No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

CloudEngine 8800, 7800, 6800, and 5800 V200R002C50

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
IGMP Snooping Configuration Commands

IGMP Snooping Configuration Commands

NOTE:

Only the CE6850HI, CE6850U-HI, CE6851HI, CE6855HI, CE6856HI, CE6860EI, CE6870EI, CE7850EI, CE7855EI, CE8850EI, and CE8860EI switches support IGMP snooping in BDs.

assign forward nvo3 multicast protocol enable

Function

The assign forward nvo3 multicast protocol enable command enables protocol packet broadcast in a bridge domain (BD).

The undo assign forward nvo3 multicast protocol enable command disables protocol packet broadcast in a BD.

By default, protocol packet broadcast is disabled in a BD.

NOTE:

Only the CE6850HI, CE6850U-HI, CE6851HI, CE6855HI, CE6856HI, CE6860EI, CE7850EI, CE7855EI, CE8850EI, and CE8860EI support this command.

Format

assign forward nvo3 multicast protocol enable

undo assign forward nvo3 multicast protocol enable

Parameters

None

Views

BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Because the device forwards multicast data packets in a BD based on MAC addresses, do not use a group address on the network if the group address maps to the same multicast MAC address as a multicast IP address reserved for a protocol. Otherwise, the protocol that uses the multicast IP address cannot run normally. For example, Open Shortest Path First (OSPF) uses 224.0.0.5 to send protocol packets. This multicast IP address maps to multicast MAC address 01-00-5E-00-00-05. If multicast data packets are forwarded based on MAC addresses and use multicast IP address 225.0.0.5 (also mapping to 01-00-5E-00-00-05), the OSPF protocol cannot run normally.

To ensure normal operations of protocols that use reserved group addresses to send protocol packets in a BD, run the assign forward nvo3 multicast protocol enable command to enable protocol packet broadcast.

Example

# Enable protocol packet broadcast in BD 10.

<HUAWEI> system-view
[~HUAWEI] bridge-domain 10
[*HUAWEI-bd10] assign forward nvo3 multicast protocol enable

display igmp snooping

Function

The display igmp snooping command displays the IGMP snooping running parameters.

Format

display igmp snooping [ vlan [ vlan-id ] | bridge-domain [ bd-id ] ]

Parameters

Parameter

Description

Value

vlan [ vlan-id ]

Displays the IGMP snooping running parameters in a specified VLAN. If vlan-id is not specified, the system displays the IGMP running parameters in all VLANs with IGMP snooping configured.

The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain [ bd-id ]

Displays the IGMP snooping running parameters in a specified BD. If bd-id is not specified, the system displays the IGMP running parameters in all BDs with IGMP snooping configured.

The value of bd-id is an integer that ranges from 1 to 16777215.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can use this command to view the IGMP snooping running parameters.

To view the IGMP snooping configuration, run the display igmp snooping configuration command.

Precautions

This command can display the IGMP snooping running parameters in a VLAN or BD only when the VLAN or BD is in Up state (at least one interface in the VLAN or BD is in Up state) and has IGMP snooping enabled. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

Example

# Display the IGMP snooping running parameters.

<HUAWEI> display igmp snooping
  IGMP Snooping Information for VLAN 3
     IGMP Snooping is Enabled
     IGMP Version is Set to default 2     
     IGMP Query Interval is Set to default 60     
     IGMP Max Response Interval is Set to default 10     
     IGMP Robustness is Set to default 2     
     IGMP Last Member Query Interval is Set to default 1     
     IGMP Router Port Aging Interval is Set to 180s or holdtime in hello 
     IGMP Filter Group-Policy is Set to default : Permit All 
     IGMP Filter IP-Source-Policy is Set to default : Permit All
     IGMP Filter Query IP-Source-Policy is Set to default : Permit All     
     IGMP Prompt Leave Disable     
     IGMP Router Alert is Not Required     
     IGMP Send Router Alert Enable     
     IGMP Router Port Learning Enable 
     IGMP Proxy Disable
     IGMP Proxy Router Protocol Action is Set to default: Terminate All
     IGMP Report Suppress Disable     
     IGMP Querier Disable
     IGMP Snooping querier-election Disable
     IGMP ASM-SSM
     IGMP SSM-Mapping Disable     
     IGMP Suppress-dynamic-join Disable
  IGMP Snooping Information for bridge-domain 20
     IGMP Snooping is Enabled
     IGMP Version is Set to default 2     
     IGMP Query Interval is Set to default 60     
     IGMP Max Response Interval is Set to default 10     
     IGMP Robustness is Set to default 2     
     IGMP Last Member Query Interval is Set to default 1     
     IGMP Router Port Aging Interval is Set to 180s or holdtime in hello 
     IGMP Filter Group-Policy is Set to default : Permit All 
     IGMP Filter IP-Source-Policy is Set to default : Permit All
     IGMP Filter Query IP-Source-Policy is Set to default : Permit All     
     IGMP Prompt Leave Disable     
     IGMP Router Alert is Not Required     
     IGMP Send Router Alert Enable     
     IGMP Router Port Learning Enable 
     IGMP Proxy Disable
     IGMP Proxy Router Protocol Action is Set to default: Terminate All 
     IGMP Report Suppress Disable
     IGMP Querier Disable
     IGMP Snooping querier-election Disable
     IGMP ASM-SSM
     IGMP SSM-Mapping Disable     
     IGMP Suppress-dynamic-join Disable
Table 10-82  Description of the display igmp snooping command output

Item

Description

IGMP Snooping Information for VLAN 3

The following information displayed is the IGMP snooping running parameters in VLAN 3.

IGMP Snooping Information for bridge-domain 20

The following information displayed is the IGMP snooping running parameters in bridge-domain 20.

IGMP Snooping is Enabled

IGMP snooping is enabled.

By default, IGMP snooping is disabled. IGMP snooping can be enabled using the igmp snooping enable (VLAN or BD view) command.

IGMP Version is Set to default 2

Version of IGMP messages that can be processed.

In this example, the default version 2 is displayed, indicating that both IGMPv1 and IGMPv2 messages can be processed. This parameter is configured using the igmp snooping version command.

IGMP Query Interval is Set to default 60

Interval at which IGMP General Query messages are sent.

In this example, the default value (60 seconds) is displayed. This parameter is configured using the igmp snooping query interval command.

IGMP Max Response Interval is Set to default 10

Maximum response time for IGMP General Query messages.

In this example, the default value (10 seconds) is displayed. This parameter is configured using the igmp snooping query max-response-time command.

IGMP Robustness is Set to default 2

IGMP robustness variable,

In this example, the default value 2 is displayed. This parameter is configured using the igmp snooping robust-count command.

IGMP Last Member Query Interval is Set to default 1

Interval at which IGMP Group-Specific Query messages are sent.

In this example, the default value (1 second) is displayed. This parameter is configured using the igmp snooping query last-member-interval command.

IGMP Router Port Aging Interval is Set to 180s or holdtime in hello

Aging time of a router port.

In this example, the default value (180 seconds or the holdtime value contained in PIM Hello messages) is displayed. This parameter is configured using the igmp snooping router-aging-time command.

IGMP Filter Group-Policy is Set to default : Permit All

Multicast group policy.

In this example, the default configuration is displayed. That is, no policy is configured. A multicast group policy is configured using the igmp snooping group-policy (VLAN or BD view) command.

IGMP Filter IP-Source-Policy is Set to default : Permit All

Policy for filtering Report messages.

In this example, the default configuration is displayed. That is, no policy is configured. This means that any user can enjoy multicast services. A policy for filtering Report messages is configured using the igmp snooping ip-source-policy command.

IGMP Filter Query IP-Source-Policy is Set to default : Permit All

Policy for filtering Query messages.

In this example, the default configuration is displayed. That is, no policy is configured. A policy for filtering Query messages is configured using the igmp snooping query ip-source-policy command.

IGMP Prompt Leave Disable

The prompt leave function is disabled for interfaces (default configuration).

The prompt leave function can be enabled using the igmp snooping prompt-leave command.

IGMP Router Alert is Not Required

The switch does not require that the IGMP messages received contain the Router-Alert option in the IP header (default configuration).

The switch can be configured to discard IGMP messages without the Router-Alert option using the igmp snooping require-router-alert command.

IGMP Send Router Alert Enable

The switch sends the IGMP messages with the Router-Alert option (default configuration).

The switch can be configured to send IGMP messages with the Router-Alert option using the undo igmp snooping send-router-alert disable command.

IGMP Router Port Learning Enable

Router port learning is enabled (default configuration).

Router port learning can be enabled using the undo igmp snooping router-learning disable command.

IGMP Proxy Disable

IGMP snooping proxy is disabled (default configuration).

IGMP snooping proxy can be enabled using the igmp snooping proxy command.

IGMP Proxy Router Protocol Action is Set to default: Terminate All

IGMP snooping proxy terminates all IGMP protocol packets.

This is the default action performed for IGMP protocol packets after IGMP snooping proxy is enabled. IGMP snooping proxy can be configured to transparently transmit IGMP protocol packets using the igmp snooping proxy router-protocol-pass command.

IGMP Report Suppress Disable

IGMP message suppression is disabled (default configuration).

IGMP message suppression can be enabled using the igmp snooping report-suppress command.

IGMP Querier Disable

IGMP snooping querier is disabled (default configuration).

IGMP snooping querier can be enabled using the igmp snooping querier enable command.

IGMP Snooping querier-election Disable

The querier election is disabled (default configuration).

IGMP Snooping querier election can be enabled using the igmp snooping querier-election command.

IGMP ASM-SSM

The range of multicast group addresses is asm-ssm (default configuration). That is, the switch learns memberships of multicast groups in both the ASM range and SSM range.

Multicast group model is configured using the igmp snooping command.

IGMP SSM-Mapping Disable

IGMP snooping SSM mapping is disabled (default configuration).

IGMP snooping SSM mapping can be enabled using the igmp snooping ssm-mapping enable command.

IGMP Suppress-dynamic-join Disable

Report and Leave messages received can be forwarded to the upstream multicast device with static multicast groups configured (default configuration).

This function can be disabled using the igmp snooping static-group suppress-dynamic-join command.

display igmp snooping configuration

Function

The display igmp snooping configuration command displays the IGMP snooping configuration.

