Field	Description
Check interval	Check interval of MLD suppression.
Threshold	Threshold for triggering MLD suppression.
Aging time	Aging time of MLD suppression entries.

Related commands

mld attack-suppression aging-time

mld attack-suppression check-interval

mld attack-suppression enable

mld attack-suppression threshold

display mld attack-suppression entry

Use display mld attack-suppression entry to display MLD suppression entries.

Syntax

display mld attack-suppression entry slot slot-number { per-interface [ interface interface-type interface-number ] | source-ip [ interface interface-type interface-number | ip-address address ]* | source-mac [ interface interface-type interface-number | mac-address address ]* } [ attack ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays MLD suppression entries for all interfaces.

mac-address address: Specifies a source MAC address. If you do not specify a MAC address, this command displays MLD suppression entries for all source MAC addresses.

ip-address address: Specifies a source IPv6 address. If you do not specify an IPv6 address, this command displays MLD suppression entries for all source IPv6 addresses.

slot slot-number: Specifies a card by its slot number.

attack: Displays MLD suppression entries for MLD attack packets. If you do not specify this keyword, the command displays all MLD suppression entries that have been created.

verbose: Displays detailed information about MLD suppression entries. If you do not specify this keyword, the command displays brief information about MLD suppression entries.

Examples

# Display interface-based MLD suppression entries for MLD attack packets.

<Sysname> display mld attack-suppression entry slot 1 per-interface attack

Total entries: 1

Interface Attack start time Expires

XGE3/0/4 2018/09/10 15:53:34 00:01:15

# Display detailed information about interface-based MLD suppression entries.

<Sysname> display mld attack-suppression entry slot 1 per-interface verbose

Total entries: 2

Interface: XGE3/0/1

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop: 123456

Drv drop: 18446744073709551615

# Display source MAC-based MLD suppression entries for MLD attack packets.

<Sysname> display mld attack-suppression entry slot 1 source-mac attack

Total entries: 1

Interface MAC address Attack start time Expires

XGE3/0/4 0001-0001-0004 2018/09/10 15:53:34 00:01:15

# Display detailed information about source MAC-based MLD suppression entries.

<Sysname> display mld attack-suppression entry slot 1 source-mac verbose

Total entries: 2

Interface: XGE3/0/1

MAC address: 0001-0001-0001

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

MAC address: 0001-0001-0002

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop : 123456

Drv drop : 18446744073709551615

# Display source IPv6-based MLD suppression entries for MLD attack packets.

<Sysname> display mld attack-suppression entry source-ip slot 1 attack

Total entries: 1

Interface IP address Attack start time Expires

XGE3/0/4 FE80::16:1 2019/06/12 15:38:46 00:00:21

# Display detailed information about source IPv6-based MLD suppression entries.

<Sysname> display mld attack-suppression entry source-ip slot 1 verbose

Total entries: 2

Interface: XGE3/0/1

IP address: FE80::16:1

Drv status: N/A

Attack start time: N/A

Expires: Off

CPU receive: 10

CPU drop: 0

Drv drop: 0

Interface: XGE3/0/2

IP address: FE80::16:2

Drv status: Succeeded

Attack start time: 2018/09/10 15:53:34

Expires: 00:01:15

CPU receive: 123456789

CPU drop : 123456

Drv drop : 18446744073709551615

Table 2 Command output

Field	Description
Total entries	Total number of MLD suppression entries.
Interface	Interface name.
MAC address	MAC address of the attacker.
IP address	IPv6 address of the attacker.
Drv status	Driver status: · Succeeded—The driver limits the MLD packet rate. · Failed—The CPU limits the MLD packet rate. The device has failed or hardware resources for MLD suppression entries have been used up. · N/A—The incoming MLD packets are not attack packets and the device does not limit the packet rate. · Not support—The device hardware does not support MLD suppression. CPU resources are consumed if the device performs software-based rate limiting.
Attack start time	Time when the MLD packet attack started. This field displays N/A if no MLD attack is detected.
Expires	Remaining time of the MLD suppression entry aging timer. This field displays Off if the aging timer is disabled.
CPU receive	Number of packets that the CPU received.
CPU drop	Number of packets dropped by the CPU.
Drv drop	Number of packets dropped by the driver.

Related commands

reset mld attack-suppression entry

display mld group

Use display mld group to display information about MLD multicast groups (IPv6 multicast groups that hosts have joined through MLD).

Syntax

display mld [ vpn-instance vpn-instance-name ] group [ [ ipv6-group-address | interface interface-type interface-number ] [ static | verbose ] | statistics ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about MLD multicast groups on the public network.

ipv6-group-address: Specifies an IPv6 multicast group address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays information about all MLD multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about MLD multicast groups for all interfaces.

static: Specifies MLD multicast groups that hosts have joined statically. If you do not specify this keyword, the command displays information about MLD multicast groups that hosts have joined dynamically.

statistics: Displays the number of MLD multicast groups that hosts have joined statically and dynamically and the number of MLD multicast groups that hosts have joined dynamically. If you do not specify this keyword, the command displays information about MLD multicast groups.

verbose: Displays detailed information about MLD multicast groups. If you do not specify this keyword, the command displays brief information about MLD multicast groups.

Examples

# Display information about MLD multicast groups that hosts have dynamically joined on the public network.

<Sysname> display mld group

MLD groups in total: 1

Ten-GigabitEthernet3/0/1(FE80::101):

MLD groups reported in total: 1

Group address: FF03::101

Last reporter: FE80::10

Uptime: 00:02:04

Expires: 00:01:15

Table 3 Command output

Field	Description
MLD groups in total	Total number of MLD multicast groups.
MLD groups reported in total	Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically.
Group address	IPv6 multicast group address.
Last reporter	IPv6 address of the receiver host that last reported membership for the group.
Uptime	Length of time since the IPv6 multicast group was joined.
Expires	Remaining lifetime for the IPv6 multicast group. This field displays Off if the timer is disabled.

# Display detailed information about MLD multicast group FF3E::101 that hosts have statically joined on the public network. In this example, the router is configured with MLDv2.

<Sysname> display mld group ff3e::101 verbose

Ten-GigabitEthernet3/0/1(FE80::101):

MLD groups reported in total: 1

Group: FF3E::101

Uptime: 00:01:46

Exclude expires: 00:04:16

Mapping expires: 00:02:16

Last reporter: FE80::10

Last-listener-query-counter: 0

Last-listener-query-timer-expiry: Off

Mapping last-listener-query-counter: 0

Mapping last-listener-query-timer-expiry: Off

Group mode: Exclude

Version1-host-present-timer-expiry: Off

Source list (sources in total: 1):

Source: 10::10

Uptime: 00:00:09

V2 expires: 00:04:11

Mapping expires: 00:02:16

Last-listener-query-counter: 0

Last-listener-query-timer-expiry: Off

Table 4 Command output

Field	Description
MLD groups reported in total	Total number of MLD multicast groups that the hosts attached to the interface have joined dynamically.
Group	IPv6 multicast group address.
Uptime	Length of time since the IPv6 multicast group was reported.
Exclude expires	Remaining time for the IPv6 multicast group in Exclude mode. This field displays Off if the timer is disabled.
Mapping expires	Remaining time for the IPv6 multicast group specified in MLD SSM mappings. This field is displayed only when the device is configured with MLD SSM mappings.
Last reporter	IPv6 address of the receiver host that last reported membership for this group.
Last-listener-query-counter	Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group.
Last-listener-query-timer-expiry	Remaining time for the MLD last listener query timer for the multicast group. This field displays Off if the timer is disabled.
Mapping last-listener-query-counter	Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast group specified in MLD SSM mappings. This field is displayed only when the device is configured with MLD SSM mappings.
Mapping last-listener-query-timer-expiry	Remaining time for the last listener query timer of the IPv6 multicast group specified in MLD SSM mappings. This field displays Off if the timer is disabled. This field is displayed only when the device is configured with MLD SSM mappings.
Group mode	IPv6 multicast source filtering mode: · Include—Include mode. · Exclude—Exclude mode. For a device that runs MLDv1: · If MLD SSM mappings are not configured, this field displays Exclude. · If MLD SSM mappings are configured, this field displays Include or Exclude depending on the SSM mappings and the IPv6 multicast groups that the host joins.
Version1-host-present-timer-expiry	Remaining time for the MLDv1 host present timer. This field displays Off if the timer is disabled. This field is displayed only when the device runs MLDv2.
Source list (sources in total 1)	List of IPv6 multicast sources and total number of IPv6 multicast sources. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.
Source	IPv6 multicast source address. This field is displayed only when the device runs MLDv2 or the device is configured with MLD SSM mappings.
Uptime	Length of time since the IPv6 multicast source was reported. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.
V2 expires	Remaining time for the IPv6 multicast source when the device runs MLDv2. This field displays Off if the timer is disabled. This field displays three hyphens (---) if the IPv6 multicast source is specified in MLD SSM mappings. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.
Mapping expires	Remaining time for the IPv6 multicast sources specified in MLD SSM mappings.
Last-listener-query-counter	Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the IPv6 multicast source and group. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.
Last-listener-query-timer-expiry	Remaining time for the last listener query timer for the IPv6 multicast source and group. This field displays Off if the timer is disabled. This field is displayed only when the device runs MLDv2 or is configured with MLD SSM mappings.

