

Packets from an IP address or MAC address are attack packets if the number of received IGMP packets from this IP or MAC address exceeds the threshold within the check interval.

An interface is attacked if the number of received IGMP packets on the interface exceeds the threshold within the check interval.

This command takes effect only after you execute the igmp attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the threshold to 300 for triggering interface-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression per-interface threshold 300

# Set the threshold to 300 for triggering source IP-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-ip threshold 300

# Set the threshold to 400 for triggering source MAC-based IGMP suppression.

<Sysname> system-view

[Sysname] igmp attack-suppression source-mac threshold 400

igmp authorization-enable

Use igmp authorization-enable to enable the multicast access control feature.

Use undo igmp authorization-enable to disable the multicast access control feature.

Syntax

igmp authorization-enable

undo igmp authorization-enable

Default

The multicast access control feature is disabled.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

VT interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on local online users. Non-local users and offline users are not affected.

Examples

# Enable the multicast access control feature on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp authorization-enable

igmp enable

Use igmp enable to enable IGMP on an interface.

Use undo igmp enable to disable IGMP on an interface.

Syntax

igmp enable

undo igmp enable

Default

IGMP is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IP multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.

Other IGMP configurations on the interface take effects only when IGMP is enabled on the interface.

Examples

# Enable IP multicast routing on the public network, and enable IGMP on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] multicast routing

[Sysname-mrib] quit

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp enable

Related commands

multicast routing

igmp fast-leave

Use igmp fast-leave to enable fast-leave processing on an interface.

Use undo igmp fast-leave to disable fast-leave processing on an interface.

Syntax

igmp fast-leave [ group-policy ipv4-acl-number ]

undo igmp fast-leave

Default

Fast-leave processing is disabled. The IGMP querier sends IGMP group-specific or group-and-source-specific queries after receiving a leave message.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv4-acl-number: Specifies an IPv4 basic ACL by its number in the range of 2000 to 2999. If you specify an ACL, the fast-leave processing feature takes effect only on the multicast groups that the ACL permits. The feature takes effect on all multicast groups when one of the following conditions exists:

· You do not specify an ACL.

· The specified ACL does not exist.

· The specified ACL does not have valid rules.

Usage guidelines

The fast-leave processing feature enables an IGMP querier to suppress IGMP group-specific or group-and-source-specific queries upon receiving IGMP leave messages permitted by the ACL.

When you configure a rule in the IPv4 basic ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· The source source-address source-wildcard option specifies a multicast group address.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Enable fast-leave processing on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp fast-leave

igmp group-policy

Use igmp group-policy to configure a multicast group policy on an interface to control the multicast groups that hosts attached to the interface can join.

Use undo igmp group-policy to delete the multicast group policy on an interface.

Syntax

igmp group-policy { ipv4-acl-number | name ipv4-acl-name } [ version-number ]

undo igmp group-policy

Default

No multicast group policy exists on an interface. Hosts attached to the interface can join any multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv4-acl-number: Specifies an IPv4 basic or advanced ACL by its number in the range of 2000 to 3999. Hosts can join only the multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, hosts cannot join any multicast groups.

name ipv4-acl-name: Specifies an IPv4 basic or advanced ACL by its name, a case-insensitive string of 1 to 63 characters. The ACL name must begin with letters and it cannot be all. Hosts can join only the multicast groups that the ACL permits. If the ACL with the specified name does not exist or does not have valid rules, hosts cannot join any multicast groups.

version-number: Specifies an IGMP version in the range of 1 to 3. By default, this command takes effect on IGMP reports of all versions.

Usage guidelines

A multicast group policy filters IGMP reports to control the multicast groups that the hosts can join.

This command does not take effect on static member interfaces because static member interfaces do not send IGMP reports.

When you configure a rule in the IPv4 ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· In a basic ACL, the source source-address source-wildcard option specifies a multicast group address.

· In an advanced ACL, the source source-address source-wildcard option specifies a multicast source address. The destination dest-address dest-wildcard option specifies a multicast group address.

To match the following IGMP reports, set the source source-address source-wildcard option to 0.0.0.0:

¡ IGMPv1 and IGMPv2 reports.

¡ IGMPv3 IS_EX and IGMPv3 TO_EX reports that do not carry multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure a multicast group policy on Ten-GigabitEthernet 3/0/1 so that hosts attached to the interface can join only multicast group 225.1.1.1.

