The pim ipv6 join-policy command enables the system to filter join information in Join/Prune messages.
The undo pim ipv6 join-policy command restores the default setting.
By default, join information in Join/Prune message is not filtered.
pim ipv6 join-policy { asm basic-acl6-number | ssm advanced-acl6-number | advanced-acl6-number }
undo pim ipv6 join-policy [ asm | ssm ]
| Parameter | Description | Value |
|---|---|---|
| asm | Filters join information, with the group address in the ASM group address range. | - |
| basic-acl6-number | Specifies the basic ACL number. | The value is an integer that ranges from 2000 to 2999. |
| ssm | Filters join messages, with the group addresses within the SSM group address range and specified source address. | - |
| advanced-acl6-number | Specifies the advanced ACL number. | The value is an integer that ranges from 3000 to 3999. |
GE interface view, XGE interface view, MultiGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, VLANIF interface view, loopback interface view
Usage Scenario
To prevent unauthorized users from joining multicast groups on the PIM-SM (IPv6) network by filtering join information in Join/Prune messages, run the pim ipv6 join-policy command.
Prerequisites
IPv6 multicast routing has been enabled globally using the multicast ipv6 routing-enable command in the system view.
Configuration Impact
This command is valid for only IPv6 PIM-SM.
If asm is specified, you can set the multicast group address range of join information in the basic ACL6 view by specifying the source parameter in the rule (basic ACL6 view) command.
If ssm is specified, you can set the source address range and multicast group address range of join information in the advanced ACL6 view by respectively specifying the source parameter and destination parameter in the rule (advanced ACL6 view) command.
You must run the multicast ipv6 routing-enable command to enable the multicast function before using the command.
<HUAWEI> system-view [HUAWEI] acl ipv6 number 2001 [HUAWEI-acl6-basic-2001] rule permit source ff25::1 128 [HUAWEI-acl6-basic-2001] quit [HUAWEI] multicast ipv6 routing-enable [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] pim ipv6 join-policy asm 2001
<HUAWEI> system-view [HUAWEI] acl ipv6 number 2001 [HUAWEI-acl6-basic-2001] rule permit source ff25::1 128 [HUAWEI-acl6-basic-2001] quit [HUAWEI] multicast ipv6 routing-enable [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] undo portswitch [HUAWEI-GigabitEthernet0/0/1] pim ipv6 join-policy asm 2001