# Display information about the MLD multicast groups that hosts have statically joined on the public network.

<Sysname> display mld group static

Entries in total: 2

(*, FF03::101)

Interface: XGE3/0/1

Expires: Never

(2001::101, FF3E::202)

Interface: XGE3/0/1

Expires: Never

Table 5 Command output

Field	Description
Entries in total	Total number of the IPv6 multicast groups that hosts have joined statically.
(*, FF03::101)	(*, G) entry.
(2001::101, FF3E::202)	(S, G) entry.
Expires	Remaining lifetime for the IPv6 multicast group. This field always displays Never, which means that the IPv6 multicast group never expires.

# Display the number of MLD multicast groups that hosts have joined dynamically and the number of MLD multicast groups that hosts have joined statically.

<Sysname> display mld group statistics

Dynamic groups in total: 2

Static groups in total: 1

Related commands

reset mld group

display mld host-tracking

Use display mld host-tracking to display MLD host tracking information.

Syntax

display mld [ vpn-instance vpn-instance-name ] host-tracking [ interface interface-type interface-number ] [ group ipv6-group-address ] [ source ipv6-source-address ] [ active ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays MLD host tracking information on the public network.

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays MLD host tracking information for all interfaces.

group ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify this option, the command displays MLD host tracking information for all IPv6 multicast groups.

source ipv6-source-address: Specifies a multicast source by its IPv6 address. If you do not specify this option, the command displays MLD host tracking information for all multicast sources.

active: Specifies active hosts. If you do not specify this keyword, the command displays MLD host tracking information for all hosts.

Examples

# Display MLD tracking information for all hosts.

<Sysname> display mld host-tracking

MLD hosts in total: 4

Ten-GigabitEthernet3/0/1(1001::1):

MLD hosts reported in total: 2

(::,ff1e::1)

Host Uptime Expires

1001::1 00:02:20 00:00:40

1001::2 00:02:21 00:00:39

Ten-GigabitEthernet3/0/2(1002::1):

MLD hosts reported in total: 2

(1010::1,ff1e::1)

Host Uptime Expires Type

1002::1 00:02:20 Expired G

1002::2 00:02:21 00:00:39 G

# Display MLD tracking information for hosts that have joined multicast group FF3E::1 on Ten-GigabitEthernet 3/0/1.

<Sysname> display mld host-tracking interface ten-gigabitethernet 3/0/1 group ff3e::1

MLD hosts reported in total: 5

(1.1.1.1,232.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 M

192.168.1.2 00:02:21 00:00:39 M

(2.2.2.2,232.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G/M

192.168.1.2 00:02:21 00:00:39 G/M

192.168.1.3 00:02:21 00:00:39 G/M

# Display MLD tracking information for active hosts on Ten-GigabitEthernet 3/0/1.

<Sysname> display mld host-tracking interface ten-gigabitethernet 3/0/1 active

MLD hosts reported in total: 2

(1.1.1.1, 224.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G

(1.1.1.1, 225.1.1.1)

Host Uptime Expires Type

192.168.1.1 00:02:20 00:00:40 G

Table 6 Command output

Field	Description
MLD hosts in total	Tracked hosts in total.
Ten-GigabitEthernet3/0/1(1001::1)	Interface name and IP address.
MLD hosts reported in total	Number of tracked hosts on the interface.
(::,ff1e:: 1)	(S, G) entry. Value :: in the S position indicates all IPv6 multicast sources.
Host	IPv6 address of the host.
Uptime	Length of time elapsed since the host joined the IPv6 multicast group.
Expires	Remaining timeout time for the host. The host timeout time is the same as the aging timer for the port. The timer is reset when the port receives an MLD report from the host. This field displays Expired if the host timed out.
Type	MLD version: · G—The MLD version is MLDv2 and the host joins the IPv6 multicast group normally. · M—The MLD version is MLDv1, and the host joins the IPv6 multicast group through the SSM mapping. · G/M—Both of the above conditions exist at the same time. This field is not displayed if the MLD version is MLDv1, and the host joins the multicast group without the SSM mapping.

Related commands

host-tracking enable

mld host-tracking { disable | enable }

display mld interface

Use display mld interface to display MLD information for interfaces.

Syntax

display mld [ vpn-instance vpn-instance-name ] interface [ access-interface interface-type interface-number | [ interface-type interface-number ] [ proxy ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays MLD information for interfaces on the public network.

access-interface interface-type interface-number: Specifies an access interface by its type and number, which is the actual interface through which a multicast user accesses the network.

interface-type interface-number: Specifies an interface by its type and number.

proxy: Displays the MLD proxy interface information.

verbose: Displays detailed MLD information.

Usage guidelines

A multicast-UA interface is a virtual interface created for maintaining MLD information.

When an IPoE or PPPoE user assigned with the STB service comes online, the access module sends a notification to MLD. If per-session IPv6 multicast forwarding is enabled on the access interface, MLD creates a multicast-UA interface for the user upon receiving the notification. When the user goes offline, MLD deletes the multicast-UA interface immediately after receiving the notification from the access module. For more information about specifying the STB service for users in an ISP domain, see AAA configuration in BRAS Services Configuration Guide.

When a user comes online through an interface configured with QinQ and per-session IPv6 multicast forwarding, MLD creates a multicast-UA interface upon receiving an MLD report from the user. For users that belong to the same SVLAN and CVLAN, only one multicast-UA interface is created. The multicast-UA interface ages out if the interface neither maintains membership information for any IPv6 multicast groups nor receives MLD reports for a period of time. For more information about QinQ, see Layer 2—LAN Switching Configuration Guide.

To display MLD information for multicast-UA interfaces created for multicast users that come online through the same access interface, specify the access-interface interface-type interface-number option.

If you do not specify any parameters, this command displays MLD information for all interfaces.

Examples

# Display detailed MLD information for Ten-GigabitEthernet 3/0/1.3 (non-proxy interface) on the public network.

<Sysname> display mld interface ten-gigabitethernet 3/0/1.3 verbose

Ten-GigabitEthernet3/0/1.3 (FE80::200:AFF:FE01:101):

MLD is enabled.

MLD version: 1

Query interval for MLD: 125s

Other querier present time for MLD: 255s

Maximum query response time for MLD: 10s

Last listener query interval: 1s

Last listener query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:00:23

Querier for MLD: FE80::200:AFF:FE01:101 (This router)

MLD activity: 1 join(s), 0 done(s)

IPv6 multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Disabled

User-VLAN-aggregation: Enabled (Dynamic)

MLD groups reported in total: 1

# Display detailed MLD information for all MLD proxy interfaces on the public network.

<Sysname> display mld interface proxy verbose

Ten-GigabitEthernet3/0/2(FE80::100:CEF:FE01:101):

MLD proxy is enabled.

MLD version: 1

IPv6 multicast routing on this interface: Enabled

Require-router-alert: Disabled

Version1-querier-present-timer-expiry (hh:mm:ss): Off

# Display detailed MLD information for user access interface Ten-GigabitEthernet 3/0/2 on the public network.

<Sysname> display mld interface access-interface ten-gigabitethernet 3/0/2 verbose

Multicast-UA0(FE80::102:2):

MLD is enabled.

MLD version: 1

Query interval for MLD: 125s

Other querier present time for MLD: 255s

Maximum query response time for MLD: 10s

Last listener query interval: 1s

Last listener query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:01:14

Querier for MLD: FE80::102:2 (This router)

MLD activity: 0 join(s), 0 done(s)

IPv6 multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Enabled

User-VLAN-aggregation: Disabled

Access interface: Ten-GigabitEthernet3/0/2

MLD groups reported in total: 1

# Display detailed MLD information for Multicast-UA 0 on the public network.

<Sysname> display mld interface Multicast-UA 0 verbose

Multicast-UA0(2001::1):

MLD is enabled.