<Sysname> system-view

[Sysname] acl basic 2005

[Sysname-acl-ipv4-basic-2005] rule permit source 225.1.1.1 0

[Sysname-acl-ipv4-basic-2005] quit

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp group-policy 2005

igmp host-tracking { disable | enable }

Use igmp host-tracking enable to enable IGMP host tracking on an interface.

Use igmp host-tracking disable to disable IGMP host tracking on an interface.

Use undo igmp host-tracking to restore the default.

Syntax

igmp host-tracking enable

igmp host-tracking disable

undo igmp host-tracking

Default

The interface-specific IGMP host tracking status is consistent with the global IGMP host tracking status.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

You can enable IGMP host tracking on an interface, or use the host-tracking enable command in IGMP view to enable IGMP host tracking for all interfaces. For an interface, the interface-specific configuration has higher priority than the global configuration.

Examples

# Enable IGMP host tracking on Ten-GigabitEthernet3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp host-tracking enable

Related commands

host-tracking enable (IGMP view)

igmp host-tracking limit

Use igmp host-tracking limit to set the maximum number of hosts that can be tracked on an interface.

Use undo igmp host-tracking limit to restore the default.

Syntax

igmp host-tracking limit limit

undo igmp host-tracking limit

Default

An interface can track a maximum of 4096 hosts.

Views

Interface view

Predefined user roles

network-admin

Parameters

limit: Specifies the maximum number of hosts that can be tracked on an interface, in the range of 1 to 65535.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect. When the maximum number is reached, new host records overwrite old ones.

Examples

# Set the maximum number to 2000 for hosts that can be tracked on Ten-GigabitEthernet3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp host-tracking limit 2000

igmp join-by-session

Use igmp join-by-session to enable per-session multicast forwarding.

Use undo igmp join-by-session to restore the default.

Syntax

igmp join-by-session [ mode { both | bras | non-bras } ]

undo igmp join-by-session

Default

Multicast data is forwarded on a per-interface basis.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

Predefined user roles

network-admin

Parameters

mode: Specifies a user access type. If you do not specify this option, per-session multicast forwarding is enabled for users of all access types.

both: Specifies BRAS and non-BRAS user access types.

bras: Specifies the BRAS user access type, including IPoE and PPP.

non-bras: Specifies the non-BRAS user access type. Non-BRAS users refer to users that do not need to perform authentication.

Usage guidelines

This feature enables an interface to send a separate copy of multicast data to each user attached to the interface.

The igmp join-by-session and igmp user-vlan-aggregation commands are mutually exclusive. You cannot configure them on the same device.

Examples

# Enable per-session multicast forwarding on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp join-by-session

igmp last-member-query-count

Use igmp last-member-query-count to set the IGMP last member query count on an interface.

Use undo igmp last-member-query-count to restore the default.

Syntax

igmp last-member-query-count count

undo igmp last-member-query-count

Default

The IGMP last member query count equals the IGMP querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the IGMP last member query count for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP last member query count to 6 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp last-member-query-count 6

Related commands

last-member-query-count (IGMP view)

igmp last-member-query-interval

Use igmp last-member-query-interval to set the IGMP last member query interval on an interface.

Use undo igmp last-member-query-interval to restore the default.

Syntax

igmp last-member-query-interval interval

undo igmp last-member-query-interval

Default

The IGMP last member query interval is 1 second.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP last member query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the IGMP last member query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP last member query interval to 6 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp last-member-query-interval 6

Related commands

last-member-query-interval (IGMP view)

igmp max-response-time

Use igmp max-response-time to set the maximum response time for IGMP general queries on an interface.

Use undo igmp max-response-time to restore the default.

Syntax

igmp max-response-time time

undo igmp max-response-time

Default

The maximum response time for IGMP general queries is 10 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for IGMP general queries, in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the maximum response time for IGMP general queries to 25 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp max-response-time 25

Related commands

max-response-time (IGMP view)

igmp other-querier-present-interval

Use igmp other-querier-present-interval to set the IGMP other querier present timer on an interface.

Use undo igmp other-querier-present-interval to restore the default.

