mld-snooping group-policy

Function

The mld-snooping group-policy command sets the range of multicast groups that hosts can join.

The undo mld-snooping group-policy command cancels the configuration.

By default, hosts can join any multicast groups.

Format

mld-snooping group-policy { acl6-number | acl6-name acl6-name } [ version number ]

undo mld-snooping group-policy

Parameters

Parameter	Description	Value
acl6-number	Specifies an ACL6 number.	The value is an integer ranging from 2000 to 3999.
acl6-name acl6-name	Specifies the name of a named ACL6.	The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).
version number	Specifies an MLD version.	The value can be 1 or 2.

Parameter

Description

Value

acl6-number

Specifies an ACL6 number.

The value is an integer ranging from 2000 to 3999.

acl6-name acl6-name

Specifies the name of a named ACL6.

The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).

version number

Specifies an MLD version.

The value can be 1 or 2.

Views

100ge sub-interface view, 100GE interface view, 10GE sub-interface view, 10GE interface view, 200GE sub-interface view, 25GE sub-interface view, 25GE interface view, 400GE sub-interface view, 400GE interface view, 40GE sub-interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, FlexE sub-interface view, FlexE interface view, GE optical interface view, GE sub-interface view, GE interface view, GE electrical interface view, Global VE sub-interface view, VE sub-interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l2mc	write

Usage Guidelines

Usage Scenario

To limit the range of multicast groups that hosts can join, run the mld-snooping group-policy command.

Prerequisites

MLD snooping has been enabled globally and in the VLAN or VSI view.

Rules have been configured in the specified ACL6.

Configuration Impact

After the mld-snooping group-policy command is run, hosts cannot join multicast groups out of the configured multicast group range. If the mld-snooping group-policy command is run more than once in the same view, the latest configuration overrides the previous one.

Precautions

If an MLD version is not set, the device will apply the configured group policy to all MLDv1 and MLDv2 messages. The ACL6 configured for the group policy must be a basic ACL6.

The

mld-snooping group-policy command fails to be run in a VLAN view in any of the following conditions:

A dot1q termination sub-interface is added to the VLAN.
The VLAN is a super or user VLAN.

Example

# Allow users in the VLAN 10 to join only the multicast group FF15::1.

<HUAWEI> system-view
[~HUAWEI] acl ipv6 2008
[*HUAWEI-acl6-basic-2008] rule permit source ff15::1 128
[*HUAWEI-acl6-basic-2008] quit
[*HUAWEI] mld-snooping enable
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] mld-snooping enable
[*HUAWEI-vlan10] mld-snooping group-policy 2008

# Allow users on the QinQ termination sub-interface GE 0/1/1.1 to join only the multicast group FF15::1.

<HUAWEI> system-view
[~HUAWEI] acl ipv6 2008
[*HUAWEI-acl6-basic-2008] rule permit source ff15::1 128
[*HUAWEI-acl6-basic-2008] quit
[*HUAWEI] mpls
[*HUAWEI-mpls] quit
[*HUAWEI] mpls l2vpn
[*HUAWEI-l2vpn] quit
[*HUAWEI] vsi vsi1
[*HUAWEI-vsi1] pwsignal ldp
[*HUAWEI-vsi1-ldp] vsi-id 1
[*HUAWEI-vsi1-ldp] quit
[*HUAWEI-vsi1] quit
[*HUAWEI] interface GigabitEthernet 0/1/1.1
[*HUAWEI-GigabitEthernet0/1/1.1] vlan-type  dot1q 10
[*HUAWEI-GigabitEthernet0/1/1.1] l2 binding vsi vsi1
[*HUAWEI-GigabitEthernet0/1/1.1] mld-snooping group-policy 2008