MLD version: 1

Query interval for MLD: 125s

Other querier present time for MLD: 255s

Maximum query response time for MLD: 10s

Last member query interval: 1s

Last member query count: 2

Startup query interval: 31s

Startup query count: 2

General query timer expiry (hh:mm:ss): 00:00:54

Querier for MLD: 2000::1 (This router)

MLD activity: 1 join(s), 0 leave(s)

IPv6 multicast routing on this interface: Enabled

Robustness: 2

Require-router-alert: Disabled

Fast-leave: Disabled

Startup-query: Off

Other-querier-present-timer-expiry (hh:mm:ss): Off

Authorization: Disabled

Join-by-session: Enabled

User-VLAN-aggregation: Disabled

User-ID: 0x40000001

VLAN ID: 100

Second VLAN ID: 10

User address: 1.1.1.1

User profile: profile1

Access type: IPoE

Access interface: Ten-GigabitEthernet3/0/1.1

MLD groups reported in total: 1

Table 7 Command output

Field	Description
Ten-GigabitEthernet3/0/1(FE80::200:AFF:FE01:101)	Interface and its IPv6 link-local address.
MLD is enabled	MLD is enabled on the interface.
MLD version	Version of MLD that the interface runs.
Query interval for MLD	MLD query interval, in seconds.
Other querier present time for MLD	MLD other querier present interval, in seconds.
Maximum query response time for MLD	Maximum response time for MLD general query messages, in seconds.
Last listener query interval	Interval for sending MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries, in seconds.
Last listener query count	Number of MLD multicast-address-specific queries or MLD multicast-address-and-source-specific queries sent for the group.
Startup query interval	MLD startup query interval, in seconds.
Startup query count	Number of MLD general queries sent on startup.
General query timer expiry	Remaining time for the MLD general query timer. This field displays Off if the timer is disabled.
Querier for MLD	IPv6 link-local address of the MLD querier.
MLD activity: 1 join(s), 0 done(s)	MLD activity statistics: · join(s)—Total number of IPv6 multicast groups that the interface has joined. · done(s)—Total number of IPv6 multicast groups that the interface has left.
IPv6 multicast routing on this interface	Whether IPv6 multicast routing is enabled: Enabled or Disabled.
Robustness	Robustness variable of the MLD querier.
Require-router-alert	Whether the feature of dropping MLD messages without Router-Alert is enabled: Enabled or Disabled.
Fast-leave	Whether fast-leave processing is enabled: Enabled or Disabled.
Startup-query	Whether the MLD querier sends MLD general queries at the startup query interval on startup: · On—The MLD querier performs the above action. · Off—The MLD querier does not perform the above action.
Other-querier-present-timer-expiry	Remaining time for MLD other querier present timer. This field displays Off if the timer is disabled.
Authorization	Whether the IPv6 multicast access control feature is enabled: Enabled or Disabled.
Join-by-session	Whether the per-session IPv6 multicast forwarding feature is enabled: Enabled or Disabled.
User-VLAN-aggregation	VLAN tagging configuration for multicast packets: · Enabled—The multicast packet VLAN tagging feature is enabled. · Disabled—The multicast packet VLAN tagging feature is disabled. · Dynamic—The multicast packets are tagged with VLANs of online users. · Dot1q vid n1 second-dot1q n2—The multicast packets are tagged with outer VLAN ID n1 and inner VLAN ID n2.
User-ID	ID of the IPv6 multicast user on the interface.
VLAN ID	Outer VLAN ID or the only VLAN ID in the IPv6 multicast user's packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Second VLAN ID	Inner VLAN ID in the IPv6 multicast user's packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
User address	IPv6 address of the IPv6 multicast user. This field is not displayed if the device does not obtain the user's IPv6 address.
User profile	Name of the user profile assigned to the IPv6 multicast user. The IPv6 multicast user can join IPv6 multicast groups permitted by the MLD user access control policy in the user profile. To configure an MLD user access control policy, use the mld access-policy command.
Access interface	Actual interface through which the multicast user accesses the network. This field is displayed only when MLD information is maintained on a multicast-UA interface.
MLD groups reported in total	Total number of IPv6 multicast groups that the interface has joined dynamically. This field is not displayed if the interface does not join IPv6 multicast groups.
MLD proxy is enabled	MLD proxying is enabled.
Version1-querier-present-timer-expiry	Remaining time for the MLDv1 querier present timer. This field displays Off if the timer is disabled.

display mld proxy group

Use display mld proxy group to display information about IPv6 multicast groups maintained by the MLD proxy.

Syntax

display mld [ vpn-instance vpn-instance-name ] proxy group [ ipv6-group-address | interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about IPv6 multicast groups maintained by the MLD proxy on the public network.

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast group membership entries for all IPv6 multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about IPv6 multicast groups maintained by the MLD proxy for all interfaces.

verbose: Displays detailed information.

Examples

# Display information about IPv6 multicast groups maintained by the MLD proxy on the public network.

<Sysname> display mld proxy group

MLD proxy group records in total: 2

Ten-GigabitEthernet3/0/1(FE80::16:1):

MLD proxy group records in total: 2

Group address: FF1E::1

Member state: Idle

Expires: Off

Group address: FF1E::2

Member state: Idle

Expires: Off

# Display detailed information about IPv6 multicast group FF1E::1 maintained by the MLD proxy on the public network.

<Sysname> display mld proxy group ff1e::1 verbose

Ten-GigabitEthernet3/0/1(FE80::16:1):

MLD proxy group records in total: 2

Group: FF1E::1

Group mode: Include

Member state: Idle

Expires: Off

Source list (sources in total: 1):

100::1

Table 8 Command output

Field	Description
MLD proxy group records in total	Total number of IPv6 multicast group membership entries maintained by the MLD proxy.
Ten-GigabitEthernet3/0/1(FE80::16:1)	Interface and its IPv6 address.
Pending proxy group	Pending IPv6 multicast group membership entries maintained by the MLD proxy.
Group address/Group	IPv6 multicast group address.
Member state	Member host states: · Delay—The member host has joined a group and started a delay timer. · Idle—The member host has joined a group, but didn't start a delay timer.
Expires	Remaining delay time for a member host to send a responding report. This field displays Off if the timer is disabled.
Group mode	IPv6 multicast source filtering mode: · Include. · Exclude.
Source list (sources in total: 1)	List of IPv6 multicast sources in the group membership database maintained by the MLD proxy, and the total number of the IPv6 multicast sources.

display mld proxy routing-table

Use display mld proxy routing-table to display IPv6 multicast routing entries maintained by the MLD proxy.

Syntax

display mld [ vpn-instance vpn-instance-name ] proxy routing-table [ ipv6-source-address [ prefix-length ] | ipv6-group-address [ prefix-length ] ] * [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays IPv6 multicast routing entries maintained by the MLD proxy on the public network.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command displays IPv6 multicast routing entries maintained by the MLD proxy for all IPv6 multicast sources.

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. If you do not specify an IPv6 multicast group, this command displays IPv6 multicast routing entries for all IPv6 multicast groups maintained by the MLD proxy.

prefix-length: Specifies an address prefix length. For an IPv6 multicast source address, the value range for this argument is 0 to 128. For an IPv6 multicast group address, the value range for this argument is 8 to 128. The default value is 128.

verbose: Displays detailed information about IPv6 multicast routing entries maintained by the MLD proxy.

Examples

# Display IPv6 multicast routing entries maintained by the MLD proxy on the public network.

<Sysname> display mld proxy routing-table

Total 1 (*, G) entries, 2 (S, G) entries.

(100::1, FF1E::1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: MLD

(*, FF1E::2)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: STATIC

(2::2, FF1E::2)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (2 in total):

1: LoopBack1

Protocol: STATIC

2: Ten-GigabitEthernet3/0/2

Protocol: PROXY

# Display detailed information about IPv6 multicast routing entries maintained by the MLD proxy on the public network.

<Sysname> display mld proxy routing-table verbose

Total 1 (*, G) entries, 2 (S, G) entries.

(100::1, FF1E::1)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: MLD

Querier state: Querier

Join/Prune state: Join

Non-downstream interfaces: None

(*, FF1E::2)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/2

Protocol: STATIC

Querier state: Querier

Join/Prune state: Join

Non-downstream interfaces (1 in total):

1: Ten-GigabitEthernet3/0/3

Protocol: MLD

Querier state: Non-querier

Join/Prune state: Join

(2::2, FF1E::2)

Upstream interface: Ten-GigabitEthernet3/0/1

Downstream interfaces (2 in total):

1: LoopBack1

Protocol: STATIC

Querier state: Querier

Join/Prune state: Join

2: Ten-GigabitEthernet3/0/2

Protocol: PROXY

Querier state: Querier

Join/Prune state: Join

Non-downstream interfaces: None

Table 9 Command output

Field	Description
Total 1 (*, G) entries, 2 (S, G) entries	Total number of (*, G ), and the total number of (S, G) entries.
(100::1, FF1E::1)	(S, G) entry.
Upstream interface	Incoming interface of a forwarding entry.
Downstream interfaces (1 in total)	Outgoing interfaces, and the total number of outgoing interfaces.
Non-downstream interfaces (1 in total)	Non-outgoing interfaces, and the total number of non-outgoing interfaces.
1: Ten-GigabitEthernet3/0/2	Index of an outgoing interface and the outgoing interface.
Protocol	Protocol type: · MLD—Dynamic MLD. · PROXY—MLD proxy. · STATIC—Static MLD.
Querier state	Querier state: · Querier. · Non-querier.
Join/Prune state	Joined or pruned state of the interface: · NI—Default state. · Join—Joined state. · Prune—Pruned state.

display mld ssm-mapping

Use display mld ssm-mapping to display MLD SSM mappings.