Format

display igmp snooping [ vlan [ vlan-id ] | bridge-domain [ bd-id ] ] configuration

Parameters

Parameter Description Value
vlan [ vlan-id ] Displays the IGMP snooping configuration in a specified VLAN. If this parameter is not specified, the system displays the IGMP snooping configuration in all VLANs. The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain [ bd-id ]

Displays the IGMP snooping configuration in a specified BD. If this parameter is not specified, the system displays the IGMP snooping configuration in all BDs.

The value of bd-id is an integer that ranges from 1 to 16777215.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command displays only the IGMP snooping configuration so that you can check whether the IGMP snooping configuration made in the system is proper.

To check all IGMP snooping running parameters, run the display igmp snooping command.

Prerequisites

The IGMP snooping configuration in a VLAN or BD can be displayed as long as IGMP snooping parameters have been configured in the VLAN or BD, no matter whether the VLAN or BD contains interfaces in Up state.

Global IGMP snooping must be enabled using the igmp snooping enable (system view) command before any IGMP snooping configuration is performed.

Example

# Display the IGMP snooping configuration in all VLANs.

<HUAWEI> display igmp snooping configuration
 IGMP Snooping Configuration for VLAN 7
     igmp snooping enable
     igmp snooping version 3
     igmp snooping ssm-policy 2000
     igmp snooping ssm-mapping enable
     igmp snooping ssm-mapping 232.1.1.0 255.255.255.0 10.1.2.1
  IGMP Snooping Configuration for bridge-domain 20
     igmp snooping enable
Table 10-83  Description of the display igmp snooping configuration command output

Item

Description

IGMP Snooping Configuration for VLAN 7

The following information displayed is the IGMP snooping configuration in VLAN 7.

IGMP Snooping Configuration for bridge-domain 20

The following information displayed is the IGMP snooping configuration in bridge-domain 20.

igmp snooping enable

IGMP snooping is enabled.

By default, IGMP snooping is disabled. IGMP snooping can be enabled using the igmp snooping enable (VLAN or BD view) command.

igmp snooping version 3

Messages of IGMPv1, IGMPv2, and IGMPv3 can be processed.

By default, IGMPv1 and IGMPv2 messages can be processed. This parameter is configured using the igmp snooping version command.

igmp snooping ssm-policy 2000

The SSM mapping policy that references ACL 2000 is configured.

By default, no SSM group policy is applied. An SSM group policy is configured using the igmp snooping ssm-policy command.

igmp snooping ssm-mapping enable

IGMP snooping SSM mapping is enabled.

By default, IGMP snooping SSM mapping is disabled. IGMP snooping SSM mapping can be enabled using the igmp snooping ssm-mapping enable command.

igmp snooping ssm-mapping 232.1.1.0 255.255.255.0 10.1.2.1

In the SSM mapping policy, multicast group addresses 232.1.1.0 through 232.1.1.255 are mapped to multicast source 10.1.2.1.

By default, group-source mapping is configured. A group-source mapping is configured using the igmp snooping ssm-mapping command.

display igmp snooping invalid-packet

Function

The display igmp snooping invalid-packet command displays statistics and information about invalid IGMP Snooping packets.

Format

display igmp snooping invalid-packet { vlan [ vlan-id ] | bridge-domain [ bd-id ] } [ message-type { leave | query | report | hello } ]

display igmp snooping invalid-packet [ packet-number ] verbose

Parameters

Parameter Description Value
vlan [ vlan-id ] Displays statistics about invalid IGMP Snooping packets received from the specified VLAN:
  • If vlan-id is not specified, statistics about invalid IGMP Snooping packets received from all VLANs are displayed.

  • If vlan-id is specified, statistics about invalid IGMP Snooping packets received from the specified VLAN are displayed.

The value is an integer ranging from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.
bridge-domain [ bd-id ] Displays statistics about invalid IGMP Snooping packets received from the specified BD:
  • If bd-id is not specified, statistics about invalid IGMP Snooping packets received from all BDs are displayed.

  • If bd-id is specified, statistics about invalid IGMP Snooping packets received from the specified BD are displayed.

The value of bd-id is an integer that ranges from 1 to 1677721532768.
message-type Displays statistics about the specified type of invalid packet. -
leave Displays statistics about invalid Leave packets. -
query Displays statistics about invalid Query packets. -
report Displays statistics about invalid Report packets. -
hello Displays statistics about invalid Hello packets. -
packet-number Displays information about the specified number of invalid IGMP Snooping packets latest received. The value is an integer ranging from 1 to 100. By default, information about all the stored invalid IGMP Snooping packets is displayed.
verbose Displays detailed information about invalid packets. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If IGMP Snooping entries cannot be created on a multicast network, you can run the display igmp snooping invalid-packet command to check whether this fault is caused by invalid IGMP Snooping packets received. If the command output shows that the number of invalid IGMP Snooping packets is not 0, run the display igmp snooping invalid-packet [ packet-number ] verbose command to check detailed information about the invalid IGMP Snooping packets for fault location.

If the multicast layer-2 invalid-packet igmp snooping max-count max-number has been configured and the max-number value differs from the packet-number value in the display igmp snooping invalid-packet [ packet-number ] verbose command, detailed information about invalid IGMP Snooping packets is displayed based on the smaller one of the two values.

Example

# Display statistics about invalid IGMP Snooping packets received by VLAN 10.

<HUAWEI> display igmp snooping invalid-packet vlan 10
                                                                                
             Statistics of invalid packets for VLAN 10:                      
--------------------------------------------------------------------  
IGMP Snooping General invalid packet:
Fault Length             : 0           Invalid IGMP Type        : 0           
Bad Checksum             : 0           Fault RouterAlert        : 0  
         
IGMP Snooping Query invalid packet:
Invalid Multicast Source : 0          Invalid Multicast Group   : 0 

IGMP Snooping Leave invalid packet:
Invalid IGMP Version     : 0          Invalid Multicast Group   : 0 

IGMP Snooping Report invalid packet:
Invalid IGMP Version     : 0          Invalid Multicast Group   : 0
Invalid Multicast Source : 0

PIM Hello invalid packet:
Invalid PIM Version      : 0          Bad Checksum              : 0 
Fault Length             : 0          Bad GenID Length          : 0
Bad Holdtime Length      : 0          Bad LanPruneDelay Length  : 0
Bad DrPriority Length    : 0
--------------------------------------------------------------------

# Display statistics about invalid IGMP Snooping packets received by BD 20.

<HUAWEI> display igmp snooping invalid-packet bridge-domain 20

           Statistics of invalid packets for BD 20:
--------------------------------------------------------------------
IGMP Snooping General invalid packet:
Fault Length             : 0           Invalid IGMP Type        : 0           
Bad Checksum             : 0           Fault RouterAlert        : 0           
    
IGMP Snooping Query invalid packet:
Invalid Multicast Source : 0           Invalid Multicast Group  : 0           

IGMP Snooping Leave invalid packet:
Invalid IGMP Version     : 0           Invalid Multicast Group  : 0           

IGMP Snooping Report invalid packet:
Invalid IGMP Version     : 0           Invalid Multicast Group  : 0           
Invalid Multicast Source : 0           

PIM Hello invalid packet:
Invalid PIM Version      : 0           Bad Checksum             : 0           
Fault Length             : 0           Bad GenID Length         : 0           
Bad Holdtime Length      : 0           Bad LanPruneDelay Length : 0           
Bad DrPriority Length    : 0           
--------------------------------------------------------------------
Table 10-84  Description of the display igmp snooping invalid-packet command output

Item

Description

Statistics of invalid packets for VLAN 10

The following information displayed is the statistics about invalid IGMP Snooping packets received by VLAN 10.

Statistics of invalid packets for BD 20

The following information displayed is the statistics about invalid IGMP Snooping packets received by BD 20.

IGMP Snooping General invalid packet

Statistics about general invalid IGMP Snooping packets

Fault Length

Number of packets with invalid packet length

Invalid IGMP Type

Number of packets with invalid IGMP type

Bad Checksum

Number of packets with invalid checksum

Fault RouterAlert

Number of packets with error Router-Alert fields

IGMP Snooping Query invalid packet

Statistics about invalid IGMP Snooping Query packets

Invalid Multicast Source

Number of packets with invalid multicast source addresses

Invalid Multicast Group

Number of packets with invalid multicast group addresses

IGMP Snooping Leave invalid packet

Statistics about invalid IGMP Snooping Leave packets

Invalid IGMP Version

Number of packets with invalid IGMP version information

IGMP Snooping Report invalid packet

Statistics about invalid IGMP Snooping Report packets

PIM Hello invalid packet

Statistics about invalid PIM Hello packets

Invalid PIM Version

Number of packets with invalid PIM version information

Bad GenID Length

Number of packets with invalid Generation ID length

Bad Holdtime Length

Number of packets with invalid Holdtime length

Bad LanPruneDelay Length

Number of packets with invalid LanPruneDelay length

Bad DrPriority Length

Number of packets with invalid DrPriority length

# Display detailed information about the latest two invalid IGMP Snooping packets received.

<HUAWEI> display igmp snooping invalid-packet 2 verbose
       Detailed information of invalid packets
-----------------------------------------------------
Packet information (Index 1):
-----------------------------------------------------
Interface           :  Vlanif100
Vlanid              :  10
Time                :  2010-6-1 20:04:35 UTC-08:00
Message Length      :  26
Invalid Type        :  Invalid Multicast Source
Source Address      :  10.0.3.11
0000: 25 00 96 77 01 00 00 20 e1 01 01 01 01 00 e0 00
0010: 00 00 80 00 00 64 00 00 00 00
-----------------------------------------------------
Table 10-85  Description of the display igmp snooping invalid-packet packet-number verbose command output

Item

Description

Detailed information of invalid packets

Detailed information about invalid packets

Packet information (Index 1)

Indexes of invalid packets arranged in the reverse order as they are received

Interface

Interface from which invalid packets are received

Vlanid

VLAN from which invalid packets are received

Time

Format of the time when the invalid packets are received:
  • YYYY-MM-DD HH:MM:SS

  • YYYY-MM-DD HH:MM:SS UTC±HH:MM DST

  • YYYY-MM-DD HH:MM:SS UTC±HH:MM

  • YYYY-MM-DD HH:MM:SS DST

The UTC±HH:MM information can be set using the clock timezone command, and the DST information can be set using the clockdaylight-saving-time command.

