21
undo group-policy
[
vlan
vlan-list
]
Default
No IPv6 multicast group policies exist. Hosts can join any IPv6 multicast groups.
Views
MLD-snooping view
Predefined user roles
network-admin
Parameters
ipv6-acl-number
: Specifies an IPv6 basic or advanced ACL by its number in the range of 2000
to 3999. Hosts can join only IPv6 multicast groups that the ACL permits. If the ACL does not exist or
does not have valid rules, hosts cannot join IPv6 multicast groups.
vlan vlan-list
: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a
VLAN by its ID or a range of VLANs in the form of
start-vlan-id
to end-vlan-id
. The VLAN
ID is in the range of 1 to 4094. If you do not specify a VLAN, this command takes effect for all VLANs.
Usage guidelines
An IPv6 multicast group policy filters MLD reports to control the IPv6 multicast groups that hosts can
join.
This command does not take effect on static member ports, because static member ports do not
send MLD reports.
You can configure an IPv6 multicast group policy globally for all ports in MLD-snooping view or for a
port in interface view. For a port, the port-specific configuration takes priority over the global
configuration.
When you configure a rule in the IPv6 ACL, follow these restrictions and guidelines:
•
For the rule to take effect, do not specify the
vpn-instance
vpn-instance
option.
•
In a basic ACL, the
source source-address source-prefix
option specifies an IPv6
multicast group address.
•
In an advanced ACL, the
source
source-address source-prefix
option specifies an
IPv6 multicast source address. The
destination
dest-address dest-prefix
option
specifies an IPv6 multicast group address.
To match MLDv1 reports, set the
source source-address source-prefix
option to
0::0.
•
If the
vpn-instance
vpn-instance
option is specified in the rule, the rule does not take
effect. If the
vpn-instance
vpn-instance
option is not specified in the rule, the rule
applies to both VPN packets and non-VPN packets.
•
Among the other optional parameters, only the
fragment
keyword and the
time-range
time-range-name
option take effect.
You can configure different ACLs for all ports in different VLANs. If you configure multiple ACLs for all
ports in the same VLAN, the most recent configuration takes effect.
Examples
# Configure an IPv6 multicast group policy for VLAN 2 so that hosts in VLAN 2 can join only IPv6
multicast group FF03::101.
<Sysname> system-view
[Sysname] acl ipv6 basic 2000
[Sysname-acl-ipv6-basic-2000] rule permit source ff03::101 128
[Sysname-acl-ipv6-basic-2000] quit
Содержание SOHO IE4300
Страница 114: ...ii tftp client ipv6 source 41 tftp client source 41 tftp ipv6 42 tftp server acl 44 tftp server ipv6 acl 44...
Страница 285: ...i Contents Tcl commands 1 cli 1 tclquit 1 tclsh 2...
Страница 288: ...i Contents Python commands 1 exit 1 python 1 python filename 2...
Страница 291: ...i Contents Automatic configuration commands 1 autodeploy udisk enable 1...
Страница 323: ...25 Sysname Ten GigabitEthernet1 0 51 undo shutdown Related commands irf port...
Страница 396: ...i Contents Bulk interface configuration commands 1 display interface range 1 interface range 1 interface range name 3...
Страница 460: ...i Contents Port isolation commands 1 display port isolate group 1 port isolate enable 2 port isolate group 2...
Страница 465: ...ii stp vlan enable 55 vlan mapping modulo 55...
Страница 589: ...60 Examples Enable LLDP for automatic IP phone discovery Sysname system view Sysname voice vlan track lldp...
Страница 602: ...12 Related commands display mvrp statistics...
Страница 609: ...i Contents VLAN mapping commands 1 display vlan mapping 1 vlan mapping 2...
Страница 678: ...9 Related commands reset pppoe relay statistics...
Страница 846: ...i Contents Basic IP forwarding commands 1 display fib 1 ip forwarding table save 2...
Страница 1073: ...i Contents HTTP redirect commands 1 http redirect https port 1 http redirect ssl server policy 1...
Страница 1087: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1340: ...9 Sysname ipv6 route static default preference 120 Related commands display ipv6 routing table protocol...
Страница 1649: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1668: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1770: ...i Contents Time range commands 1 display time range 1 time range 1...
Страница 2026: ...34 Related commands display mac authentication...
Страница 2028: ...ii...
Страница 2143: ...i Contents User profile commands 1 display user profile 1 user profile 2...
Страница 2308: ...61 ipsec transform set...
Страница 2473: ...i Contents TCP attack prevention commands 1 tcp anti naptha enable 1 tcp check state interval 1 tcp state 2...
Страница 2531: ...i Contents SAVI commands 1 ipv6 savi down delay 1 ipv6 savi log enable 1 ipv6 savi strict 2...
Страница 2534: ...3 Sysname ipv6 savi strict Related commands ipv6 verify source...
Страница 2541: ...i Contents Crypto engine commands 1 display crypto engine 1 display crypto engine statistics 1 reset crypto engine statistics 3...
Страница 2545: ...i Contents FIPS commands 1 display crypto version 1 display fips status 1 fips mode enable 2 fips self test 4...
Страница 2791: ...14 Sysname track 1 Related commands delay display track...
Страница 2939: ...9 sntp authentication keyid sntp reliable authentication keyid...
Страница 2967: ...27 Related commands apply poe profile poe enable poe max power interface view poe priority...
Страница 3240: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 3263: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...