Syntax

display mld [ vpn-instance vpn-instance-name ] ssm-mapping ipv6-group-address

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays MLD SSM mappings on the public network.

Examples

# Display MLD SSM mappings for IPv6 multicast group FF3E::101 on the public network.

<Sysname> display mld ssm-mapping ff3e::101

Group: FF3E::101

Source list:

1::1

1::2

10::1

100::10

Table 10 Command output

Fields	Description
Group	IPv6 multicast group address.
Source list	List of IPv6 multicast source addresses.

display mld user-info

Use display mld user-info to display authorization information for MLD users.

Syntax

display mld user-info [ access-type { ipoe | ppp } ] [ access-interface interface-type interface-number | interface interface-type interface-number ] [ user-id user-id-number | user-ip user-ipv6-address ] [ active-group group-address | active-user | inactive-user ] [ statistics ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

access-type: Specifies an access type.

ipoe: Specifies the IPoE users.

ppp: Specifies the PPP users.

access-interface interface-type interface-number: Specifies a user access interface by its type and number.

interface-type interface-number: Specifies an interface by its type and number.

user-id user-id-number: Specifies an online IPv6 multicast user by its ID, a hexadecimal integer in the range of 1 to 7FFFFF. The ID is automatically assigned to the user by the system.

user-ip user-ipv6-address: Specifies an online multicast user by its IPv6 address.

active-group group-address: Displays information about MLD users that have joined the specified authorized IPv6 multicast group. The group-address argument specifies the address of the authorized multicast group, in the range of FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where x and y represent any hexadecimal number in the range of 0 to F.

active-user: Specifies MLD users that have joined IPv6 multicast groups.

inactive-user: Specifies MLD users that have not joined IPv6 multicast groups.

statistics: Displays authorization statistics for MLD users.

Usage guidelines

If you do not specify any parameters, this command displays authorization information for all MLD users.

Examples

# Display information about all authorized MLD users.

<Sysname> display mld user-info

Authorized users in total: 2

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102::1

Gateway address: 102::2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 10

User profile: profile1

Authorized group list:

FF03::101

Total ordered programs: 1

Ordered program list:

Group IP Source IP

FF03::101 ::

User name: user2

Access type: IPoE

Interface: Multicast-UA0

Access interface: Ten-GigabitEthernet3/0/1.1

VLAN ID: 100

Second VLAN ID: 10

User address: 101::1

Gateway address: 101::2

User mac-address: 0010-9400-134c

User ID: 0x40000001 (VLAN ID 100, Second VLAN ID 10, Account ID 0x72)

Maximum allowed groups: 10

User profile: profile1

Authorized group list:

FF03::101

FF03::102

FF03::103

# Display authorization information for MLD users that have joined IPv6 multicast groups.

<Sysname> display mld user-info active-user

Authorized users in total: 3

Active users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102::1

Gateway address: 102::2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

FF03::101

Total ordered programs: 1

Ordered program list:

Group IP Source IP

FF03::101 ::

# Display authorization information for MLD users that access the network through PPP.

<Sysname> display mld user-info access-type ppp

Authorized users in total: 2

Matching users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102::1

Gateway address: 102::2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 10

User profile: profile1

Authorized group list:

FF03::101

Total ordered programs: 1

Ordered program list:

Group IP Source IP

FF03::101 ::

# Display authorization information for MLD users that access the network through PPP and have joined IPv6 multicast groups.

<Sysname> display mld user-info access-type ppp active-user

Authorized users in total: 2

Active users in total: 1

Matching users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102::1

Gateway address: 102::2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

FF03::101

Total ordered programs: 1

Ordered program list:

Group IP Source IP

FF03::101 ::

# Display authorization information for MLD users that have not joined IPv6 multicast groups.

<Sysname> display mld user-info inactive-user

Authorized users in total: 3

Inactive users in total: 1

User name: user1@isp1

Access type: PPP

Interface: Multicast-UA2

Access interface: Ten-GigabitEthernet3/0/1.2

User address: 102::1

Gateway address: 102::2

User mac-address: 0010-9400-133c

User ID: 0x20000002 (Session ID 0x1, VLAN ID 101)

Maximum allowed groups: 4

User profile: profile1

Authorized group list:

FF03::101

# Display authorization statistics for MLD users that have joined IPv6 multicast groups.

<Sysname> display mld user-info group ff03::1 statistics

Authorized users in total: 8

Matching users in total: 2

Table 11 Command output

Field	Description
Authorized users in total	Total number of authorized access users.
Active users in total	Total number of access users that have joined the authorized IPv6 multicast group.
Inactive users in total	Total number of access users that have not joined the authorized IPv6 multicast group.
Matching users in total	Total number of matching MLD users.
Access type	Access type: · IPoE. · PPP.
Interface	Multicast user interface.
Access interface	Actual interface through which the user accesses the network.
User VPN-instance	Name of the VPN instance authorized to the user. This field is not displayed if no VPN instance is authorized to the user or the public network is authorized to the user.
User address	IP address of the user. This field is not displayed if the device does not obtain the IP address of the user.
Gateway address	Gateway IP address of the user. This field is not displayed if the device does not obtain the gateway IP address of the user.
User MAC address	MAC address of the user. This field is not displayed if the device does not obtain the MAC address of the user.
User ID	ID of the user.
Leased user ID	ID of the IPoE leased user. This field is displayed only for IPoE leased users.
Session ID	ID of the user session. This field is displayed only for PPPoE users.
VLAN ID	Outer VLAN ID or the only VLAN ID in the user packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Second VLAN ID	Inner VLAN ID in the user packets. This field is not displayed if the user's packets are not tagged with VLAN IDs.
Account ID	Account ID. The device collectively limits the traffic rate of users that share the same account. This field is displayed only when the user is an IPoE or PPPoE user that shares a user account with other users. For more information about shared-account users, see AAA configuration in BRAS Services Configuration Guide.
VSI index	VSI index. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface.
Link ID	Link ID. This field is displayed only when the multicast user accesses the network through a VXLAN tunnel interface.
Maximum allowed groups	Maximum number of the IPv6 multicast groups that the user can join.
User profile	Name of the user profile assigned to the IPv6 multicast user. The IPv6 multicast user can join IPv6 multicast groups permitted by the MLD user access control policy in the user profile. To configure an MLD access control policy, use the mld access-policy command.
Authorized group list	List of the IPv6 multicast groups that the user is authorized to join.
Total ordered programs	Total number of IPv6 multicast sources and groups that the user has actually joined.
Ordered program list	List of IPv6 multicast sources and groups that the user has actually joined.
Group IP	Address of the IPv6 multicast group in an IPv6 multicast source and group that the user has actually joined.
Source IP	Address of the IPv6 multicast source in an IPv6 multicast source and group that the user has actually joined. This field displays 0::0 if the multicast user has joined a multicast group.
Active users in total	Total number of MLD users that have joined IPv6 multicast groups.

host-tracking enable (MLD view)

Use host-tracking enable to enable MLD host tracking globally.

Use undo host-tracking enable to disable MLD host tracking globally.

Syntax

host-tracking enable

undo host-tracking enable

Default

MLD host tracking is disabled globally.

Views

MLD view

Predefined user roles

network-admin

Usage guidelines

This feature allows the device to record IPv6 addresses, running time, timeout time, and other information about receiver hosts. You can monitor and manage receiver hosts based on the recorded information.

You can enable MLD host tracking globally for all interfaces, or use the mld host-tracking enable command in interface view to enable host tracking for an interface. For an interface, the interface-specific configuration has higher priority than the global configuration.

Examples

# Enable MLD host tracking globally on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] host-tracking enable

Related commands

mld host-tracking enable

last-listener-query-count (MLD view)

Use last-listener-query-count to set the MLD last listener query count globally.

Use undo last-listener-query-count to restore the default.

Syntax

mld last-member-query-count count

undo mld last-member-query-count

Default

The MLD last listener query count equals the MLD querier's robustness variable.

Views

MLD view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the MLD last listener query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD last listener query count to 6 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] last-listener-query-count 6

Related commands

mld last-listener-query-count

last-listener-query-interval (MLD view)

Use last-listener-query-interval to set the MLD last listener query interval globally.

Use undo last-listener-query-interval to restore the default.

Syntax

last-listener-query-interval interval

undo last-listener-query-interval

Default

The MLD last listener query interval is 1 second.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the MLD last listener query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD last listener query interval to 6 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] last-listener-query-interval 6

Related commands

mld last-listener-query-interval

max-response-time (MLD view)

Use max-response-time to set the maximum response time for MLD general queries globally.

Use undo max-response-time to restore the default.