Syntax

igmp other-querier-present-interval interval

undo igmp other-querier-present-interval

Default

The IGMP other querier present timer is calculated by using the following formula:

[ IGMP general query interval ] × [ IGMP querier's robustness variable ] + [ maximum response time for IGMP general queries ] / 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP other querier present timer for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP other querier present timer to 125 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp other-querier-present-interval 125

Related commands

other-querier-present-interval (IGMP view)

igmp proxy enable

Use igmp proxy enable to enable IGMP proxying on an interface.

Use to undo igmp proxy enable to disable IGMP proxying on an interface.

Syntax

igmp proxy enable

undo igmp proxy enable

Default

IGMP proxying is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IP multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.

Examples

# Enable IP multicast routing on the public network, and enable IGMP proxying on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] multicast routing-enable

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp proxy enable

Related commands

multicast routing

igmp proxy forwarding

Use igmp proxy forwarding to enable multicast forwarding on a non-querier interface.

Use undo igmp proxy forwarding to disable multicast forwarding on a non-querier interface.

Syntax

igmp proxy forwarding

undo igmp proxy forwarding

Default

Multicast forwarding is disabled for a non-querier interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Typically, only IGMP queriers can forward multicast traffic but non-queriers cannot. This mechanism prevents multicast data from being repeatedly forwarded. If a router interface on the IGMP proxy failed the querier election, enable multicast forwarding on the interface to forward multicast data to attached receivers.

Examples

# Enable multicast forwarding on Ten-GigabitEthernet 3/0/1. (Ten-GigabitEthernet 3/0/1 is a non-querier interface on the IGMP proxy device.)

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp proxy forwarding

igmp query-interval

Use igmp query-interval to set the IGMP general query interval on an interface.

Use undo igmp query-interval to restore the default.

Syntax

igmp query-interval interval

undo igmp query-interval

Default

The IGMP general query interval is 125 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP general query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP general query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP general query interval to 60 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp query-interval 60

Related commands

query-interval (IGMP view)

igmp robust-count

Use igmp robust-count to set the IGMP querier's robustness variable on an interface.

Use undo igmp robust-count to restore the default.

Syntax

igmp robust-count count

undo igmp robust-count

Default

The IGMP querier's robustness variable is 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

The IGMP querier's robustness variable defines the number of times to retransmit queries if packet loss occurs. A higher robustness variable makes the IGMP querier more robust, but it increases timeout time for multicast groups.

You can set the IGMP querier's robustness variable for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP querier's robustness variable to 5 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp robust-count 5

Related commands

robust-count (IGMP view)

igmp startup-query-count

Use igmp startup-query-count to set the IGMP startup query count on an interface.

Use undo igmp startup-query-count to restore the default.

Syntax

igmp startup-query-count count

undo igmp startup-query-count

Default

The IGMP startup query count equals the IGMP querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the IGMP startup query count for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP startup query count to 5 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp startup-query-count 5

Related commands

startup-query-count (IGMP view)

igmp startup-query-interval

Use igmp startup-query-interval to set the IGMP startup query interval on an interface.

Use undo igmp startup-query-interval to restore the default.

Syntax

igmp startup-query-interval interval

undo igmp startup-query-interval

Default

The IGMP startup query interval equals one quarter of the IGMP general query interval.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP startup query interval for an interface in interface view or globally for all interfaces in IGMP view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the IGMP startup query interval to 100 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp startup-query-interval 100

Related commands

startup-query-interval (IGMP view)

igmp static-group

Use igmp static-group to configure an interface as a static group member of multicast groups.

Use undo igmp static-group to restore the default.

Syntax

igmp static-group group-address [ inc-step-mask { group-mask | group-mask-length } number group-number ] [ source source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ]

undo igmp static-group { all | group-address [ inc-step-mask { group-mask | group-mask-length } number group-number ] [ source source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ] }

Default

An interface is not a static group member of multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255. In the batch configuration, this multicast group address represents the start address.

inc-step-mask group-mask: Specifies the mask step for multicast groups in batch configuration, the gap between two adjacent multicast group addresses. The step mask is in the dotted decimal notation format, in the range of 0.0.0.1 to 15.255.255.255.

inc-step-mask group-mask-length: Specifies the mask length step for multicast groups in batch configuration. The mask length step is an integer in the range of 5 to 32.

group-number: Specifies the number of multicast groups in batch configuration, an integer in the range of 2 to 512.

source-address: Specifies a multicast source by its IP address. If you do not specify a multicast source, this command configures an interface as a static member of the multicast groups with all multicast source addresses.

dot1q vid vlan-list: Specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this option, the command configures an interface as a single-VLAN-tagged static member interface for a multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

dot1q vid vlan-id second-dot1q vlan-list: Specifies the outer and inner VLAN IDs. The vlan-id argument specifies the outer VLAN ID in the range of 1 to 4094. The vlan-list argument specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this option, the command configures an interface as a double-VLAN-tagged static member interface for a multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

all: Specifies all multicast groups that the interface has statically joined.

