77
is found, the user is allowed to join the multicast group. Otherwise, the join report is dropped by the
access switch.
•
After receiving a done message from a host, the access switch matches the IPv6 multicast group
address and source address against the policies. If a match is found, the host is allowed to leave the
group. Otherwise, the done message is dropped by the access switch.
An IPv6 multicast user control policy is functionally similar to an IPv6 multicast group filter. A difference
lies in that a control policy can control both multicast joining and leaving of users based on
authentication and authorization, but a multicast group filter is configured on a port to control only
multicast joining but not leaving of users without authentication or authorization.
To configure a multicast user control policy
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a user profile and
enter its view.
user-profile
profile-name
N/A
3.
Configure a multicast user
control policy.
mld-snooping access-policy
acl6-number
No policy is configured by default.
That is, a host can join or leave a
valid multicast group at any time.
4.
Return to system view.
quit
N/A
5.
Enable the created user
profile.
user-profile
profile-name
enable
Not enabled by default.
For more information about the
user-profile
and
user-profile enable
commands, see
Security Command
Reference.
Enabling the MLD snooping host tracking function
With the MLD snooping host tracking function, the switch can record the information of the member hosts
that are receiving IPv6 multicast traffic, including the host IPv6 address, running duration, and timeout
time. You can monitor and manage the member hosts according to the recorded information.
Enabling the MLD snooping host tracking function globally
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter MLD-snooping view.
mld-snooping
N/A
3.
Enable the MLD snooping host
tracking function globally.
host-tracking
Disabled by default
Enabling the MLD snooping host tracking function in a VLAN
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter VLAN view.
vlan
vlan-id
N/A
3.
Enable the MLD snooping host
tracking function in the VLAN.
mld-snooping host-tracking
Disabled by default