Syntax

max-response-time time

undo max-response-time

Default

The maximum response time for MLD general queries is 10 seconds.

Views

MLD view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for MLD general queries in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global maximum response time for MLD general queries to 25 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] max-response-time 25

Related commands

mld max-response-time

mld

Use mld to enter MLD view.

Use undo mld to delete the configurations in MLD view.

Syntax

mld [ vpn-instance vpn-instance-name ]

undo mld [ vpn-instance vpn-instance-name ]

Views

System view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command takes effect on the public network.

Examples

# Enter MLD view of the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld]

# Enter MLD view of VPN instance mvpn.

<Sysname> system-view

[Sysname] mld vpn-instance mvpn

[Sysname-mld-mvpn]

mld access-policy

Use mld access-policy to configure an MLD user access policy.

Use undo mld access-policy to delete an MLD user access policy.

Syntax

mld access-policy ipv6-acl-number

undo mld access-policy ipv6-acl-number

Default

No MLD user access policy exists. MLD users are not authorized to join any IPv6 multicast groups.

Views

User profile view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic or advanced ACL number, in the range of 2000 to 3999. MLD users can join only IPv6 multicast groups that the ACL permits. If the ACL does not exist or does not have valid rules, MLD users cannot join IPv6 multicast groups.

Usage guidelines

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast source address.

· In an advanced ACL, the source source-address source-prefix option specifies an IPv6 multicast source address. The destination dest-address dest-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡ MLDv1 reports.

¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure an MLD user access policy in user profile abc to authorize MLD users to join IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 basic 2000

[Sysname-acl-ipv6-basic-2000] rule permit source ff03::101 128

[Sysname-acl-ipv6-basic-2000] quit

[Sysname] user-profile abc

[Sysname-user-profile-abc] mld access-policy 2000

mld attack-suppression aging-time

Use mld attack-suppression aging-time to set the aging time for MLD suppression entries.

Use undo mld attack-suppression aging-time to restore the default.

Syntax

mld attack-suppression { per-interface | source-ip | source-mac } aging-time time

undo mld attack-suppression { per-interface | source-ip | source-mac } aging-time

Default

The aging time is 30 seconds for MLD suppression entries.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

time: Specifies the aging time of MLD suppression entries, in the range of 1 to 65535 seconds.

Usage guidelines

When the aging time of a source IPv6-based or source MAC-based MLD suppression entry expires, the device ages out the entry and stops rate limiting packets from this IPv6 or MAC address. Then, the device recounts the number of incoming MLD packets from this source IPv6 or MAC address to start a new MLD suppression process.

When the aging time of the MLD suppression entry on an interface expires, the device ages out the entry and stops limiting the packet rate only if no MLD attack exists on the interface. Then, the device recounts the number of incoming MLD packets on the interface to start a new MLD suppression process.

This command takes effect only after you execute the mld attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 60 seconds for interface-based MLD suppression entries.

<Sysname> system-view

[Sysname] mld attack-suppression aging-time 60

# Set the aging time to 10 seconds for source IPv6-based MLD suppression entries.

<Sysname> system-view

[Sysname] mld attack-suppression source-ip aging-time 10

# Set the aging time to 100 seconds for source MAC-based MLD suppression entries.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac aging-time 100

mld attack-suppression check-interval

mld attack-suppression check-interval to set the check interval for MLD suppression.

undo mld attack-suppression check-interval to restore the default.

Syntax

mld attack-suppression { per-interface | source-ip | source-mac } check-interval interval

undo mld attack-suppression { per-interface | source-ip | source-mac } check-interval

Default

The check interval is 30 seconds for MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

interval: Specifies the check interval for MLD suppression, in the range of 1 to 255 seconds.

Usage guidelines

This command takes effect only after you execute the mld attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the check interval to 10 seconds for interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface check-interval 10

# Set the check interval to 20 seconds for source IPv6-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-ip check-interval 20

# Set the check interval to 10 seconds for source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac check-interval 10

mld attack-suppression enable

Use mld attack-suppression enable to enable MLD suppression.

Use undo mld attack-suppression enable to disable MLD suppression.

Syntax

mld attack-suppression { per-interface | source-ip | source-mac } enable

undo mld attack-suppression { per-interface | source-ip | source-mac } enable

Default

MLD suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

Usage guidelines

The source IPv6-based MLD suppression feature creates MLD suppression entries and counts the number of received MLD packets on a per source IPv6 address basis. When the number of packets received from an IPv6 address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal MLD packets, the device drops the MLD attack packets from the IPv6 address.

The source MAC-based MLD suppression feature creates MLD suppression entries and counts the number of received MLD packets on a per MAC address basis. When the number of MLD packets from a MAC address exceeds the threshold within the check interval, the device identifies these packets as attack packets. To ensure CPU resource allocation for normal MLD packets, the device drops the MLD attack packets from the MAC address.

The interface-based MLD suppression feature allows the device to create MLD suppression entries and count the number of received MLD packets on a per interface basis. When the number exceeds the threshold within the check interval, the device identifies these packets as attack packets and limits the rate for sending them to the CPU.

This feature takes effect only on Layer 3 Ethernet interfaces and Layer 3 Ethernet subinterfaces if you enable MLD snooping globally on the device. MLD packets received on VLAN interfaces and Layer 2 interfaces (such as Layer 2 aggregate interfaces) are processed at Layer 2.

Examples

# Enable interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface enable

# Enable source IPv6-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-ip enable

# Enable source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac enable

mld attack-suppression threshold

Use mld attack-suppression threshold to set the threshold for triggering MLD suppression.

Use undo mld attack-suppression threshold to restore the default.

Syntax

mld attack-suppression { per-interface | source-ip | source-mac } threshold threshold-value

undo mld attack-suppression { per-interface | source-ip | source-mac } threshold

Default

The threshold is 6000 for triggering interface-based MLD suppression and is 1000 for triggering source IP-based MLD suppression and source MAC-based MLD suppression.

Views

System view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

threshold-value: Specifies the threshold for triggering MLD suppression, in the range of 1 to 4294967295. The threshold defines the maximum number of MLD packets that can be received within the check interval.

Usage guidelines

Packets from an IPv6 address or MAC address are attack packets if the number of received MLD packets from this IPv6 or MAC address exceeds the threshold within the check interval.

An interface is attacked if the number of received MLD packets on the interface exceeds the threshold within the check interval.

This command takes effect only after you execute the mld attack-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the threshold to 300 for triggering interface-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression per-interface threshold 300

# Set the threshold to 300 for triggering source IPv6-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-ip threshold 300

# Set the threshold to 400 for triggering source MAC-based MLD suppression.

<Sysname> system-view

[Sysname] mld attack-suppression source-mac threshold 400

mld authorization-enable

Use mld authorization-enable to enable the IPv6 multicast access control feature.

Use undo mld authorization-enable to disable the IPv6 multicast access control feature.

Syntax

mld authorization-enable

undo mld authorization-enable

Default

The IPv6 multicast access control feature is disabled.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

VT interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on local online users. Non-local users and offline users are not affected.

Examples

# Enable the IPv6 multicast access control feature on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld authorization-enable

mld enable

Use mld enable to enable MLD on an interface.

Use undo mld enable to disable MLD on an interface.

Syntax

mld enable

undo mld enable

Default

MLD is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IPv6 multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.

Other MLD configurations on the interface take effect only when MLD is enabled on the interface.

Examples

# Enable IPv6 multicast routing on the public network, and enable MLD for Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] ipv6 multicast routing

[Sysname-mrib6] quit

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld enable

Related commands

ipv6 multicast routing

mld fast-leave

Use mld fast-leave to enable fast-leave processing on an interface.

Use undo mld fast-leave to disable fast-leave processing on an interface.

Syntax

mld fast-leave [ group-policy ipv6-acl-number ]

undo mld fast-leave

Default

Fast-leave processing is disabled. The MLD querier sends MLD multicast-address-specific or multicast-address-and-source-specific queries after receiving a done message.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999. If you specify an ACL, the fast-leave processing feature takes effect only on the IPv6 multicast groups that the ACL permits. The feature takes effect on all IPv6 multicast groups when one of the following conditions exists:

· You do not specify an ACL.

· The specified ACL does not exist.

· The specified ACL does not have valid rules.

Usage guidelines

The fast-leave processing feature enables an MLD querier to suppress MLD multicast-address-specific or multicast-address-and-source-specific queries upon receiving MLD done messages permitted by the ACL.

When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· The source source-address source-prefix option specifies an IPv6 multicast group address.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Enable fast-leave processing on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld fast-leave

mld group-policy

Use mld group-policy to configure an IPv6 multicast group policy on an interface to control the IPv6 multicast groups that hosts attached to the interface can join.

Use undo mld group-policy to delete the IPv6 multicast group policy on an interface.