Message Length

Length of invalid packets

Invalid Type

Type of invalid packets

Source Address

Source address of invalid packets

0000: 25 00 96 77 01 00 00 20 e1 01 01 01 01 00 e0 00

0010: 00 00 80 00 00 64 00 00 00 00

Contents of invalid packets

display igmp snooping group

Function

The display igmp snooping group command displays information about dynamic multicast groups learned through IGMP snooping.

Format

display igmp snooping group interface interface-type interface-number [ vlan vlan-id | pe-vid pe-vid ] [ [ source-address source-address ] group-address group-address ]

display igmp snooping group { interface interface-type interface-number [ pe-vid pe-vid [ ce-vid ce-vid ] ] | peer peer-ip } bridge-domain bd-id [ [ source-address source-address ] group-address group-address ]

Parameters

Parameter Description Value
interface interface-type interface-number Displays information about dynamic multicast groups on a specified interface. -
vlan vlan-id Displays information about dynamic multicast groups in a specified VLAN. The value is an integer ranging from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.
pe-vid pe-vid Displays information about dynamic multicast groups of a Layer 2 sub-interface or Layer 3 sub-interface that has a specified outer VLAN ID.
NOTE:

The CE6810LI does not support this parameter.

The value is an integer ranging from 1 to 4094.
ce-vid ce-vid Displays information about dynamic multicast groups of a Layer 2 sub-interface that has a specified inner VLAN ID.
NOTE:

The CE6810LI does not support this parameter.

The value is an integer ranging from 1 to 4094.
peer peer-ip Displays information about dynamic multicast groups of a remote VXLAN tunnel endpoint (VTEP) that has a specified IP address.
NOTE:

The CE6810LI does not support this parameter.

The value is in dotted decimal notation.
bridge-domain bd-id Displays information about dynamic multicast groups of a specified BD.
NOTE:

The CE6810LI does not support this parameter.

The value is an integer that ranges from 1 to 16777215.

source-address source-address Displays information about dynamic multicast groups matching a specified multicast source address. The value is in dotted decimal notation.
group-address group-address Displays information about the dynamic multicast group with a specified address.

If you specify a multicast group address and a multicast source address, the system displays information about the (S, G) entry.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

Administrators can use this command to check information about multicast groups learned on interfaces of a device.

Precautions

This command displays information only when the local device has learned multicast groups through IGMP snooping.

Example

# Display information about dynamic multicast groups learned in VLAN 100 on 10GE1/0/1.

<HUAWEI> display igmp snooping group interface 10ge 1/0/1 vlan 100
Group 232.0.0.1 information: 
 Uptime: 00h02m05s
 Expire: 00h00m05s
 Group timer: Not exist 
 Retran count: 0 
 Last member query: No 
 Router filter mode: Include 
 Compat mode: V3 
 V1 host timer: Not exist 
 V2 host timer: Not exist 
 Source last member query: No 
 Last member query timer: Not exist 
  Source 10.1.1.1 info: 
   Create time: 00:00:11 
   Expire time: 00:01:59 
   Source timer: Exist 
   Retran count: 0 
   Source last member query: No

# Display information about dynamic multicast groups learned in BD 20 on Layer 2 sub-interface 10GE1/0/1.1.

<HUAWEI> display igmp snooping group interface 10ge 1/0/1.1 pe-vid 20 bridge-domain 20 group-address 225.0.15.160
Group 225.0.15.160 information:
 Uptime: 00h11m39s
 Expire: 00h01m49s
 Group timer: Exist
 Retran count: 0
 Last member query: No
 Router filter mode: Exclude
 Compat mode: V2
 V1 host timer: Not exist
 V2 host timer: Not exist
 Source last member query: No
 Last member query timer: Not exist
Table 10-86  Description of the display igmp snooping group command output

Item

Description

Group

IP address of a multicast group.

Uptime

Time that elapsed since a multicast group was created.

Expire

Aging time of a multicast group.

Group timer

Whether a multicast group has a timer.

Retran count

Number of Group-Specific Query retransmission attempts.

Last member query

Whether a multicast group has members.

Router filter mode

Multicast group filtering mode.

Compat mode

IGMP compatibility mode of a multicast group.

V1 host timer

Whether the IGMPv1 host timer exists.

V2 host timer

Whether the IGMPv2 host timer exists.

Source last member query

Group-and-Source-Specific Query.

Last member query timer

Whether the Group-Specific Query timer exists.

Source 10.1.1.1 info

Multicast source IP address. The following describes information about this multicast source IP address.

Create time

Time that elapsed since a multicast source was created.

Expire time

Aging timer of the multicast source.

Source timer

Whether a multicast source has a timer.

Retran count

Number of Group-and-Source-Specific Queries.

Source last member query

Group-and-Source-Specific Query.

display igmp snooping port-info

Function

The display igmp snooping port-info command displays information about multicast group member ports.

Format

display igmp snooping port-info [ vlan vlan-id [ group-address group-address ] ] [ verbose ]

display igmp snooping port-info bridge-domain bd-id [ group-address group-address ] [ verbose ]

Parameters

Parameter

Description

Value

vlan vlan-id

Displays information about multicast group member ports in a specified VLAN. If this parameter is not specified, the system displays multicast group member ports in all VLANs.

The value is an integer ranging from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain bd-id

Displays information about multicast group member ports in a specified BD. If this parameter is not specified, the system displays multicast group member ports in all BDs.

The value is an integer that ranges from 1 to 16777215.

group-address group-address

Displays information about member ports of a specified multicast group. If this parameter is not specified, the system displays member ports of all multicast groups.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.

verbose

Displays detailed information about multicast group member ports. If this parameter is not specified, the system displays the summary of multicast group member ports.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

When the switch with IGMP snooping enabled receives IGMP messages exchanged between hosts and a Layer 3 device, the switch maintains a Layer 2 multicast forwarding table based on information in the messages. The display igmp snooping port-info command shows member ports in the Layer 2 multicast forwarding table. According to the command output, you can know which downlink ports of the switch have multicast users connected, and control multicast services conveniently.

Precautions

This command can display information about multicast group member ports in a VLAN or BD only when IGMP snooping has been enabled in the VLAN or BD using the igmp snooping enable (VLAN or BD view) command, and at least one interface in the VLAN or BD is in Up state.

Example

# Display information about multicast group member ports in VLAN 7.

<HUAWEI> display igmp snooping port-info vlan 7
 -------------------------------------------------------------------------------
  Flag: S:Static     D:Dynamic     M:Ssm-mapping                                
        A:Active     P:Protocol    T:Trill                               
                     (Source, Group)  Port                                  Flag
 -------------------------------------------------------------------------------
 VLAN 7,  1 Entry(s)                                                            
                      (*, 226.2.2.6)                                        P-- 
                                      10GE1/0/1                             S-- 
                                                        1 port(s) include       
 -------------------------------------------------------------------------------

# Display information about member ports of multicast group 225.0.15.158 in BD 20.

<HUAWEI> display igmp snooping port-info bridge-domain 20 group-address 225.0.15.158
 -----------------------------------------------------------------------------------
  Flag: S:Static     D:Dynamic     M:Ssm-mapping
        A:Active     P:Protocol    T:Trill       
                     (Source, Group)  Port                                      Flag
 -----------------------------------------------------------------------------------
 Bridge-domain 20, 1 Entry(s)
                   (*, 225.0.15.158)                                            PA-
                                      10GE1/0/13.20(PE:20)                      -D-
                                                        1 port(s) include
 -----------------------------------------------------------------------------------
Table 10-87  Description of the display igmp snooping port-info command output

Item

Description

(Source, Group)

(S, G) entry, specifying the multicast source and multicast group. Multicast data is sent from multicast source S to group G. If S is displayed as *, multicast data may be sent from any multicast source. If S is displayed as an IP address, multicast data is sent from this IP address.

Port

Member port.

Flag

Entry type, which can be:
  • P: entries generated based on protocol packets or statically configured
  • A: entries triggered by multicast data traffic
  • T: entries generated after Trill configuration
Type of a member port, which can be:
  • S: static member port, which is configured using the igmp snooping static-group command
  • D: dynamic member port learned through IGMP snooping
  • M: member port established through SSM mapping

VLAN 7, 1 Entry(s)

VLAN ID and the number of entries in the VLAN.

Bridge-domain 20, 1 Entry(s)

BD ID and the number of entries in the BD.

# Display detailed information about all multicast group member ports.

<HUAWEI> display igmp snooping port-info verbose               
The port information of Group 226.2.2.6 on VLAN 14:                                                                                  
  Time of this group has been up : 01:55:38                                                                                         
                                                                                                                                    
  The port information of (*, 226.2.2.6):                                                                                           
    Time of this source has been up : 01:55:38                                                                                      
    Port Table on this source(*):                                                                                                   
    Source flags: IGMP                                                                                                              
    List of ports in include mode :                                                                                                 
      No.1                                                                                                                          
        Port name : 10GE1/0/1                                                                                                       
        Time of this port has been up as a host-port : 01:55:37                                                                     
        Remain time of port expire as dynamic host-port : --                                                                        
        Host-port flags : Static                                                                                                    
    There are 1 port(s) in include mode.                                                                                            

# Display detailed information about member ports of multicast group 225.0.15.158 in BD 20.

<HUAWEI> display igmp snooping port-info bridge-domain 20 group-address 225.0.15.158 verbose               
The port information of Group 225.0.15.158 on Bridge-domain 20:
  Time of this group has been up : 00:17:40

  The port information of (*, 225.0.15.158):
    Time of this source has been up : 00:17:40
    Port Table on this source(*):
    Source flags: IGMP Active
    List of ports in include mode :
      No.1
        Port name : 10GE3/0/13.20(PE:20)
        Time of this port has been up as a host-port : 00:08:32
        Remain time of port expire as dynamic host-port : --
        Host-port flags : Dynamic
    There are 1 port(s) in include mode.
Table 10-88  Description of the display igmp snooping port-info verbose command output

Item

Description

The port information of Group 226.2.2.6 on VLAN 14

Information about member ports of multicast group 226.2.2.6 in VLAN 14.

