igmp-snooping group-policy

Function

The igmp-snooping group-policy command limits the range of multicast groups that hosts can join.

The undo igmp-snooping group-policy command cancels the configuration.

By default, hosts can join any multicast group.

Format

igmp-snooping group-policy { acl-number | acl-name acl-name } [ version GrpAclVer ]

undo igmp-snooping group-policy

Parameters

Parameter	Description	Value
acl-number	Specifies the number of an ACL.	The value is an integer ranging from 2000 to 3999.
acl-name acl-name	Specifies the name of a named ACL.	The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).
version GrpAclVer	Specifies the version number of IGMP packets.	The value is an integer that is 1, 2, or 3.

Parameter

Description

Value

acl-number

Specifies the number of an ACL.

The value is an integer ranging from 2000 to 3999.

acl-name acl-name

Specifies the name of a named ACL.

The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).

version GrpAclVer

Specifies the version number of IGMP packets.

The value is an integer that is 1, 2, or 3.

Views

VSI-AUTO view, VSI-BD view, VSI-DEFAULT view, VSI-STATIC view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l2mc	write

Usage Guidelines

Usage Scenario

The igmp-snooping group-policy command is used to limit the range of multicast groups that user hosts can join.

Prerequisites

IGMP snooping has been enabled globally and in a VLAN.

Rules have been configured for a specified basic ACL.

Configuration Impact

After the igmp-snooping group-policy command is run, user hosts cannot join multicast groups beyond the configured multicast group range. If the igmp-snooping group-policy command is run more than once, all configurations take effect.

Precautions

If no IGMP version is specified, the device will apply the configured group policy to all IGMP messages (IGMPv1/IGMPv2/IGMPv3 messages) and the ACL configured for the group policy must be a basic ACL.

Example

# Allow the user hosts matched the ACL a1 to join only multicast group 225.0.0.1 on an Ethernet sub interface view.

<HUAWEI> system-view
[~HUAWEI] acl name a1
[*HUAWEI-acl4-advance-a1] rule 1 permit ip source any destination 225.0.0.1 0
[*HUAWEI-acl4-advance-a1] quit
[*HUAWEI] interface GigabitEthernet0/1/1.1
[*HUAWEI-GigabitEthernet 0/1/1.1] igmp-snooping group-policy acl-name a1

# Allow the user hosts connected to GE 0/1/1.1 to join only multicast group 225.1.1.123.

<HUAWEI> system-view
[~HUAWEI] mpls
[*HUAWEI-mpls] quit
[*HUAWEI] mpls l2vpn
[*HUAWEI-l2vpn] quit
[*HUAWEI] vsi vpna
[*HUAWEI-vsi-vpna] pwsignal ldp
[*HUAWEI-vsi-vpna-ldp] vsi-id 1
[*HUAWEI-vsi-vpna-ldp] quit
[*HUAWEI-vsi-vpna] quit
[*HUAWEI] acl number 2008
[*HUAWEI-acl-basic-2008] rule permit source 225.1.1.123 0
[*HUAWEI-acl-basic-2008] rule deny source any
[*HUAWEI-acl-basic-2008] quit
[*HUAWEI] interface GigabitEthernet 0/1/1.1
[*HUAWEI-GigabitEthernet0/1/1.1] l2 binding vsi vpna
[*HUAWEI-GigabitEthernet0/1/1.1] igmp-snooping group-policy 2008