Usage guidelines

For multicast routing entries to be created, you must specify a multicast source if the specified multicast group is in the SSM group range.

When you configure an interface as a static group member of multiple multicast groups or multicast sources and groups in batch, follow these restrictions and guidelines:

· Multicast group addresses in different batch configurations can overlap.

· The undo command does not support deleting one multicast group from batch configuration. When you delete a batch configuration, make sure the setting in the undo command matches the batch configuration.

· If two batch configurations have the same parameter settings except the setting of the number group-number option, the new configuration takes effect.

If you specify a mask length step in batch configuration, the system coverts the mask length to the mask in the output from the display current-configuration command. The conversion format is group-mask = 1 << (32 – group-mask-length), where the double left angle brackets (<<) is a bitwise left shift operator. For example, 1 << 0 represents 0.0.0.1, 1 << 1 represents 0.0.0.2, and 1 << 3 represents 0.0.0.8.

For the same multicast group, the non-VLAN-based, single-VLAN-based, or double-VLAN-based static member interface configurations are mutually exclusive.

When you configure a subinterface as a non-VLAN-based static member interface, do not configure the igmp join-by-session or igmp user-vlan-aggregation command on this subinterface. If you configure either of the commands on the subinterface, static multicast forwarding entries cannot be created.

When you configure a subinterface as a VLAN-based static member interface, a static multicast forwarding entry can be created under either of the following conditions:

· Users that belong to the specified VLANs come online if the igmp user-vlan-aggregation command is not configured on the subinterface.

· The VLAN IDs specified in this command are the same as or included in the VLAN IDs specified in the igmp user-vlan-aggregation command configured on the subinterface.

Examples

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of multicast group 224.1.1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp static-group 224.1.1.1

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of multicast source and group (192.168.1.1, 232.1.1.1).

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp static-group 232.1.1.1 source 192.168.1.1

# Enable per-session multicast forwarding on Ten-GigabitEthernet 3/0/1.1. Configure the subinterface as a static group member of multicast group 224.1.1.1 for users with outer VLAN ID 10 and inner VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] igmp join-by-session

[Sysname-Ten-GigabitEthernet3/0/1.1] igmp static-group 224.1.1.1 dot1q vid 10 second-dot1q 10 to 20

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of multicast groups 224.1.1.1 and 224.1.1.2 in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the mask step is 0.0.0.1, and the number of multicast groups is 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of multicast sources and groups (192.168.1.1, 224.1.1.1) and (192.168.1.1, 224.1.1.2) in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the multicast source address is 192.168.1.1, the mask step is 0.0.0.1, and the number of multicast groups is 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2 source 192.168.1.1

# Configure Ten-GigabitEthernet 3/0/1.1 as a VLAN-based static group member of multicast groups 224.1.1.1 and 224.1.1.2 in batch. In the batch configuration, the start multicast group address is 224.1.1.1, the mask step is 0.0.0.1, the number of multicast groups is 2, and the VLAN ID is 10.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] igmp static-group 224.1.1.1 inc-step-mask 0.0.0.1 number 2 dot1q vid 10

igmp user-vlan-aggregation

Use igmp user-vlan-aggregation to configure VLAN tagging for multicast packets.

Use undo igmp user-vlan-aggregation to restore the default.

Syntax

igmp user-vlan-aggregation { dynamic | dot1q vid vlan-id [ second-dot1q vlan-id ] }

undo igmp user-vlan-aggregation

Default

The multicast packets are not tagged.

Views

Layer 3 Ethernet subinterface view

Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Parameters

dynamic: Tags multicast packets with the VLANs of online users. This keyword is used in dynamic tagging of multicast packets.

dot1q vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094. This keyword is used in static tagging of multicast packets.

second-dot1q vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094. This keyword is used in static tagging of multicast packets.

Usage guidelines

The igmp join-by-session and igmp user-vlan-aggregation commands are mutually exclusive. You cannot configure them on the same device.