The port information of Group 225.0.15.158 on Bridge-domain 20

Information about member ports of multicast group 225.0.15.158 in BD 20.

Time of this group has been up

Time that elapsed since the multicast group was set up.

The port information of (*, 226.2.2.6)

Information about member ports of a specified (S, G).

Time of this source has been up

Time that elapsed since the multicast source was set up.

Port Table on this source

List of member ports of the specified multicast source.

Source flags: IGMP

Source flags.

List of ports in include mode

List of member ports in include mode.

No.1

First member port.

Port name

Type and number of the first member port.

Time of this port has been up as a host-port

Time that elapsed since the first member port was bound to a source or (S, G).

Remain time of port expire as dynamic host-port

Aging time of the first member port. This field displays "NA" for a static member port.

The aging time of a dynamic member port is calculated using the following formula: Aging time = Robustness variable x General query interval + Maximum response time for General Query messages. The robustness variable is configured using the igmp snooping robust-count command. The general query interval is configured using the igmp snooping query interval command. The maximum response time for General Query messages is configured using the igmp snooping query max-response-time command.

Host-port flags

Type of a member port, which can be:
  • Static: static member
  • Dynamic: dynamic member port learned through IGMP snooping
  • Mapping: member port established through SSM mapping

There are 1 port(s) in include mode.

A member port in include mode.

display igmp snooping qinq-port-info

Function

The display igmp snooping qinq-port-info command displays entries on a specified Layer 3 sub-interface for Dot1q VLAN tag termination.

NOTE:

The CE6810LI does not support this command.

Format

display igmp snooping qinq-port-info interface interface-type interface-number.subinterface-number [ group-address group-address ]

Parameters

Parameter Description Value
interface interface-type interface-number.subinterface-number Specifies multicast entries on a specified Dot1q termination Layer 3 sub-interface. interface-type interface-number.subinterface-number specifies the type and number of the interface. -
group-address group-address Displays entries about a specified multicast group on the sub-interface. If this parameter is not specified, the system displays entries about all multicast groups on the sub-interface. The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To display the entries on a specified Dot1q termination Layer 3 sub-interface, run the display igmp snooping qinq-port-info command.

Example

# Display entries about all multicast groups on the Layer 3 sub-interface for Dot1q VLAN tag termination 10GE 1/0/1.1.
<HUAWEI> display igmp snooping qinq-port-info interface 10ge 1/0/1.1
 Interface 10GE1/0/1.1, 2 Group(s)
 (Source,Group)                            PE-VID/CE-VID LiveTime           Flag
 -------------------------------------------------------------------------------
 (*,226.0.0.1)                             1/0           00:00:23           -D-
 (*,226.0.0.2)                             1/0           00:00:01           -D-
# Display the entry about the multicast group whose IP address is 226.0.0.1 on the Layer 3 sub-interface for Dot1q VLAN tag termination 10GE 1/0/1.1.
<HUAWEI> display igmp snooping qinq-port-info interface 10ge 1/0/1.1 group-address 226.0.0.1
 Interface 10GE1/0/1.1, 1 Group(s)
 (Source,Group)                            PE-VID/CE-VID LiveTime           Flag
 -------------------------------------------------------------------------------
 (*,226.0.0.1)                             1/0           00:00:23           -D-
Table 10-89  Description of the display igmp snooping qinq-port-info command output

Item

Description

Group(s)

Indicates the number of multicast groups.

(Source,Group)

(S, G) entry, specifying the multicast source and multicast group. Multicast data is sent from multicast source S to group G. If S is displayed as *, multicast data may be sent from any multicast source. If S is displayed as an IP address, multicast data is sent from this IP address.

PE-VID/CE-VID

Indicates VLAN information about a multicast group member interface.

PE-VID indicates the outer tag and CE-VID indicates the inner tag.

LiveTime

Indicates the live time of a multicast group member interface.

Flag

Indicates the entry type. Currently, the following entry types are provided:
  • D: indicates a dynamically learnt entry.

  • S: indicates a manually configured entry.

    When "S" is displayed in the Flag field, spaces are displayed in the LiveTime field.

  • M: indicates an SSM mapping entry.

  • SD: indicates that both static and dynamic entries exist on the Layer 3 sub-interface.

display igmp snooping querier

Function

The display igmp snooping querier command displays whether the IGMP snooping querier function is enabled in a VLAN or BD.

Format

display igmp snooping querier { vlan [ vlan-id ] | bridge-domain [ bd-id ] }

Parameters

Parameter

Description

Value

vlan [ vlan-id ]

Displays whether the IGMP snooping querier function is enabled in a specified VLAN. If vlan-id is not specified, the system displays status of the IGMP snooping querier function in all VLANs.

The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain [ bd-id ]

Displays whether the IGMP snooping querier function is enabled in a specified BD. If bd-id is not specified, the system displays status of the IGMP snooping querier function in all BDs.

The value of bd-id is an integer that ranges from 1 to 16777215.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can configure an IGMP snooping querier on the switch to send IGMP Query messages instead of the upstream Layer 3 device in the following situations:
  • The Layer 3 device cannot send IGMP messages for some reasons, for example, IGMP is not enabled on the Layer 3 device.
  • The Layer 3 device uses static multicast forwarding entries and does not need to learn multicast forwarding entries.
You can use the display igmp snooping querier command to check in which VLANs or BDs the IGMP snooping querier function is enabled.

Precautions

The querier function is disabled in a VLAN or BD by default after IGMP snooping is enabled in the VLAN or BD. To enable the querier function, run the igmp snooping querier enable command.

Example

# Display the status of the IGMP snooping querier function in all VLANs.

<HUAWEI> display igmp snooping querier vlan
 VLAN                            Querier-state Querier                                                                              
---------------------------------------------------------------                                                                     
    5                            Enable        192.168.0.1                                                                          
    7                            Disable       --                                                                                   
   17                            Disable       --                                                                                   
---------------------------------------------------------------                                                                     
 total entry 3                                                                                                                      

# Display the status of the IGMP snooping querier function in all BDs.

<HUAWEI> display igmp snooping querier bridge-domain
BD                              Querier-state Querier
---------------------------------------------------------------
1                               Disable       --
20                              Enable        192.168.0.1
30                              Enable        192.168.0.1
---------------------------------------------------------------
 total entry 3
Table 10-90  Description of the display igmp snooping querier command output

Item

Description

VLAN

VLAN ID.

BD

BD ID.

Querier-state

Querier status in a VLAN or BD.
  • Disable: The IGMP snooping querier function is disabled in the VLAN or BD.
  • Enable: The IGMP snooping querier function is enabled in the VLAN or BD.

Querier

IP address of the querier.

total entry 3

Number of VLANs or BDs in which the querier status is displayed.

display igmp snooping router-port

Function

The display igmp snooping router-port command displays information about the router ports in a specified VLAN or BD, including static and dynamic router ports.

Format

display igmp snooping router-port { vlan vlan-id | bridge-domain bd-id }

Parameters

Parameter

Description

Value

vlan vlan-id

Displays information about the router ports in a specified VLAN.

The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain bd-id

Displays information about the router ports in a specified BD.

The value is an integer that ranges from 1 to 16777215.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

A router port connects the switch to an upstream Layer 3 multicast device. The router port can be statically configured or dynamically generated after the interface receives an IGMP Query message or a PIM Hello message.

You can run the display igmp snooping router-port command to view the type, name, lifetime, and aging time of a router port.

Precautions

This command can display information about router ports in a VLAN or BD only when IGMP snooping has been enabled in the VLAN or BD using the igmp snooping enable (VLAN or BD view) command, and at least one interface in the VLAN or BD is in Up state.

Example

# Display information about router ports in VLAN 2.

<HUAWEI> display igmp snooping router-port vlan 2
 Port Name                            UpTime        Expires       Flags
 --------------------------------------------------------------------------
 VLAN 2, 1 router-port(s)
 10GE1/0/1                            23h56m56s     --            STATIC

# Display information about router ports in BD 20.

<HUAWEI> display igmp snooping router-port bridge-domain 20
 Port Name                            UpTime        Expires       Flags
 --------------------------------------------------------------------------
Bridge-domain 20, 1 router-port(s)
vxlan-peer(2.2.2.2)                   23h56m56s     --            STATIC
Table 10-91  Description of the display igmp snooping router-port command output

Item

Description

Port Name

Type and number of a router port.

UpTime

Time that elapsed since the interface became a router port.

Expires

Aging time of the router port.
  • The aging time is displayed for a dynamic router port. This parameter is configured using the igmp snooping router-aging-time command.
  • For a static router port, "--" is displayed, indicating that the static router does not age.

Flags

Type of the router port, which can be:

display igmp snooping statistics

Function

The display igmp snooping statistics commands displays IGMP snooping statistics, including numbers of received IGMP packets and PIM Hello packets, sent Query packets, and Layer 2 events in a specified VLAN or VSI.

Format

display igmp snooping statistics vlan [ vlan-id ]

Parameters

Parameter Description Value
vlan vlan-id Specifies a VLAN. The value is an integer that ranges from 1 to 4094.

Views

Diagnostic view

Default Level

3: Management level

Task Name and Operations

Task Name Operations
snpg read

Usage Guidelines

If vlan-id is specified, only IGMP snooping statistics in the specified VLAN is displayed and the number of Layer 2 events occurring in the VLAN is not displayed.

