mld-snooping group-policy vlan

Function

The mld-snooping group-policy vlan command sets the range of multicast groups that hosts in VLANs can join.

The undo mld-snooping group-policy command cancels the configuration.

By default, hosts can join any multicast groups.

Format

mld-snooping group-policy { acl6-number | acl6-name acl6-name } [ version number ] vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo mld-snooping group-policy [ { acl6-number | acl6-name acl6-name } [ version number ] ] [ vlan { all | { vlan-id1 [ to vlan-id2 ] } &<1-10> } ]

Parameters

Parameter	Description	Value
acl6-number	Specifies the number of the ACL.	The value is an integer that ranges from 2000 to 3999.
acl6-name acl6-name	Specifies the name of a named ACL6.	The value is a string of 1 to 64 case-sensitive characters, spaces not supported. The value must start with a letter (a to z or A to Z).
version number	Specifies an MLD version.	The value can be 1 or 2.
vlan-id1	Specifies the start VLAN ID.	The value is an integer that ranges from 1 to 4094.
to vlan-id2	Specifies the VLAN ID of a sub-interface for dot1q VLAN tag termination. The value must be greater than that of vlan1.	The value is an integer that ranges from 1 to 4094.
all	Indicates all VLANs.	-

Views

Layer 2 100GE interface view, Layer 2 10GE interface view, 25GE-L2 view, 400GE-L2 view, Layer 2 40GE interface view, Layer 2 50GE interface view, Eth-Trunk interface view, Layer 2 GE interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l2mc	write

Usage Guidelines

Usage Scenario

To limit the range of multicast groups that hosts can join, run the mld-snooping group-policy command.

Prerequisites

MLD snooping has been enabled globally and in the VLAN view.

Rules have been configured in the specified ACL6.

Configuration Impact

After the mld-snooping group-policy command is run, hosts cannot join multicast groups out of the configured multicast group range. If the mld-snooping group-policy command is run more than once in the same view, the latest configuration overrides the previous one.

Precautions

If an MLD version is not set, the device will apply the configured group policy to all MLDv1 and MLDv2 messages. The ACL6 configured for the group policy must be a basic ACL6.

The

mld-snooping group-policy command fails to be run in a VLAN view in any of the following conditions:

A dot1q termination sub-interface is added to the VLAN.
The VLAN is a super or user VLAN.

Example

# Configure the sub-interface for dot1q VLAN tag termination to allow hosts in VLAN 100 to join only multicast group FF15::1.

<HUAWEI> system-view
[~HUAWEI] acl ipv6 2008
[*HUAWEI-acl6-basic-2008] rule permit source ff15::1 128
[*HUAWEI-acl6-basic-2008] quit
[*HUAWEI] vlan 100
[*HUAWEI-valn100] quit
[*HUAWEI] interface GigabitEthernet 0/1/1.1
[*HUAWEI-GigabitEthernet0/1/1.1] vlan-type  dot1q 10
[*HUAWEI-GigabitEthernet0/1/1.1] mld-snooping group-policy 2008 vlan 100