Syntax

mld group-policy ipv6-acl-number [ version-number ]

undo mld group-policy

Default

No IPv6 multicast group policy exists. Hosts attached to the interface can join any IPv6 multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 basic or advanced ACL by its number in the range of 2000 to 3999. Receiver hosts can join only the IPv6 multicast groups that the ACL permits. If the ACL does not exist or have valid rules, receiver hosts cannot join IPv6 multicast groups.

version-number: Specifies an MLD version number, 1 or 2. By default, this command takes effect on both MLDv1 reports and MLDv2 reports.

Usage guidelines

An IPv6 multicast group policy filters MLD reports to control the IPv6 multicast groups that hosts can join.

This command does not take effect on static member interfaces because static member interfaces do not send MLD reports.

When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· In a basic ACL, the source source-address source-prefix option specifies an IPv6 multicast group address.

To match the following MLD reports, set the source source-address source-prefix option to 0::0:

¡ MLDv1 reports.

¡ MLDv2 IS_EX and MLDv2 TO_EX reports that do not carry multicast source addresses.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure an IPv6 multicast group policy on Ten-GigabitEthernet 3/0/1 so that hosts attached to the interface can join only IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] acl ipv6 basic 2005

[Sysname-acl-ipv6-basic-2005] rule permit source ff03::101 128

[Sysname-acl-ipv6-basic-2005] quit

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld group-policy 2005

mld host-tracking { disable | enable }

Use mld host-tracking enable to enable MLD host tracking on an interface.

Use mld host-tracking disable to disable MLD host tracking on an interface.

Use undo mld host-tracking to restore the default.

Syntax

mld host-tracking enable

mld host-tracking disable

undo mld host-tracking

Default

The interface-specific MLD host tracking status is consistent with the global MLD host tracking status.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

You can enable MLD host tracking on an interface, or use the host-tracking enable command in MLD view to enable MLD host tracking for all interfaces. For an interface, the interface-specific configuration has higher priority than the global configuration.

Examples

# Enable MLD host tracking on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld host-tracking enable

Related commands

host-tracking enable (MLD view)

mld host-tracking limit

Use mld host-tracking limit to set the maximum number of hosts that can be tracked on an interface.

Use undo mld host-tracking limit to restore the default.

Syntax

mld host-tracking limit limit

undo mld host-tracking limit

Default

An interface can track a maximum of 4096 hosts.

Views

Interface view

Predefined user roles

network-admin

Parameters

limit: Specifies the maximum number of hosts that can be tracked on an interface, in the range of 1 to 65535.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect. When the maximum number is reached, new host records overwrite old ones.

Examples

# Set the maximum number to 2000 for hosts that can be tracked on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet 3/0/1] mld host-tracking limit 2000

mld join-by-session

Use mld join-by-session to enable per-session IPv6 multicast forwarding.

Use undo mld join-by-session to restore the default.

Syntax

mld join-by-session [ mode { both | bras | non-bras } ]

undo mld join-by-session

Default

IPv6 multicast data is forwarded on a per-interface basis.

Views

Layer 3 Ethernet interface/subinterface view

Layer 3 aggregate interface/subinterface view

Predefined user roles

network-admin

Parameters

mode: Specifies a user access type. If you do not specify this option, per-session multicast forwarding is enabled for users of all access types.

both: Specifies BRAS and non-BRAS user access types.

bras: Specifies the BRAS user access type, including IPoE and PPP.

non-bras: Specifies the non-BRAS user access type. Non-BRAS users refer to users that do not need to perform authentication.

Usage guidelines

This feature enables an interface to send a separate copy of IPv6 multicast data to each user attached to the interface.

The mld join-by-session and mld user-vlan-aggregation commands are mutually exclusive. You cannot configure them on the same device.

Examples

# Enable per-session IPv6 multicast forwarding on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld join-by-session

mld last-listener-query-count

Use mld last-listener-query-count to set the MLD last member query count on an interface.

Use undo mld last-listener-query-count to restore the default.

Syntax

mld last-listener-query-count count

undo mld last-listener-query-count

Default

The MLD last listener query count equals the MLD querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the MLD last listener query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD last listener query count to 6 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld last-listener-query-count 6

Related commands

last-listener-query-count (MLD view)

mld last-listener-query-interval

Use mld last-listener-query-interval to set the MLD last listener query interval on an interface.

Use undo mld last-listener-query-interval to restore the default.

Syntax

mld last-listener-query-interval interval

undo mld last-listener-query-interval

Default

The MLD last listener query interval is 1 second.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD last listener query interval in the range of 1 to 25 seconds.

Usage guidelines

You can set the MLD last listener query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD last listener query interval to 6 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld last-listener-query-interval 6

Related commands

last-listener-query-interval (MLD view)

mld max-response-time

Use mld max-response-time to set the maximum response time for MLD general queries on an interface.

Use undo mld max-response-time to restore the default.

Syntax

mld max-response-time time

undo mld max-response-time

Default

The maximum response time for MLD general queries is 10 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

time: Specifies the maximum response time for MLD general queries, in the range of 1 to 3174 seconds.

Usage guidelines

You can set the maximum response time for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the maximum response time for MLD general queries to 25 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld max-response-time 25

Related commands

max-response-time (MLD view)

mld other-querier-present-timeout

Use mld other-querier-present-timeout to set the MLD other querier present timer on an interface.

Use undo mld other-querier-present-timeout to restore the default.

Syntax

mld other-querier-present-timeout time

undo mld other-querier-present-timeout

Default

The MLD other querier present timer is calculated by using the following formula:

[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD other querier present timer for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD other querier present timer to 125 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld other-querier-present-timeout 125

Related commands

other-querier-present-timeout (MLD view)

mld proxy enable

Use mld proxy enable to enable MLD proxying on an interface.

Use undo mld proxy enable to disable MLD proxying on an interface.

Syntax

mld proxy enable

undo mld proxy enable

Default

MLD proxying is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when IPv6 multicast routing is enabled on the public network or for the VPN instance to which the interface belongs.

Examples

# Enable IPv6 multicast routing on the public network, and enable MLD proxying on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] ipv6 multicast routing

[Sysname-mrib6] quit

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld proxy enable

Related commands

ipv6 multicast routing

mld proxy forwarding

Use mld proxy forwarding to enable IPv6 multicast forwarding on a non-querier interface.

Use undo mld proxy forwarding to disable IPv6 multicast forwarding on a non-querier interface.

Syntax

mld proxy forwarding

undo mld proxy forwarding

Default

IPv6 multicast forwarding is disabled for a non-querier interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Typically, only MLD queriers can forward IPv6 multicast traffic and non-queriers cannot. This prevents IPv6 multicast data from being repeatedly forwarded. If a router interface on the MLD proxy device failed the querier election, enable multicast forwarding capability on this interface to forward multicast data to attached receivers.

Examples

# Enable IPv6 multicast forwarding on Ten-GigabitEthernet 3/0/1 (non-querier interface).

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld proxy forwarding

mld query-interval

Use mld query-interval to set the MLD general query interval on an interface.

Use undo mld query-interval to restore the default.

Syntax

mld query-interval interval

undo mld query-interval

Default

The MLD general query interval is 125 seconds.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD general interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD general interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD general query interval to 60 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld query-interval 60

Related commands

query-interval (MLD view)

mld robust-count

Use mld robust-count to set the MLD querier's robustness variable on an interface.

Use undo mld robust-count to restore the default.

Syntax

mld robust-count count

undo mld robust-count

Default

The MLD querier's robustness variable is 2.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

The MLD querier's robustness variable defines the number of times to retransmit MLD queries if packet loss occurs. A higher robustness variable makes the MLD querier more robust, but it increases the timeout time for IPv6 multicast groups.

You can set the MLD querier's robustness variable for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD querier's robustness variable to 5 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld robust-count 5

Related commands

robust-count (MLD view)

mld startup-query-count

Use mld startup-query-count to set the MLD startup query count on an interface.

Use undo mld startup-query-count to restore the default.

Syntax

mld startup-query-count count

undo mld startup-query-count

Default

The MLD startup query count equals the MLD querier's robustness variable.

Views

Interface view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the MLD startup query count for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD startup query count to 5 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld startup-query-count 5

Related commands

startup-query-count (MLD view)

mld startup-query-interval

Use mld startup-query-interval to set the MLD startup query interval on an interface.

Use undo mld startup-query-interval to restore the default.

Syntax

mld startup-query-interval interval

undo mld startup-query-interval

Default

The MLD startup query interval equals one quarter of the MLD general query interval.

Views

Interface view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD startup query interval for an interface in interface view or globally for all interfaces in MLD view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the MLD startup query interval to 100 seconds on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld startup-query-interval 100

Related commands

startup-query-interval (MLD view)

mld static-group

Use mld static-group to configure an interface as a static group member of IPv6 multicast groups.

Use undo mld static-group to restore the default.