Example

# Display IGMP snooping statistics in VLAN 10.

<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display igmp snooping statistics vlan 10
IGMP Snooping Packets Counter
   Statistics for VLAN 10                                                        
     Receive V1 Report:          0                                              
     Receive V2 Report:          0                                              
     Receive V3 Report:          0                                              
     Receive V1 Query:           0                                              
     Receive V2 Query:           0                                              
     Receive V3 Query:           0                                              
     Receive Leave:              0                                              
     Receive Pim Hello:          0                                              
     Send Query (S=0):           1                                              
     Send Query (S!=0):          0                                              
     Proxy Send General Query:               0                                  
     Proxy Send Group-Specific Query:        0                                  
     Proxy Send Group-Source-Specific Query: 0                                  
Table 10-92  Description of the display igmp snooping statistics command output

Item

Description

Receive V1 Report

Number of received IGMPv1 Report messages

Receive V2 Report

Number of received IGMPv2 Report messages

Receive V3 Report

Number of received IGMPv3 Report messages

Receive V1 Query

Number of received IGMPv1 Query messages

Receive V2 Query

Number of received IGMPv2 Query messages

Receive V3 Query

Number of received IGMPv3 Query messages

Receive Leave

Number of received IGMP Leave messages

Receive Pim Hello

Number of received PIM Hello messages

Send Query(S=0)

Number of sent IGMP Query messages with the source address 0.0.0.0

Send Query(S!=0)

Number of sent IGMP Query messages with the source address which is not 0.0.0.0

Proxy Send General Query

Number of General Query messages sent by the Proxy

Proxy Send Group-Specific Query

Number of Group-Specific Query messages sent by the Proxy

Proxy Send Group-Source-Specific Query

Number of Group-Source-Specific Query messages sent by the Proxy

display multicast layer-2 forwarding-mode

Function

The display multicast layer-2 forwarding-mode command displays the Layer 2 multicast forwarding mode in VLANs.

NOTE:

The CE6810LI does not support this command and uses the MAC address-based forwarding mode for multicast data in a VLAN.

Format

display multicast layer-2 forwarding-mode vlan [ vlan-id ]

Parameters

Parameter Description Value
vlan [ vlan-id ]

Displays the Layer 2 multicast forwarding mode in a specified VLAN. If vlan-id is not specified, the system displays the Layer 2 multicast forwarding mode in all VLANs.

The value is an integer ranging from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

After Layer 2 multicast is enabled on the switch, the switch maintains a Layer 2 multicast forwarding table. When receiving a multicast packet, the switch searches the Layer 2 multicast forwarding table for the outbound interface based on the multicast address of the packet. The switch determines the outbound interface based on the IP multicast address or IP multicast MAC address, depending on the configured Layer 2 multicast forwarding mode.

To check which Layer 2 multicast forwarding mode is used, run the display multicast layer-2 forwarding-mode command.

Precautions

You can change the forwarding mode using the multicast layer-2 forwarding-mode command.

If the VLAN is configured as a TRILL CE VLAN and enabled with IGMP snooping, the multicast packets in the VLAN are forwarded based on MAC addresses, and the forwarding mode cannot be changed.

Example

# Display the Layer 2 multicast forwarding mode in all VLANs.

<HUAWEI> display multicast layer-2 forwarding-mode vlan
VLAN                            Forwarding-mode
-----------------------------------------------
   3                            IP              
   5                            IP              
   6                            MAC             
Table 10-93  Description of the display multicast layer-2 forwarding-mode vlan command output

Item

Description

VLAN

VLAN ID.

Forwarding-mode

Layer 2 multicast forwarding mode.

display multicast layer-2 ip fib

Function

The display multicast layer-2 ip fib command displays the Layer 2 multicast forwarding table.

Format

display multicast layer-2 ip fib [ vlan vlan-id [ [ source source-address ] group group-address ] | bridge-domain bd-id [ group group-address ] ]

Parameters

Parameter

Description

Value

vlan vlan-id

Displays Layer 2 multicast forwarding entries in a specified VLAN.

The value is an integer that ranges from 1 to 4094.

bridge-domain bd-id

Displays Layer 2 multicast forwarding entries in a specified BD.

The value is an integer that ranges from 1 to 16777215.

source source-address

Displays the forwarding entries of a specified multicast source.

The value is in dotted decimal notation.

group group-address

Displays multicast forwarding entries of a specified multicast group.

The value ranges from 224.0.1.0 to 239.255.255.255 in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can use the display multicast layer-2 ip fib command to view the Layer 2 multicast forwarding table. This command displays statically configured and dynamically learned multicast forwarding entries.

Each entry contains the multicast source, multicast group, list of outbound interfaces, and VLAN or BD ID of multicast data packets. When the IGMP snooping version is set to v3 in a VLAN or when the IGMP snooping version is set to v2 or v1 but SSM mapping is configured, the display multicast layer-2 ip fib command displays (S, G) entries.

Precautions

This command displays multicast forwarding entries in a VLAN or BD only when at least one interface in the VLAN or BD is in Up state.

Example

# Display multicast forwarding entries.

<HUAWEI> display multicast layer-2 ip fib
-------------------------------------------------------------------------------------
Forwarding Mode: IP
VLAN  Total                      (Source,Group)  Interface                
-------------------------------------------------------------------------------------
200    2
                                 (*, 225.0.0.1)  10GE1/0/1                   
                                 (*, 226.0.0.1)  10GE1/0/1                   
-------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------
Forwarding Mode: MAC
VLAN  Total                          Group(MAC)  Interface                
-------------------------------------------------------------------------------------
100    1
                                 0100-5e00-0001  10GE1/0/1                
-------------------------------------------------------------------------------------
Table 10-94  Description of the display multicast layer-2 ip fib command output

Item

Description

Forwarding Mode

Multicast forwarding mode in the VLAN, which can be:
  • IP
  • MAC
The multicast forwarding mode is configured using the multicast layer-2 forwarding-mode command.

VLAN

VLAN ID of the forwarding entries.

Total

Total number of multicast forwarding entries.

(Source, Group)

(S, G) entry, specifying the multicast source and multicast group.

Group(MAC)

Multicast group.

Interface

Outbound interface.

group

Function

The group command configures the mapping between a group address and a multicast source address in an SSM mapping policy.

The undo group command deletes the mapping between a group address and a multicast source address in an SSM mapping policy.

By default, no mapping is configured in an SSM mapping policy.

NOTE:

The CE6810LI does not support this command.

Format

group group-address { group-mask-length | group-mask } source source-address

undo group { group-address { group-mask-length | group-mask } [ source source-address ] | all }

Parameters

Parameter

Description

Value

group-address

Specifies the IP address of a multicast group.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.

group-mask-length

Specifies the mask length of the group address.

The value is an integer that ranges from 4 to 32.

group-mask

Specifies the mask of a group address.

The value is in dotted decimal notation.

source source-address

Specifies the IP address of a multicast source.

The value is in dotted decimal notation.

all

Deletes all SSM mappings.

-

Views

SSM mapping policy view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The source-specific multicast (SSM) mapping mechanism converts IGMPv1 and IGMPv2 Report messages into messages with (S, G) information. This mechanism enables hosts that do not support IGMPv3 to work with SSM. To implement the SSM mapping function, enable SSM mapping on a Layer 2 device connected to multicast users, and configure mappings between group addresses and source addresses. When the Layer 2 device receives IGMPv1 and IGMPv2 Report messages, it checks group addresses in the Report messages. If the group addresses are within the SSM group address range, the Layer 2 device converts the IGMPv1 and IGMPv2 Report messages into IGMPv3 Report messages with (S, G) information.

Precautions

This command has the same function as the igmp snooping ssm-mapping command used in the VLAN view. The difference between the two commands is as follows:
  • The mapping configured in the SSM mapping policy can be applied to multiple VLANs.
  • The mapping configured in a VLAN takes effect only in the current VLAN.
To apply the same mapping to multiple VLANs, you are advised to configure an SSM mapping policy.

Example

# In the SSM mapping policy policy1, map group addresses 228.1.1.1 through 228.1.1.255 to source address 10.1.1.1.

<HUAWEI> system-view
[~HUAWEI] ssm-mapping policy policy1
[*HUAWEI-ssm-map-policy1] group 228.1.1.0 24 source 10.1.1.1

igmp snooping

Function

The igmp snooping command configures whether the switch learns memberships of multicast groups in the ASM range or SSM range in a VLAN or BD.

The undo igmp snooping command restores the default range of multicast group addresses in a VLAN or BD.

The default range of multicast group addresses in a VLAN or BD is asm-ssm. That is, the switch learns memberships of multicast groups in both the ASM range and SSM range.

NOTE:

The CE6810LI does not support this command.

Format

igmp snooping { asm-only | ssm-only | asm-ssm }

undo igmp snooping { asm-only | ssm-only }

Parameters

Parameter Description Value
asm-only Learns memberships of only multicast groups in the ASM range. If this keyword is specified, the switch learns group memberships from only IGMP messages without the (*, G) information and drops other IGMP messages. -
ssm-only Learns memberships of only multicast groups in the SSM range. If this keyword is specified, the switch learns group memberships from only IGMP messages with the (S, G) information and drops other IGMP messages. -
asm-ssm Learns memberships of groups in the ASM range and SSM range. If this keyword is specified, the switch learns memberships of all groups. -

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Two multicast models are available: the Any-Source Multicast (ASM) model and Source-Specific Multicast (SSM) model. In the ASM model, packets do not carry multicast source information. In the SSM model, packets carry multicast source information. Packets using different models are identified by their multicast group addresses. To configure the switch to learn group memberships only in the ASM or SSM model in a VLAN or BD, run the igmp snooping asm-only or igmp snooping ssm-only command.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

Example

# Configure the switch to learn memberships of only multicast groups in the ASM range in VLAN 2.
<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable
[*HUAWEI-vlan2] igmp snooping asm-only

igmp snooping enable (system view)

Function

The igmp snooping enable command enables IGMP snooping globally or in specified VLANs.

The undo igmp snooping enable command disables IGMP snooping globally or in specified VLANs.

By default, IGMP snooping is disabled globally and in a VLAN.

Format

igmp snooping enable [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ]

undo igmp snooping enable [ vlan { all | { vlan-id1 [ to vlan-id2 ] } &<1-10> } ]

Parameters

Parameter Description Value
vlan vlan-id1 [ to vlan-id2 ]

Enables IGMP snooping in a VLAN or in multiple VLANs.

vlan-id1 and vlan-id2 identify a range of VLAN IDs.

If VLAN IDs are specified, IGMP snooping is enabled in the specified VLANs. If no VLAN ID is specified, IGMP snooping is enabled globally.

The values of vlan-id1 and vlan-id2 are integers that range from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.
all

Disables IGMP snooping in all VLANs.

-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

IGMP snooping runs on a Layer 2 device between a Layer 3 multicast device and hosts. By listening on the multicast protocol packets exchanged between the Layer 3 device and hosts, IGMP snooping maintains a multicast forwarding table to control Layer 2 multicast forwarding.

