225
Parameters
acl6-number
: Specifies a basic or advanced IPv6 ACL number, in the range of 2000 to 3999. The source
address or address range specified in the advanced IPv6 ACL rule matches the IPv6 multicast source
address or addresses specified in MLDv2 reports, rather than the source address in the IPv6 packets. The
system assumes that an MLDv1 report or an MLDv2 IS_EX or TO_EX report that does not carry an IPv6
multicast source address carries an IPv6 multicast source address of 0::0.
vlan
vlan-list
: Specifies one or multiple VLANs. You can provide up to 10 VLAN lists. For each list, you
can specify an individual VLAN in the form of
vlan-id
, or a VLAN range in the form of
start-vlan-id
to
end-vlan-id
, where the end VLAN ID must be greater than the start VLAN ID. The value range of a VLAN
ID is 1 to 4094. If you do not specify any VLAN, the command applies to all VLANs. If you specify one
or multiple VLANs, the command applies to the specified VLANs only.
Description
Use
group-policy
to configure a global IPv6 multicast group filter, namely, to control the IPv6 multicast
groups that a host can join.
Use
undo group-policy
to remove the configured global IPv6 multicast group filter.
By default, no IPv6 multicast group filter is configured globally. Namely, any host can join any valid IPv6
multicast group.
If the specified IPv6 ACL does not exist or the ACL rule is null, all IPv6 multicast groups are filtered out.
You can configure different IPv6 ACL rules for each port in different VLANs. For a given VLAN, a newly
configured IPv6 ACL rule overrides the existing one.
Related commands:
mld-snooping group-policy
.
Examples
# Apply ACL 2000 as an IPv6 multicast group filter so that hosts in VLAN 2 can join FF03::101 only.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source ff03::101 16
[Sysname-acl6-basic-2000] quit
[Sysname] mld-snooping
[Sysname-mld-snooping] group-policy 2000 vlan 2
host-aging-time (MLD-snooping view)
Syntax
host-aging-time
interval
undo host-aging-time
View
MLD-snooping view
Default level
2: System level
Parameters
interval
: Specifies an aging timer for dynamic member ports in seconds. The value range is 200 to 1000.