Syntax

mld static-group ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ]

undo mld static-group { all | ipv6-group-address [ inc-step-mask group-mask-length number group-number ] [ source ipv6-source-address ] [ dot1q vid vlan-list | dot1q vid vlan-id second-dot1q vlan-list ] }

Default

An interface is not a static member of IPv6 multicast groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-group-address: Specifies an IPv6 multicast group by its IPv6 address. The value range for this argument is FFxy::/16 (excluding FFx1::/16 and FFx2::/16), where "x" and "y" represent any hexadecimal numbers from 0 to F. In the batch configuration, this IPv6 multicast group address represents the start address.

inc-step-mask group-mask-length: Specifies the mask length step for IPv6 multicast groups in batch configuration. The mask length is an integer in the range of 9 to 128.

group-number: Specifies the number of IPv6 multicast groups in batch configuration, an integer in the range of 2 to 512.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command configures an interface as a static group member of the multicast groups with all IPv6 multicast source addresses.

dot1q vid vlan-list: Specifies a space-separated list of up to 10 outer VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a single-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

dot1q vid vlan-id second-dot1q vlan-list: Specifies the outer and inner VLAN IDs. The vlan-id argument specifies the outer VLAN ID in the range of 1 to 4094. The vlan-list argument specifies a space-separated list of up to 10 inner VLAN ID items. Each item specifies an inner VLAN ID or a range of inner VLAN IDs in the form of start-vlan-id to end-vlan-id. The value range for VLAN IDs is 1 to 4094. If you specify this keyword, the command configures an interface as a double-VLAN-tagged static group member for an IPv6 multicast group. This option is supported in Layer 3 Ethernet subinterface view and Layer 3 aggregate subinterface view.

all: Specifies all IPv6 multicast groups that the interface has statically joined.

Usage guidelines

For IPv6 multicast routing entries to be created, specify an IPv6 multicast source address if the specified IPv6 multicast group address is in the SSM group range.

When you configure an interface as a static group member of IPv6 multiple multicast groups or multicast sources and groups in batch, follow these restrictions and guidelines:

· IPv6 multicast group addresses in different batch configurations can overlap.

· The undo command does not support deleting one IPv6 multicast group from batch configuration. When you delete a batch configuration, make sure the setting in the undo command matches the batch configuration.

· If two batch configurations have the same parameter settings except the setting of the number group-number option, the new configuration takes effect.

For the same IPv6 multicast group, the non-VLAN-based, single-VLAN-based, or double-VLAN-based static member interface configurations are mutually exclusive.

When you configure a subinterface as a non-VLAN-based static member interface, do not configure the mld join-by-session or mld user-vlan-aggregation command on the subinterface. Otherwise, IPv6 static IPv6 multicast forwarding entries cannot be created.

When you configure a subinterface as a VLAN-based static member interface, you must also configure the mld join-by-session or mld user-vlan-aggregation command on the subinterface. An IPv6 static multicast forwarding entry can be created under either of the following conditions:

· When the mld join-by-session command is configured, users that belong to the specified VLANs log in.

· When the user-vlan-aggregation dot1q command is configured, the specified VLAN IDs are the same as or are included in the VLAN IDs specified in the mld static-group command.

Examples

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of IPv6 multicast group FF03::101.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld static-group ff03::101

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of IPv6 multicast source and group (2001::101, FF3E::202).

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld static-group ff3e::202 source 2001::101

# Enable per-session IPv6 multicast forwarding on Ten-GigabitEthernet 3/0/1.1. Configure the subinterface as a static group member of IPv6 multicast group FF03::101 for users with outer VLAN ID 10 and inner VLAN IDs in the range of 10 to 20.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] mld join-by-session

[Sysname-Ten-GigabitEthernet3/0/1.1] mld static-group ff03::101 dot1q vid 10 second-dot1q 10 to 20

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of IPv6 multicast groups FF03::101 and FF03::102 in batch. In the batch configuration, the start IPv6 multicast group address is FF03::101, the mask step is 128, and the number of IPv6 multicast groups is 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld static-group ff03::101 inc-step-mask 128 number 2

# Configure Ten-GigabitEthernet 3/0/1 as a static group member of IPv6 multicast sources and groups (2001::101, FF03::101) and (2001::101, FF03::102) in batch. In the batch configuration, the start IPv6 multicast group address is FF03::101, the IPv6 multicast source address is 2001::101, the mask length step is 128, and the number of IPv6 multicast groups is 2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld static-group ff03::101 inc-step-mask 128 number 2 source 2001::101

# Configure Ten-GigabitEthernet 3/0/1.1 as a VLAN-based static group member of IPv6 multicast groups FF03::101 and FF03::102 in batch. In the batch configuration, the start IPv6 multicast group address is FF03::101, the mask length step is 128, the number of IPv6 multicast groups is 2, and the VLAN ID is 10.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] mld static-group ff03::101 inc-step-mask 128 number 2 dot1q vid 10

mld user-vlan-aggregation

Use mld user-vlan-aggregation to configure VLAN tagging for IPv6 multicast packets.

Use undo mld user-vlan-aggregation to restore the default.

Syntax

mld user-vlan-aggregation { dynamic | dot1q vid vlan-id [ second-dot1q vlan-id ] }

undo mld user-vlan-aggregation

Default

The IPv6 multicast packets are not tagged with VLAN IDs.

Views

Layer 3 Ethernet subinterface view

Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Parameters

dynamic: Tags IPv6 multicast packets with the VLANs of online users. This keyword is used in dynamic tagging of IPv6 multicast packets.

dot1q vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094. This keyword is used in static tagging of IPv6 multicast packets.

second-dot1q vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094. This keyword is used in static tagging of IPv6 multicast packets.

Usage guidelines

The mld join-by-session and mld user-vlan-aggregation commands are mutually exclusive. You cannot configure them on the same device.

The dynamic tagging method is exclusive with the static tagging method for IPv6 multicast packets. The VLANs specified in the static tagging method must be VLANs allowed by the interface.

When users of an IPv6 multicast group are in different VLANs, the device processes an IPv6 multicast packet of this group as follows:

· In static tagging mode, the device tags the IPv6 multicast packet with the specified VLAN ID and sends the tagged multicast packet to the downstream device.

· In dynamic tagging mode, the device first duplicates the IPv6 multicast packet according to the number of VLANs of the multicast users. Then, it tags each IPv6 multicast packet with a user VLAN ID and sends the tagged IPv6 multicast packets to the downstream device.

Before you configure dynamic VLAN tagging or cancel the configuration, first log out all online users. Otherwise, the configuration or the cancellation does not take effect and an error occurs.

This command does not take effect on PPPoE users.

An MLD user access policy does not take effect for the static VLAN tagging mode.

Examples

# Configure IPv6 multicast packets to be tagged with outer VLAN ID 10 and inner VLAN ID 20 on Ten-GigabitEthernet 3/0/1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] vlan-type dot1q vid 10 second-dot1q 1 to 100

[Sysname-Ten-GigabitEthernet3/0/1.1] mld user-vlan-aggregation dot1q vid 10 second-dot1q 20

# Configure dynamic VLAN tagging for IPv6 multicast packets on Ten-GigabitEthernet 3/0/1.1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1.1

[Sysname-Ten-GigabitEthernet3/0/1.1] mld user-vlan-aggregation dynamic

mld version

Use mld version to specify an MLD version for an interface.

Use undo mld version to restore the default.

Syntax

mld version version-number

undo mld version

Default

The MLD version is 1.

Views

Interface view

Predefined user roles

network-admin

Parameters

version-number: Specifies an MLD version, 1 or 2.

Usage guidelines

CAUTION:

For MLD to operate correctly, specify the same MLD version for all routers on the same subnet.

Examples

# Specify MLD version 2 for Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mld version 2

other-querier-present-timeout (MLD view)

Use other-querier-present-timeout to set the MLD other querier present timer globally.

Use undo other-querier-present-timeout to restore the default.

Syntax

other-querier-present-timeout time

undo other-querier-present-timeout

Default

The MLD other querier present timer is calculated by using the following formula:

[ MLD general query interval ] × [ MLD querier's robustness variable ] + [ maximum response time for MLD general queries ] / 2.

Views

MLD view

Predefined user roles

network-admin

Parameters

time: Specifies an MLD other querier present timer in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD other querier present timer globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD other querier present timer to 125 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] other-querier-present-timeout 125

Related commands

mld other-querier-present-timeout

proxy multipath (MLD view)

Use proxy multipath to enable load splitting on the MLD proxy.

Use undo proxy multipath to disable load splitting on the MLD proxy.

Syntax

proxy multipath

undo proxy multipath

Default

The load splitting feature is disabled on the MLD proxy.

Views

MLD view

Predefined user roles

network-admin

Usage guidelines

Use this feature when the MLD proxy has multiple proxy interfaces. All proxy interfaces on the MLD proxy share IPv6 multicast traffic on a per-group basis. If you do not enable this feature, only the proxy interface with the highest IPv6 address forwards IPv6 multicast traffic.

