igmp-snooping group-policy (VSI view)

Function

The igmp-snooping group-policy command configures a multicast group policy in a VSI.

The undo igmp-snooping group-policy command deletes a multicast group policy from a VSI.

By default, no multicast group policy is available in a VSI, and hosts in the VSI can join any multicast group.

Format

igmp-snooping group-policy acl-number [ version version-number ]

undo igmp-snooping group-policy

Parameters

Parameter	Description	Value
acl-number	Specifies the number of the ACL that limits the multicast groups that hosts in a VSI can join.	The value is an integer that ranges from 2000 to 3999.
version version-number	Applies the multicast group policy only to the IGMP messages of the specified version.	The value is an integer that ranges from 1 to 3. 1: IGMPv1 2: IGMPv2 3: IGMPv3

Views

VSI view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A multicast group policy controls the multicast programs that users can order on a device with IGMP snooping enabled. In multicast applications, user hosts send IGMP Report messages to join a group when they order programs of this group. When the upstream Layer 2 device receives the Report messages, the switch matches the Report messages with the ACL referenced in the group policy configured in the VSI. If the messages match the ACL, the switch allows user hosts in the VSI to join the group and accepts the Report messages. If the messages do not match the ACL, the switch prevents the user hosts in the VSI from joining the group.

Prerequisites

IGMP snooping has been enabled for VPLS using the igmp-snooping over-vpls enable command in the system view.

Precautions

The configuration takes effect only when IGMP snooping is enabled in the VSI using the igmp-snooping enable (VSI view) command.
If no IGMP version is specified for a multicast policy, the switch applies the policy to all the received IGMP messages.
The igmp-snooping group-policy (VSI view) command applies a multicast group policy to a VSI. You can also apply a multicast group to the sites connected to an AC-side interface by using either of the following methods:
- If the AC-side interface bound to a VSI instance is a VLANIF interface, configure a multicast group policy on the Layer 2 interface in the corresponding VLAN. For details, see the igmp-snooping group-policy (interface view) commands in "VLAN-based IGMP Snooping Configuration Commands."
- If the AC-side interface bound to a VSI is a physical interface that has been switched to Layer 3 mode using the undo portswitch command, run the igmp-snooping group-policy acl-number [ version version-number ] vsi vsi-name command on this interface.
If multicast group policies are configured for the same VSI in the VSI view and interface view, the system first uses the policy configured in the interface to filter the groups that hosts in the VSI can join, and then use the group configured in the VSI view.

Example

# Allow hosts in the VSI company1 to join group 225.1.1.123.

<HUAWEI> system-view
[HUAWEI] acl number 2000
[HUAWEI-acl-basic-2000] rule permit source 225.1.1.123 0
[HUAWEI-acl-basic-2000] quit
[HUAWEI] igmp-snooping enable
[HUAWEI] igmp-snooping over-vpls enable
[HUAWEI] vsi company1
[HUAWEI-vsi-company1] igmp-snooping enable
[HUAWEI-vsi-company1] igmp-snooping group-policy 2000