The dynamic tagging method is exclusive with the static tagging method for multicast packets. The VLANs specified in the static tagging method must be VLANs allowed by the interface.

When users of a multicast group are in different VLANs, the device processes a multicast packet of this group as follows:

· In static tagging mode, the device tags the multicast packet with the specified VLAN ID and sends the tagged multicast packet to the downstream device.

· In dynamic tagging mode, the device first duplicates the multicast packet according to the number of VLANs of the multicast users. Then, it tags each multicast packet with a user VLAN ID and sends the tagged multicast packets to the downstream device.

Before you configure dynamic VLAN tagging or cancel the configuration, first log out all online users. Otherwise, the configuration or the cancellation does not take effect and an error occurs.

This command does not take effect on PPPoE users.

An IGMP user access policy does not take effect for the static VLAN tagging mode.

Examples

# Configure the multicast packets to be tagged with outer VLAN ID 10 and inner VLAN ID 20 on Ten-GigabitEthernet 3/0/1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] vlan-type dot1q vid 10 second-dot1q 1 to 100

[Sysname-Ten-GigabitEthernet3/0/1.1] igmp user-vlan-aggregation dot1q vid 10 second-dot1q 20

# Configure dynamic VLAN tagging for multicast packets on Ten-GigabitEthernet 3/0/1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] igmp user-vlan-aggregation dynamic

igmp version

Use igmp version to specify an IGMP version on an interface.

Use undo igmp version to restore the default.

Syntax

igmp version version-number

undo igmp version

Default

The IGMP version on an interface is 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

version-number: Specifies an IGMP version in the range of 1 to 3.

Usage guidelines

CAUTION:

For IGMP to operate correctly, specify the same IGMP version for all routers on the same subnet.

Examples

# Specify IGMP version 1 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] igmp version 1

last-member-query-count (IGMP view)

Use last-member-query-count to set the IGMP last member query count globally.

Use undo last-member-query-count to restore the default.

Syntax

last-member-query-count count

undo last-member-query-count

Default

The IGMP last member query count equals the IGMP querier's robustness variable.

Views

IGMP view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the IGMP last member query count globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP last member query count to 6 on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] last-member-query-count 6

Related commands

igmp last-member-query-count

last-member-query-interval (IGMP view)

Use last-member-query-interval to set the IGMP last member query interval globally.

Use undo last-member-query-interval to restore the default.

Syntax

last-member-query-interval interval

undo last-member-query-interval

Default

The IGMP last member query interval is 1 second.

Views

IGMP view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP last member query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the IGMP last member query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP last member query interval to 6 seconds on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] last-member-query-interval 6

Related commands

igmp last-member-query-interval

max-response-time (IGMP view)

Use max-response-time to set the maximum response time for IGMP general queries globally.

Use undo max-response-time to restore the default.

Syntax

max-response-time time

undo max-response-time

Default

The maximum response time for IGMP general queries is 10 seconds.

Views

IGMP view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for IGMP general queries in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

#Set the global maximum response time for IGMP general queries to 25 seconds on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] max-response-time 25

Related commands

igmp max-response-time

other-querier-present-interval (IGMP view)

Use other-querier-present-interval to set the IGMP other querier present timer globally.

Use undo other-querier-present-interval to restore the default.

Syntax

other-querier-present-interval interval

undo other-querier-present-interval

Default

The IGMP other querier present timer is calculated by using the following formula:

[ IGMP general query interval ] × [ IGMP querier's robustness variable ] + [ maximum response time for IGMP general queries ] / 2.

Views

IGMP view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP other querier present timer globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP other querier present timer to 125 seconds on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] other-querier-present-interval 125

Related commands

igmp other-querier-present-interval

proxy multipath (IGMP view)

Use proxy multipath to enable load splitting on an IGMP proxy device.

Use undo proxy multipath to disable load splitting on an IGMP proxy device.

Syntax

proxy multipath

undo proxy multipath

Default

The load splitting feature is disabled on the IGMP proxy device.

Views

IGMP view

Predefined user roles

network-admin

Usage guidelines

Use this feature when the IGMP proxy device has multiple proxy interfaces. All proxy interfaces on the IGMP proxy device share multicast traffic on a per-group basis. If you do not enable this feature, only the proxy interface with the highest IP address forwards multicast data.