Examples

# Enable load splitting on the MLD proxy device on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] proxy multipath

query-interval (MLD view)

Use query-interval to set the MLD general query interval globally.

Use undo query-interval to restore the default.

Syntax

query-interval interval

undo query-interval

Default

The MLD general query interval is 125 seconds.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD general query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD general query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD general query interval to 60 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] query-interval 60

Related commands

mld query-interval

reset mld attack-suppression entry

Use reset mld attack-suppression entry to remove MLD suppression entries.

Syntax

reset mld attack-suppression entry { all { per-interface | source-ip | source-mac } |slot slot-number{ per-interface { all | interface interface-type interface-number } | source-ip { all | [ interface interface-type interface-number | ip-address address ] * } | source-mac { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

all: Specifies all cards (the first all keyword), or specifies all interface-based, source IPv6-based, or source MAC-based MLD suppression entries (the last three all keywords).

slot slot-number: Specifies a card by its slot number.

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a source MAC address.

ip-address address: Specifies a source IPv6 address.

Examples

# Remove all interface-based MLD suppression entries.

<Sysname> reset mld attack-suppression entry per-interface all

# Remove all source IPv6-based MLD suppression entries.

<Sysname> reset mld attack-suppression entry source-ip all

# Remove all source MAC-based MLD suppression entries.

<Sysname> reset mld attack-suppression entry source-mac all

Related commands

display mld attack-suppression entry

reset mld attack-suppression statistics

Use reset mld attack-suppression statistics to clear MLD packet statistics about MLD suppression entries.

Syntax

reset mld attack-suppression statistics { all { per-interface | source-ip | source-mac } | slot slot-number { per-interface { all | interface interface-type interface-number } | source-ip { all | [ interface interface-type interface-number | ip-address address ] * } | source-mac { all | [ interface interface-type interface-number | mac-address address ] * } }

Views

User view

Predefined user roles

network-admin

Parameters

per-interface: Specifies interface-based MLD suppression.

source-ip: Specifies source IPv6-based MLD suppression.

source-mac: Specifies source MAC-based MLD suppression.

all: Specifies all cards (the first all keyword), or specifies all interface-based, source IPv6-based, or source MAC-based MLD suppression entries (the last three all keywords).

slot slot-number: Specifies a card by its slot number.

interface interface-type interface-number: Specifies an interface by its type and number.

mac-address address: Specifies a source MAC address.

ip-address address: Specifies a source IPv6 address.

Usage guidelines

This command clears statistics of the following fields in the output from the display mld attack-suppression entry verbose command: CPU receive, CPU drop, and Drv drop.

Examples

# Clear MLD packet statistics about all interface-based MLD suppression entries.

<Sysname> reset mld attack-suppression statistics per-interface all

# Clear MLD packet statistics about all source IPv6-based MLD suppression entries.

<Sysname> reset mld attack-suppression statistics source-ip all

# Clear MLD packet statistics about all source MAC-based MLD suppression entries.

<Sysname> reset mld attack-suppression statistics source-mac all

Related commands

display mld attack-suppression entry

reset mld group

Use reset mld group to clear dynamic MLD multicast group entries.

Syntax

reset mld [ vpn-instance vpn-instance-name ] group { all | interface interface-type interface-number { all | ipv6-group-address [ prefix-length ] [ ipv6-source-address [ prefix-length ] ] } }

Views

User view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears dynamic MLD multicast group entries on the public network.

all: Specifies all interfaces (the first all keyword), or all MLD multicast groups (the second all keyword).

interface-type interface-number: Specifies an interface by its type and number.

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address. If you do not specify an IPv6 multicast source, this command clears dynamic MLD multicast group entries for all IPv6 multicast sources.

prefix-length: Specifies an address prefix length. The default is 128. For a multicast source address, the value range for this argument is 0 to 128. For a multicast group address, the value range for this argument is 8 to 128.

Usage guidelines

CAUTION:

This command might interrupt the IPv6 multicast information transmission.

Examples

# Clear dynamic MLD multicast groups for all interfaces on the public network.

<Sysname> reset mld group all

# Clear all dynamic MLD multicast group entries for Ten-GigabitEthernet 3/0/1 on the public network.

<Sysname> reset mld group interface ten-gigabitethernet 3/0/1 all

# Clear the dynamic entry of the MLD multicast group FF03::101:10 for Ten-GigabitEthernet 3/0/1 on the public network.

<Sysname> reset mld group interface ten-gigabitethernet 3/0/1 ff03::101:10

Related commands

display mld group

robust-count (MLD view)

Use robust-count to set the MLD querier's robustness variable globally.

Use undo robust-count to restore the default.

Syntax

robust-count count

undo robust-count

Default

The MLD querier's robustness variable is 2.

Views

MLD view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the MLD querier's robustness variable globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD querier's robustness variable to 5 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] robust-count 5

Related commands

mld robust-count

snmp-agent trap enable mld

Use snmp-agent trap enable mld to enable SNMP notifications for MLD.

Use undo snmp-agent trap enable mld to disable SNMP notifications for MLD.

Syntax

snmp-agent trap enable mld [ join | leave ] *

undo snmp-agent trap enable mld [ join | leave ] *

Default

SNMP notifications for MLD are enabled.

Views

System view

Predefined user roles

network-admin

Parameters

join: Specifies notifications when an MLD report is received.

leave: Specifies notifications when an MLD leave message is received.

Usage guidelines

If you do not specify an optional keyword, this command enables or disables MLD to generate all SNMP notifications.

To report critical MLD events to an NMS, enable SNMP notifications for MLD. For MLD event notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.

Examples

# Disable all SNMP notifications for MLD.

<Sysname> system-view

[Sysname] undo snmp-agent trap enable mld

ssm-mapping (MLD view)

Use ssm-mapping to configure an MLD SSM mapping.

Use undo ssm-mapping to delete MLD SSM mappings.

Syntax

ssm-mapping ipv6-source-address ipv6-acl-number

undo ssm-mapping { ipv6-source-address | all }

Default

No MLD SSM mappings exist.

Views

MLD view

Predefined user roles

network-admin

Parameters

ipv6-source-address: Specifies an IPv6 multicast source by its IPv6 address.

ipv6-acl-number: Specifies an IPv6 basic ACL number in the range of 2000 to 2999. IPv6 multicast groups in MLD reports permitted by the ACL are associated with the IPv6 multicast source. If the ACL does not exist or does not have valid rules, no IPv6 multicast groups are associated with the IPv6 multicast source.

all: Specifies all MLD SSM mappings.

Usage guidelines

When you configure a rule in the IPv6 basic ACL, follow these restrictions and guidelines:

· An ACL rule containing the vpn-instance vpn-instance option does not take effect.

· The source source-address source-prefix option specifies an IPv6 multicast group address.

· Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.

Examples

# Configure an MLD SSM mapping with IPv6 multicast source 1::1 and IPv6 multicast group range FF3E::/64 on the public network.

<Sysname> system-view

[Sysname] acl ipv6 basic 2001

[Sysname-acl-ipv6-basic-2001] rule permit source ff3e:: 64

[Sysname-acl-ipv6-basic-2001] quit

[Sysname] mld

[Sysname-mld] ssm-mapping 1::1 2001

Related commands

display mld ssm-mapping

startup-query-count (MLD view)

Use startup-query-count to set the MLD startup query count globally.

Use undo startup-query-count to restore the default.

Syntax

startup-query-count count

undo startup-query-count

Default

The MLD startup query count equals the MLD querier's robustness variable.

Views

MLD view

Predefined user roles

network-admin

Parameters

Usage guidelines

You can set the MLD startup query count globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD startup query count to 5 on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] startup-query-count 5

Related commands

mld startup-query-count

startup-query-interval (MLD view)

Use startup-query-interval to set the MLD startup query interval globally.

Use undo startup-query-interval to restore the default.

Syntax

startup-query-interval interval

undo startup-query-interval

Default

The MLD startup query interval equals one quarter of the MLD general query interval.

Views

MLD view

Predefined user roles

network-admin

Parameters

interval: Specifies an MLD startup query interval in the range of 1 to 31744 seconds.

Usage guidelines

You can set the MLD startup query interval globally for all interfaces in MLD view or for an interface in interface view. For an interface, the interface-specific configuration takes priority over the global configuration.

Examples

# Set the global MLD startup query interval to 100 seconds on the public network.

<Sysname> system-view

[Sysname] mld

[Sysname-mld] startup-query-interval 100

Related commands

mld startup-query-interval

07-IP Multicast Command Reference

display mld group

display mld proxy group

display mld user-info

host-tracking enable (MLD view)

mld group-policy

mld join-by-session

mld user-vlan-aggregation

other-querier-present-timeout (MLD view)

snmp-agent trap enable mld

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us