(Optional) Setting the Range of MLD Groups that an Interface Can Join

To limit the range of multicast groups that an interface can join, configure an MLD group policy. Then, the interface can join only MLD groups that are permitted in this policy.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Configure a basic or an advanced ACL6 as needed.

    • Configure a basic ACL6.

      1. Run acl ipv6 [ number ] basic-acl6-number [ match-order { auto | config } ]

        A basic ACL6 is created, and the basic ACL6 view is displayed.

      2. Run rule [ rule-id ] [ name rule-name ] { deny | permit } [ fragment | source { source-ipv6-address prefix-length | source-ipv6-address/prefix-length | any } ] *

        Rules are configured for the basic ACL6.

    • Configure an advanced ACL6.
      1. Run acl ipv6 { name advance-acl6-name [ advance | [ advance ] number advance-acl6-number ] | [ number ] advance-acl6-number } [ match-order { config | auto } ]

        An advanced ACL6 is created, and the advanced ACL6 view is displayed.

      2. Run rule [ rule-id ] [ name rule-name ] { deny | permit } ipv6 [ destination { destination-ipv6-address prefix-length | destination-ipv6-address/prefix-length | any } | source { source-ipv6-address prefix-length | source-ipv6-address/prefix-length | any } ] *

        Rules are configured for the advanced ACL6.

    If a basic ACL6 is used, run the rule command and set the source parameter to a multicast group address.

    If an advanced ACL6 is used, run the rule command, set the source parameter to sources address that is allowed to send multicast data to multicast groups, and set the destination parameter to a multicast group address.

  3. Run interface interface-type interface-number

    The interface view is displayed.

  4. Run mld group-policy { acl6-number | acl6-name acl6-name } [ 1 | 2 ]

    An MLD group policy is configured to limit the range of multicast groups that the interface can join.

    • If a multicast group matches an ACL rule and the action is permit, the interface allows hosts to join this group.
    • If a multicast group matches an ACL rule and the action is deny, the interface does not allow hosts to join this group.
    • If a multicast group does not match any ACL rule, the interface does not allow hosts to join this group.
    • If a specified ACL does not exist or does not contain rules, the interface does not allow hosts to join any multicast group.

  5. Run commit

    The configuration is committed.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >