(Optional) Configuring the Range of Multicast Groups That an Interface Can Join

Context

To limit the range of IPv6 multicast groups that an interface can join, configure ACL6 rules to filter received Multicast Listener Report messages so that the interface maintains group membership only in the allowed multicast groups.

Before specifying the range of multicast groups that an interface can join, configure an IPv6 access control list (ACL6) to define the range of multicast groups. For details about the ACL6 configuration, see ACL Configuration in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - Security.

Procedure

Run system-view
The system view is displayed.
Run interface interface-type interface-number
The interface view is displayed.
(Optional) On an Ethernet interface, run undo portswitch
The interface is switched to Layer 3 mode.

By default, an Ethernet interface works in Layer 2 mode.

Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support switching between Layer 2 and Layer 3 modes.
Run mld group-policy acl6-number [ 1 | 2 ]
The range of multicast groups that the interface can join is configured.

By default, an interface can join any multicast group.

When configuring an ACL6 rule for an interface, use the permit parameter in the rule command to allow hosts connected to the interface to join groups within the specified range. If no rule is configured in the ACL6, hosts connected to the interface cannot join any multicast groups.