mdns whitelist source-ip

Function

The mdns whitelist source-ip command enables the trusted mDNS relay agent function and configures the IP address of the trusted mDNS relay agent.

The undo mdns whitelist source-ip command deletes the IP address of the trusted mDNS relay agent.

By default, the trusted mDNS relay agent function is disabled.

Format

mdns whitelist source-ip ip-address

undo mdns whitelist source-ip { all | ip-address }

Parameters

Parameter	Description	Value
ip-address	Specifies the IP address of the trusted mDNS relay agent.	The value is in dotted decimal notation.
all	Deletes IP addresses of all trusted mDNS relay agents.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Bogus mDNS relay agents may exist on the network and forge mDNS packets, threatening network security. To prevent this problem, run the mdns whitelist source-ip command on the device functioning as the mDNS gateway to enable the trusted mDNS relay agent function and configure the IP address of the trusted mDNS relay agent. The device then only processes unicast packets from the trusted mDNS relay agent, and discards unicast packets from untrusted mDNS relay agents. If the mDNS relay agent and mDNS gateway are on different network segments, you need to run the mdns whitelist source-ip ip-address command on the mDNS gateway to specify the IP address of the mDNS relay agent.

Example

# Configure the IP address 192.168.1.1 for the trusted mDNS relay agent.

<HUAWEI> system-view  
[HUAWEI] mdns whitelist source-ip 192.168.1.1