Examples

# Enable load splitting on the IGMP proxy device on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] proxy multipath

query-interval (IGMP view)

Use query-interval to set the IGMP general query interval globally.

Use undo query-interval to restore the default.

Syntax

query-interval interval

undo query-interval

Default

The IGMP general query interval is 125 seconds.

Views

IGMP view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP general query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP general query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP general query interval to 60 seconds on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] query-interval 60

Related commands

igmp query-interval

reset igmp attack-suppression entry

Use reset igmp attack-suppression entry to remove IGMP suppression entries.

Syntax

reset igmp attack-suppression entry { all { per-interface | source-ip | source-mac } | slot slot-number { per-interface { all | interface interface-type interface-number } | source-ip { all | [ interface interface-type interface-number | ip-address address ] * } | source-mac { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

all: Specifies all cards (the first all keyword), or specifies all interface-based, source IP-based, or source MAC-based IGMP suppression entries (last three all keywords).

slot slot-number: Specifies a card by its slot number.

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a source MAC address.

ip-address address: Specifies a source IP address.

Examples

# Remove all interface-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression entry per-interface all

# Remove all source IP-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression entry source-ip all

# Remove all source MAC-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression entry source-mac all

Related commands

display igmp attack-suppression entry

reset igmp attack-suppression statistics

Use reset igmp attack-suppression statistics to clear IGMP packet statistics about IGMP suppression entries.

Syntax

reset igmp attack-suppression statistics { all { per-interface | source-ip | source-mac } | slot slot-number { per-interface { all | interface interface-type interface-number } | source-ip { all | [ interface interface-type interface-number | ip-address address ] * } | source-mac { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based IGMP suppression.

source-ip: Specifies source IP-based IGMP suppression.

source-mac: Specifies source MAC-based IGMP suppression.

all: Specifies all cards (the first all keyword), or specifies all interface-based, source IP-based, or source MAC-based IGMP suppression entries (last three all keywords).

slot slot-number: Specifies a card by its slot number.

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a source MAC address.

ip-address address: Specifies a source IP address.

Usage guidelines

This command clears statistics of the following fields in the output from the display igmp attack-suppression per-interface entry verbose command: CPU receive, CPU drop, and Drv drop.

Examples

# Clear IGMP packet statistics about all interface-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression statistics per-interface all

# Clear IGMP packet statistics about all source IP-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression statistics source-ip all

# Clear IGMP packet statistics about all source MAC-based IGMP suppression entries.

<Sysname> reset igmp attack-suppression statistics source-mac all

Related commands

display igmp attack-suppression entry

reset igmp group

Use reset igmp group to clear dynamic IGMP multicast group entries.

Syntax

reset igmp [ vpn-instance vpn-instance-name ] group { all | interface interface-type interface-number { all | group-address [ mask { mask | mask-length } ] [ source-address [ mask { mask | mask-length } ] ] } }

Views

User view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears dynamic IGMP multicast group entries on the public network.

all: Specifies all interfaces (the first all keyword), or all IGMP multicast groups (the second all keyword).

interface-type interface-number: Specifies an interface by its type and number.

group-address: Specifies a multicast group by its IP address in the range of 224.0.1.0 to 239.255.255.255.

source-address: Specifies a multicast source address. If you do not specify a multicast source, this command clears dynamic IGMP multicast group entries for all multicast source addresses.

mask: Specifies an address mask. The default is 255.255.255.255.

mask-length: Specifies an address mask length. The default is 32. For a multicast group address, the value range for this argument is 4 to 32. For a multicast source address, the value range for this argument is 0 to 32.

Usage guidelines

CAUTION:

This command might cause multicast data transmission failures.

Examples

# Clear dynamic IGMP multicast group entries for all interfaces on the public network.

<Sysname> reset igmp group all

# Clear all dynamic IGMP multicast group entries for Ten-GigabitEthernet 3/0/1 on the public network.

<Sysname> reset igmp group interface ten-gigabitethernet 3/0/1 all

# Clear the dynamic IGMP multicast group entry of group 225.0.0.1 for Ten-GigabitEthernet 3/0/1 on the public network.

<Sysname> reset igmp group interface ten-gigabitethernet 3/0/1 225.0.0.1

Related commands

display igmp group

robust-count (IGMP view)

Use robust-count to set the IGMP querier's robustness variable globally.

Use undo robust-count to restore the default.