Before configuring IGMP snooping parameters, run the igmp snooping enable command in the system view to enable IGMP snooping globally. Other IGMP snooping configuration commands can be used only after IGMP snooping is enabled globally.

You can enable IGMP snooping in multiple VLANs by using the igmp snooping enable command in the system view.

Prerequisites

To enable IGMP snooping in multiple VLANs, ensure that the VLANs have been created and IGMP snooping has been enabled globally.

Precautions

If you run the igmp snooping enable vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> command multiple times, all the configurations take effect.

When you run the undo igmp snooping enable command in the system view, the system displays a message, asking you whether to disable IGMP snooping globally. When you disable IGMP snooping globally, all the IGMP snooping configurations are deleted. When you run the igmp snooping enable command to enable IGMP snooping globally again, the switch uses the default IGMP snooping configuration.

The igmp snooping enable command in a VLAN and the igmp on-demand configuration of the VLANIF interface are mutually exclusive.

Example

# Enable IGMP snooping globally.
<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
# Enable IGMP snooping in multiple VLANs.
<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan batch 2 to 10
[*HUAWEI] igmp snooping enable vlan 2 to 10

igmp snooping enable (VLAN or BD view)

Function

The igmp snooping enable command enables IGMP snooping in a VLAN or BD.

The undo igmp snooping enable command disables IGMP snooping in a VLAN or BD.

By default, IGMP snooping is disabled in a VLAN or BD.

Format

igmp snooping enable

undo igmp snooping enable

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

By default, IGMP snooping is disabled in a VLAN or BD after IGMP snooping is enabled in the system view. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable command in the VLAN or BD view.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Configuration Impact

After IGMP snooping is enabled in a VLAN or BD, this function takes effect only on interfaces in this VLAN or BD.

After IGMP snooping is enabled in a BD, the encapsulation type on the Layer 2 sub-interface bound to the BD cannot be changed and cannot be set to default.

Precautions

In the scenario when both Layer 2 and Layer 3 multicast are enabled, that is, when Layer 2 multicast is configured in a VLAN and Layer 3 multicast is configured on the corresponding VLANIF interface, the following functions must be configured simultaneously to ensure normal on-demand forwarding of multicast traffic:
  • IGMP snooping must be enabled in a VLAN.
  • PIM (PIM-SM or Bidir-PIM) and IGMP must be enabled on the corresponding VLANIF interface.

The igmp snooping enable command in a VLAN and the igmp on-demand configuration of the VLANIF interface are mutually exclusive.

Example

# Enable IGMP snooping in VLAN 2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable

igmp snooping group-policy (interface view)

Function

The igmp snooping group-policy command configures a multicast group policy on an interface.

The undo igmp snooping group-policy command deletes a multicast group policy from an interface.

By default, no multicast group policy is available on an interface, and hosts connected to the interface can join any multicast group.

Format

# Command syntax in the Layer 2 sub-interface view:

igmp snooping group-policy { acl-number | acl-name acl-name } [ version version-number ]

undo igmp snooping group-policy

# Command syntax in other interface views:

igmp snooping group-policy { acl-number | acl-name acl-name } [ version version-number ] vlan { vlan-id1 [ to vlan-id2 ] } & <1-10>

undo igmp snooping group-policy [ { acl-number | acl-name acl-name } [ version version-number ] ] [ vlan { all | { vlan-id1 [ to vlan-id2 ] } & <1-10> } ]

Parameters

Parameter

Description

Value

acl-number

Specifies the number of a basic ACL or an advanced ACL that limits the multicast groups that hosts in a VLAN or BD can join.

The value is an integer ranging from 2000 to 3999.

acl-name acl-name

Specifies the name of a basic ACL or an advanced ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

version version-number

Applies the multicast group policy only to the IGMP messages of the specified version. If this parameter is not specified, the multicast group policy applies to all IGMP messages.

The value is an integer ranging from 1 to 3.
  • 1: IGMPv1
  • 2: IGMPv2
  • 3: IGMPv3
NOTE:

When this command is configured in the Layer 2 sub-interface view, version-number cannot be set to 3.

vlan vlan-id1 [ to vlan-id2 ]

Applies the multicast group policy to the specified VLANs on the interface.

vlan-id1 and vlan-id2 are integers that range 1 from 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

all

Deletes multicast groups policies in all VLANs from the interface.

-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A multicast group policy controls the multicast programs that users can order on a device with IGMP snooping enabled. When a user orders a multicast program, the user host sends a Report message to the device, requesting to join the multicast group. The device checks whether the multicast group matches the ACL in the multicast group policy applied to the user VLAN or BD on the interface:
  • If so, the Layer 2 device allows the hosts in the VLANs or BDs to join the group and forwards the Report messages.
  • If not, the Layer 2 device prevents the hosts from joining the group and drops the Report messages.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only when both the following conditions are met:
  • IGMP snooping is enabled in the specified VLANs or BDs using the igmp snooping enable (VLAN or BD view) command.
  • The ACL referenced in the policy exists and has filtering rules configured.

This command must reference an ACL. Before using this command, create an ACL and configure rules for the ACL. The ACL referenced in a group policy permits all multicast groups by default. Therefore, to allow interfaces in a VLAN or BD to receive only multicast data sent to specific groups, use a rule deny source any rule with permit rules in the ACL. For details about ACL configuration commands, see ACL Configuration Commands.

A multicast group policy can also be configured in the VLAN or BD view to control the multicast groups that users in the VLAN or BD can join. A multicast group policy configured in the interface view controls the multicast groups that users in one or more VLANs or BDs on the interface can join. If you configure multicast group policies for the same VLAN or BD in the interface view and VLAN or BD view, the system first uses the policy configured in the interface view and then the policy configured in the VLAN or BD view to determine the groups that user hosts can join.

Example

# Prevent users in VLANs 20 to 30 from joining multicast group 225.1.1.123 on 10GE1/0/1.
<HUAWEI> system-view
[~HUAWEI] acl number 2000
[*HUAWEI-acl4-basic-2000] rule deny source 225.1.1.123 0
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] igmp snooping enable
[*HUAWEI] vlan batch 20 to 30
[*HUAWEI] igmp snooping enable vlan 20 to 30
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type trunk
[*HUAWEI-10GE1/0/1] port trunk allow-pass vlan 20 to 30
[*HUAWEI-10GE1/0/1] igmp snooping group-policy 2000 vlan 20 to 30

igmp snooping group-policy (VLAN or BD view)

Function

The igmp snooping group-policy command configures a multicast group policy in a VLAN or BD.

The undo igmp snooping group-policy command deletes the multicast group policy from a VLAN or BD.

By default, no multicast group policy is available in a VLAN or BD, and hosts in the VLAN or BD can join any multicast group.

Format

igmp snooping group-policy { acl-number | acl-name acl-name } [ version version-number ]

undo igmp snooping group-policy

Parameters

Parameter

Description

Value

acl-number

Specifies the number of a basic ACL or an advanced ACL that limits the multicast groups that hosts in a VLAN or BD can join.

The value is an integer that ranges from 2000 to 3999.

acl-name acl-name

Specifies the name of a basic ACL or an advanced ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

version version-number

Applies the multicast group policy only to the IGMP messages of the specified version. If this parameter is not specified, the multicast group policy applies to all IGMP messages.

The value is an integer that ranges from 1 to 3.
  • 1: IGMPv1
  • 2: IGMPv2
  • 3: IGMPv3
NOTE:

When this command is configured in the BD view, version cannot be set to 3.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A multicast group policy controls the multicast programs that users can order on a switch with IGMP snooping enabled. When a user orders a multicast program, the user host sends a Report message, requesting to join the multicast group. After the switch receives the message, it checks whether the multicast group matches the multicast group policy applied to the VLAN or BD. If so, the switch drops the Report message and prohibits the user from joining the multicast group. If not, the switch forwards the message, allowing the user to join the multicast group.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only when both the following conditions are met:

This command must reference an ACL. Before using this command, create an ACL and configure rules for the ACL. The ACL referenced in a group policy permits all multicast groups by default. Therefore, to allow interfaces in a VLAN or BD to receive only multicast data sent to specific groups, use a rule deny source any rule with permit rules in the ACL. For details about ACL configuration commands, see ACL Configuration Commands.

A multicast group policy can also be configured in the interface view to control the multicast groups that users in one or more VLANs or BDs on the interface can join. A multicast group policy configured in the VLAN or BD view controls the multicast groups that users in the VLAN or BD can join. If you configure multicast group policies for the same VLAN or BD in the interface view and VLAN or BD view, the system first uses the policy configured in the interface view and then the policy configured in the VLAN or BD view to determine the groups that user hosts can join.

Example

# Prevent hosts in VLAN 2 from joining group 225.1.1.123.
<HUAWEI> system-view
[~HUAWEI] acl number 2000
[*HUAWEI-acl4-basic-2000] rule deny source 225.1.1.123 0
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable
[*HUAWEI-vlan2] igmp snooping group-policy 2000

igmp snooping ip-source-policy

Function

The igmp snooping ip-source-policy command configures a policy to filter Report/Leave messages in a VLAN or BD. This policy controls the users that can receive the multicast service.

The undo igmp snooping ip-source-policy command restores the default configuration in a VLAN or BD.

By default, no policy is available to filter Report/Leave messages in a VLAN or BD, and all hosts in the VLAN or BD can receive the multicast service.

Format

igmp snooping ip-source-policy { acl-number | acl-name acl-name }

undo igmp snooping ip-source-policy

Parameters

Parameter Description Value
acl-number Specifies the number of a basic ACL or an advanced ACL that permits or rejects IGMP Report/Leave messages with a specified source or destination address. The value ranges from 2000 to 3999.
acl-name acl-name

Specifies the name of a basic ACL or an advanced ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enhance security of the multicast service, use this command to filter out IGMP Report/Leave messages from specified hosts.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

When a basic ACL is specified in a filter policy, the policy filters IGMP Report/Leave messages based on source addresses. When an advanced ACL is specified in a filter policy, the policy filters IGMP Report/Leave messages based on source and destination IP addresses.