Syntax

robust-count count

undo robust-count

Default

The IGMP querier's robustness variable is 2.

Views

IGMP view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the IGMP querier's robustness variable globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP querier's robustness variable to 5 on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] robust-count 5

Related commands

igmp robust-count

snmp-agent trap enable igmp

Use snmp-agent trap enable igmp to enable SNMP notifications for IGMP.

Use undo snmp-agent trap enable igmp to disable SNMP notifications for IGMP.

Syntax

snmp-agent trap enable igmp [ join | leave ] *

undo snmp-agent trap enable igmp [ join | leave ] *

Default

SNMP notifications for IGMP are enabled.

Views

System view

Predefined user roles

network-admin

Parameters

join: Specifies notifications when an IGMP report is received.

leave: Specifies notifications when an IGMP leave message is received.

Usage guidelines

If you do not specify an optional keyword, this command enables or disables IGMP to generate all SNMP notifications.

To report critical IGMP events to an NMS, enable SNMP notifications for IGMP. For IGMP event notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.

Examples

# Disable all SNMP notifications for IGMP.

<Sysname> system-view

[Sysname] undo snmp-agent trap enable igmp

ssm-mapping (IGMP view)

Use ssm-mapping to configure an IGMP SSM mapping.

Use undo ssm-mapping to delete IGMP SSM mappings.

Syntax

ssm-mapping source-address { ipv4-acl-number| name ipv4-acl-name }

undo ssm-mapping { source-address | all }

Default

No IGMP SSM mappings exist.

Views

IGMP view

Predefined user roles

network-admin

Parameters

source-address: Specifies a multicast source by its IP address.

ipv4-acl-number: Specifies a basic ACL number in the range of 2000 to 2999. Multicast groups in IGMP reports permitted by the ACL are associated with the multicast source. If the ACL does not exist or does not have valid rules, no multicast groups are associated with the IPv6 multicast source.

name ipv4-acl-name: Specifies an IPv4 basic ACL by its name, a case-insensitive string of 1 to 63 characters. The ACL name must begin with letters and it cannot be all. Multicast groups in IGMP reports permitted by the ACL are mapped to the specified multicast source. If the ACL with the specified name does not exist or does not have valid rules, no multicast groups are mapped to the specified multicast source.

all: Specifies all IGMP SSM mappings.

Usage guidelines

When you configure a rule in the IPv4 basic ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· The source source-address source-wildcard option specifies a multicast group address.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Configure an IGMP SSM mapping with multicast source 125.1.1.1 and multicast group range 232.1.1.0/24 on the public network.

<Sysname> system-view

[Sysname] acl basic 2001

[Sysname-acl-ipv4-basic-2001] rule permit source 232.1.1.1 0.0.0.255

[Sysname-acl-ipv4-basic-2001] quit

[Sysname] igmp

[Sysname-igmp] ssm-mapping 125.1.1.1 2001

Related commands

display igmp ssm-mapping

startup-query-count (IGMP view)

Use startup-query-count to set the IGMP startup query count globally.

Use undo startup-query-count to restore the default.

Syntax

startup-query-count count

undo startup-query-count

Default

The IGMP startup query count equals the IGMP querier's robustness variable.

Views

IGMP view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the IGMP startup query count globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP startup query count to 5 on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] startup-query-count 5

Related commands

igmp startup-query-count

startup-query-interval (IGMP view)

Use startup-query-interval to set the IGMP startup query interval globally.

Use undo startup-query-interval to restore the default.

Syntax

startup-query-interval interval

undo startup-query-interval

Default

The IGMP startup query interval equals one quarter of the IGMP general query interval.

Views

IGMP view

Predefined user roles

network-admin

Parameters

interval: Specifies an IGMP startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the IGMP startup query interval globally for all interfaces in IGMP view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global IGMP startup query interval to 100 seconds on the public network.

<Sysname> system-view

[Sysname] igmp

[Sysname-igmp] startup-query-interval 100

Related commands

igmp startup-query-interval

07-IP Multicast Command Reference

display igmp proxy group

display igmp ssm-mapping

display igmp user-info

host-tracking enable (IGMP view)

igmp group-policy

igmp host-tracking { disable | enable }

igmp join-by-session

igmp query-interval

igmp user-vlan-aggregation

last-member-query-count (IGMP view)

snmp-agent trap enable igmp

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us