Example

# Prohibit the user host with the source IP address 10.0.0.1 in VLAN 11 from receiving the multicast service.

<HUAWEI> system-view
[~HUAWEI] acl 2000
[*HUAWEI-acl4-basic-2000] rule deny source 10.0.0.1 0
[*HUAWEI-acl4-basic-2000] rule permit source any
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] igmp snooping enable
[*HUAWEI] vlan 11
[*HUAWEI-vlan11] igmp snooping enable
[*HUAWEI-vlan11] igmp snooping ip-source-policy 2000

igmp snooping learning disable

Function

The igmp snooping learning disable command disables learning of multicast group memberships on an interface.

The undo igmp snooping learning disable command enables learning of multicast group memberships on an interface.

By default, learning of multicast group memberships is enabled on an interface.

Format

# Command syntax in the Layer 2 sub-interface view:

igmp snooping learning disable

undo igmp snooping learning disable

# Command syntax in other interface views:

igmp snooping learning disable vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }

undo igmp snooping learning disable vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }

Parameters

Parameter

Description

Value

vlan { vlan-id1 [ to vlan-id2 ] }

Enables learning of multicast group memberships in specified VLANs. The interface must have been added to the specified VLAN.

vlan-id1 [ to vlan-id2 ] specifies the range of VLAN IDs.
  • vlan-id1: specifies the first VLAN ID.
  • to vlan-id2: specifies the last VLAN ID. If to vlan-id2 is not specified, learning of multicast group memberships is enabled only in the VLAN specified by vlan-id1.

The values of vlan-id1 and vlan-id2 are integers that range from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

The value of vlan-id2 must be greater than the value of vlan-id1. The vlan-id1 and vlan-id2 parameters identify a range of VLANs.

all

Enables learning of multicast group memberships in all VLANs that an interface has joined.

-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A group member port is a user-side interface that connects to multicast group members. Group memberships can be learned dynamically or configured statically. After IGMP snooping is enabled in a VLAN or BD, all interfaces in the VLAN or BD are enabled to learn forwarding entries from multicast packets. An interface is identified as a dynamic group member port when it receives an IGMP Report message.

If users connected to an interface need to receive data of a fixed multicast group, the interface can be statically bound to the multicast group. In this case, run the igmp snooping learning disable command on the interface to disable learning of group memberships. This reduces the system resources used for protocol packet exchange.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only when all the following conditions are met:

If you run the igmp snooping learning disable command multiple times, all the configurations take effect.

Example

# Disable learning of group memberships in VLAN 3 and VLAN 4 on 10GE1/0/1.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] quit
[*HUAWEI] vlan 4
[*HUAWEI-vlan4] igmp snooping enable
[*HUAWEI-vlan4] quit
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type trunk
[*HUAWEI-10GE1/0/1] port trunk allow-pass vlan 3 to 4
[*HUAWEI-10GE1/0/1] igmp snooping learning disable vlan 3 to 4

igmp snooping prompt-leave

Function

The igmp snooping prompt-leave command enables the fast leave function in a VLAN so that member ports in the VLAN or BD can fast leave multicast groups.

The undo igmp snooping prompt-leave command disables the fast leave function in a VLAN or BD.

By default, the fast leave function is disabled in a VLAN or BD.

NOTE:

The CE6810LI does not support fast leave of member ports.

Format

igmp snooping prompt-leave [ group-policy { acl-number | acl-name acl-name } ]

undo igmp snooping prompt-leave

Parameters

Parameter

Description

Value

group-policy

Specifies a multicast group policy that allows member ports to fast leave some multicast groups. Before using this parameter, create an ACL and configure filter rules in the ACL.

-

acl-number

Specifies the number of a basic ACL or an advanced ACL that defines a range of multicast groups.

The value is an integer that ranges from 2000 to 3999.

acl-name acl-name

Specifies the name of a basic ACL or an advanced ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The fast leave function enables the switch to delete the multicast forwarding entry of a multicast group from an interface immediately after the interface receives an IGMP Leave message for the group. This function saves bandwidth and system resources because the switch does not need to wait until the aging timer of the interface expires.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

When an interface has more than one receiver connected, enabling the fast leave function interrupts multicast traffic of the other receivers in the multicast group. It is recommended that you enable this function only on interfaces with one receiver.

The configuration takes effect only when all the following conditions are met:
  • IGMP snooping is enabled in the VLAN or BD using the igmp snooping enable (VLAN or BD view) command.
  • IGMPv2 or IGMPv3 messages can be processed in the VLAN or BD.
  • An ACL has been created and has filtering rules configured if a multicast group policy is specified in the command. The default ACL rule of the switch permits all multicast groups. Therefore, after configuring a rule that permits a specified multicast group, run the rule deny source any command to deny all the other multicast groups. For details about ACL configuration commands, see ACL Configuration Commands in "Security Commands."

Example

# Allow member ports in VLAN 2 to fast leave all groups.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable
[*HUAWEI-vlan2] igmp snooping prompt-leave
# Allow member ports in VLAN 3 to fast leave group 225.1.1.123.
<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] acl number 2000
[*HUAWEI-acl4-basic-2000] rule permit source 225.1.1.123 0
[*HUAWEI-acl4-basic-2000] rule deny source any
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping prompt-leave group-policy 2000

igmp snooping proxy

Function

The igmp snooping proxy command enables IGMP snooping proxy in a VLAN or BD.

The undo igmp snooping proxy command disables IGMP snooping proxy in a VLAN or BD.

By default, IGMP snooping proxy is disabled in a VLAN or BD.

Format

igmp snooping proxy

undo igmp snooping proxy

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After IGMP snooping is enabled on a switch, the switch forwards Query messages from the upstream IGMP querier and Report/Leave messages from downstream hosts without changing the messages. When there are a large number of hosts on a network, redundant IGMP messages overload the upstream device. Enabling the IGMP snooping proxy function on the switch can solve this problem. This function allows the switch to send IGMP Query messages in place of the upstream Layer 3 device and send Report/Leave messages in place of downstream hosts, conserving link bandwidth between the Layer 3 device and switch. The switch sends IGMP Report/Leave messages to the upstream Layer 3 device only in the following situations:
  • When the first member joins a multicast group or a host sends a Report message in response to an IGMP Query message, the Layer 2 device forwards a Report message to the upstream device. The upstream device can create or maintain the matching forwarding entry based on the Report message.
  • When the last member of a multicast group leaves the group, the Layer 2 device forwards a Leave message to the upstream device. The upstream device then deletes the matching forwarding entry.

An upstream Layer 3 device does not send Query messages as a querier when IGMP is not enabled, for example, the Layer 3 device has only static multicast groups. In this case, the switch cannot create or maintain group memberships even though IGMP snooping is enabled. The IGMP snooping proxy function enables the switch to send Query messages to downstream hosts. For the hosts, the switch is a querier.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Configuration Impact

If IGMP is enabled on the upstream Layer 3 device, enabling the IGMP snooping proxy function on the switch may affect the querier election result, because the General Query messages sent by the switch have a smaller source IP address than the General Query messages sent by the Layer 3 device. To solve this problem, run the igmp snooping proxy-uplink-port command to prevent the switch from sending Query messages to the uplink interface connected to the upstream device. Alternatively, run the igmp snooping send-query source-address command to set a large source IP address for Query messages.

Precautions

  • The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

  • IGMP snooping proxy cannot be enabled in a VLAN if the corresponding VLANIF interface has Layer 3 multicast function (such as IGMP and PIM) enabled.

  • After enabling IGMP snooping proxy in a VLAN or BD, do not enable IGMP snooping querier or IGMP message suppression in the VLAN or BD because these functions conflict.

Example

# Enable IGMP snooping proxy in VLAN 100.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] igmp snooping enable
[*HUAWEI-vlan100] igmp snooping proxy

igmp snooping proxy router-protocol-pass

Function

The igmp snooping proxy router-protocol-pass command transparently transmits IGMP packets on a router port.

The undo igmp snooping proxy router-protocol-pass command restores the default configuration.

By default, the switch with IGMP snooping proxy enabled terminates the Report, Leave, Group-Specific Query, and Source-Group-Specific Query messages received on router ports.

Format

igmp snooping proxy router-protocol-pass

undo igmp snooping proxy router-protocol-pass

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The igmp snooping proxy router-protocol-pass command configures the switch to transparently transmit the IGMP messages received on a router port to the other router ports on the switch.

This command is recommended when a switch with IGMP snooping proxy enabled is dual-homed to upstream Layer 3 multicast devices.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only after you run the igmp snooping proxy command to enable IGMP snooping proxy in the VLAN or BD.

Example

# Transparently transmit IGMP messages received on a router port to the other router ports in VLAN 100.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] igmp snooping enable
[*HUAWEI-vlan100] igmp snooping proxy
[*HUAWEI-vlan100] igmp snooping proxy router-protocol-pass

igmp snooping querier enable

Function

The igmp snooping querier enable command enables the IGMP snooping querier function in a VLAN or BD.

The undo igmp snooping querier enable command disables the IGMP snooping querier function in a VLAN or BD.

By default, the IGMP snooping querier function is disabled in a VLAN or BD.

Format

igmp snooping querier enable

undo igmp snooping querier enable

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On an IGMP-capable network, a Layer 3 multicast device functions as a querier to send IGMP Query messages and maintain group memberships on the local network segment. If the Layer 3 multicast device does not run IGMP or it uses only static multicast forwarding entries, it cannot function as a querier. You can enable IGMP snooping querier on the downstream Layer 2 device. Then the Layer 2 device can act as a querier to send IGMP Query messages.

On a Layer 2 network without Layer 3 devices, multicast sources are connected to Layer 2 devices. IGMP snooping querier needs to be enabled on the Layer 2 devices so that they can maintain multicast group memberships.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

Perform the following operations as required on your network:

Configuration Impact

The IGMP snooping querier does not participate in IGMP querier election. However, the IGMP snooping querier on an IGMP-capable multicast network may affect the election result, because the Query messages sent by the IGMP snooping querier may have a smaller source IP address than the Query messages sent by other devices. Therefore, the IGMP snooping querier function is not recommended on an IGMP-capable multicast network.

Precautions

  • The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

  • The IGMP snooping querier function cannot be enabled in a VLAN if the corresponding Layer 3 VLANIF interface has Layer 3 multicast functions (such as IGMP and PIM) enabled.

  • The IGMP snooping proxy and IGMP snooping querier functions cannot be enabled in the same VLAN or BD.

Example

# Enable the querier function in VLAN 3.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping querier enable

igmp snooping querier-election

Function

The igmp snooping querier-election command configures the IGMP snooping querier election.

The undo igmp snooping querier-election command cancels the querier election.

By default, the querier election function is disabled for all VLANs or BDs.

Format

igmp snooping querier-election

undo igmp snooping querier-election

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the querier function is enabled on multiple devices in a VLAN or BD, the igmp snooping querier-election command can be used to elect the device with the lowest IP address as the querier so that the device will replace the connected upstream device to send Query messages to user hosts.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only when the igmp snooping querier enable command has been run to enable the querier function in the VLAN or BD.

Example

# Enable the querier election function for VLAN 10.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] igmp snooping querier-election

igmp snooping query interval

Function

The igmp snooping query interval command sets the general query interval in a VLAN or BD, that is, the interval at which IGMP General Query messages are sent in the VLAN or BD.

The undo igmp snooping query interval command restores the default general query interval in a VLAN or BD.

By default, the general query interval in a VLAN or BD is 60 seconds.

Format

igmp snooping query interval query-interval

undo igmp snooping query interval

Parameters

Parameter

Description

Value

query-interval

Specifies the interval at which IGMP General Query messages are sent.

The value is an integer that ranges from 1 to 65535, in seconds.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The IGMP snooping general query interval can be adjusted based on actual conditions on your network. By setting the IGMP snooping general query interval, you can:

  • Configure the interval at which the IGMP snooping querier sends General Query messages.

    Configure the switch to send IGMP General Query messages at intervals to maintain memberships of interfaces. When a shorter interval is configured in a VLAN or BD, the switch is more sensitive to multicast membership changes, but more bandwidth and system resources are consumed.

  • Change the aging time of multicast member ports.

    When receiving an IGMP Report message from a host, the switch starts the aging timer for the multicast member port. The aging time is calculated using the following formula: Aging time = IGMP robustness variable x General query interval + Maximum response time for General Query messages. The igmp snooping query interval command sets the general query interval. The IGMP robustness variable is set by the igmp snooping robust-count command, and the maximum response time for General Query messages is set by the igmp snooping query max-response-time command.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

  • The default general query interval is 60 seconds, which is different than the default value 125 seconds defined by RFC documents. A Huawei querier and a non-Huawei querier must send IGMP general query messages at the same interval.

  • The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

  • The interval at which General Query messages are sent must be longer than the maximum response time for General Query messages. Otherwise, the switch may delete multicast memberships that should not be deleted.

Example

# Set the general query interval in VLAN 3 to 100 seconds.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping query interval 100

igmp snooping query ip-source-policy

Function

The igmp snooping query ip-source-policy command configures a policy to filter IGMP Query messages based on source IP addresses in a VLAN or BD.

The undo igmp snooping query ip-source-policy deletes the IGMP Query message filtering policy from a VLAN or BD.

By default, no IGMP Query message filtering policy is configured in a VLAN or BD.

Format

igmp snooping query ip-source-policy { acl-number | acl-name acl-name }

undo igmp snooping query ip-source-policy

Parameters

Parameter

Description

Value

acl-number

Specifies the number of a basic ACL or an advanced ACL

The value is an integer that ranges from 2000 to 3999.

acl-name acl-name

Specifies the name of a basic ACL or an advanced ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If an attacker sends Query messages with a smaller IP address than the real IGMP querier on the network, switches running IGMP snooping consider the attacker as a querier and forward IGMP Membership Report messages to the attacker. In this case, multicast traffic cannot be forwarded correctly. You can configure an IGMP Query message filtering policy to defend against such attacks. An IGMP Query message filtering policy permits only IGMP Query messages with specified source IP addresses and rejects other IGMP Query messages. This improves security of a Layer 2 multicast network.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Configuration Impact

After an IGMP Query message filtering policy is configured, the system uses the ACL specified in the command to filter IGMP Query messages. IGMP Query messages are accepted only when their source IP addresses are permitted by the referenced ACL (within the address range following permit in the ACL rule).

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

Example

# Configure an IGMP Query message filtering policy in VLAN 3 to permit IGMP Query messages with source IP address 10.0.0.1 and drop other IGMP Query messages.

<HUAWEI> system-view
[~HUAWEI] acl 2000
[*HUAWEI-acl4-basic-2000] rule permit source 10.0.0.1 0
[*HUAWEI-acl4-basic-2000] rule deny source any
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping query ip-source-policy 2000

igmp snooping query last-member-interval

Function

The igmp snooping query last-member-interval command sets the last member query interval in a VLAN or BD, that is, the interval at which Group-Specific Query messages are sent in the VLAN or BD.

The undo igmp snooping query last-member-interval command restores the default last member query interval in a VLAN or BD.

By default, Group-Specific Query messages are sent in a VLAN or BD at intervals of 1 second.

Format

# Command syntax in BD view:

igmp snooping query lastmember-queryinterval last-member-interval

undo igmp snooping query lastmember-queryinterval

# Command syntax in other views:

igmp snooping query last-member-interval last-member-interval

undo igmp snooping query last-member-interval

Parameters

Parameter

Description

Value

last-member-interval

Specifies the interval at which IGMP Group-Specific Query messages are sent.

The value is an integer that ranges from 1 to 5, in seconds.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

By setting the last member query interval, you can:

  • Configure the switch to send IGMP Group-Specific Query messages at intervals when the querier function is enabled.

  • Change the aging time of multicast group member ports.

    When the switch receives an IGMP Leave message from a host, the switch starts the aging timer for the corresponding member port. The aging time is calculated using the following formula: Aging time = Last member query interval x Last member query count. The igmp snooping query last-member-interval command sets the last member query interval. The last member query count is set by the igmp snooping robust-count command.

    If the switch (querier) receives Report messages from other hosts within the aging time, it continues to maintain memberships of the multicast group. If the switch does not receive any Report messages within the aging time, it stops maintaining memberships of the multicast group.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The switch sets the maximum response time field in the Group-Specific Query message to the configured last member query interval. Therefore, the maximum response time for Group-Specific Query messages is the same as the interval at which Group-Specific Query messages are sent.

The configuration takes effect only when all the following conditions are met:
  • IGMP snooping is enabled in the VLAN or BD using the igmp snooping enable (VLAN or BD view) command.

  • The IGMP message version is set to v2 or v3 messages in the VLAN or BD. (Hosts running IGMPv1 do not send Leave messages when they leave a multicast group.)

Example

# Set the last member query interval in VLAN 3 to 4 seconds.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping query last-member-interval 4

igmp snooping query max-response-time

Function

The igmp snooping query max-response-time command sets the maximum response time for IGMP General Query messages in a VLAN or BD.

The undo igmp snooping query max-response-time command restores the default maximum response time for IGMP General Query messages in a VLAN or BD.

By default, the maximum response time for IGMP General messages in a VLAN or BD is 10 seconds.

Format

igmp snooping query max-response-time max-response-time

undo igmp snooping query max-response-time

Parameters

Parameter

Description

Value

max-response-time

Specifies the maximum response time for IGMP General Query messages.

The value is an integer that ranges from 1 to 25, in seconds.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Setting IGMP snooping parameters helps improve multicast forwarding performance. By setting the maximum response time for IGMP General Query messages, you can:

  • Control the deadline for a host to send an IGMP Report message. When hosts are required to respond to IGMP General Query messages quickly, set a short maximum response time. To avoid congestion caused by a large number of IGMP messages sent by hosts, set a long maximum response time.
  • Adjust the aging time of member ports. When the switch receives a Report message, it starts the aging timer for the member port. The aging time is calculated using the following formula: Aging time = General query count x General query interval + Maximum response time for General Query messages. The igmp snooping query max-response-time command sets the maximum response time. The General query count is set by the igmp snooping robust-count command, and the general query interval is set by the igmp snooping query interval command.

The switch sets the maximum response time field in General Query messages to the value set by the igmp snooping query max-response-time command.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

Perform the following operations to improve multicast performance:

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

The maximum response time for General Query messages must be shorter than the interval at which General Query messages are sent. Otherwise, the switch may delete multicast memberships that should not be deleted.

Example

# Set the maximum response time for IGMP Query messages in VLAN 3 to 20 seconds.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping query max-response-time 20

igmp snooping report-suppress

Function

The igmp snooping report-suppress command enables suppression of IGMP Report and Leave messages in a VLAN or BD.

The undo igmp snooping report-suppress command disables suppression of IGMP Report and Leave messages in a VLAN or BD.

By default, IGMP Report and Leave message suppression is disabled in a VLAN or BD.

Format

igmp snooping report-suppress

undo igmp snooping report-suppress

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a Layer 2 device receives an IGMP Membership Report message (Report or Leave message) from a group member, the Layer 2 device forwards the message to the directly connected Layer 3 device. A group member host sends a Membership Report message in the following situations:
  • When joining a multicast group, a host sends a Report message. When a multicast group has multiple members in a VLAN or BD, the Layer 3 device receives duplicate Report messages from the member hosts.
  • When receiving an IGMP General Query message, a host sends a Report message. Hosts use a timer to suppress duplicate Report messages on the same network segment. However, if the timer values on hosts are the same, the Layer 3 device can still receive duplicate Report messages.
  • A host running IGMPv2 or IGMPv3 sends a Leave message when leaving a multicast group. When a multicast group has multiple members in a VLAN or BD, the Layer 3 device receives duplicate Leave messages from the member hosts.
After Report message suppression is enabled on a Layer 2 device, the device forwards only one IGMP Membership Report message to the upstream device in the following scenarios:
  • When the first member joins a multicast group or a host sends a Report message in response to an IGMP Query message, the Layer 2 device forwards a Report message to the upstream device. The upstream can create or maintain the matching forwarding entry based on the Report message.
  • When the last member of a multicast group leaves the group, the Layer 2 device forwards a Leave message to the upstream device. The upstream device then deletes the matching forwarding entry.

This reduces the number of IGMP messages on the network.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Configuration Impact

  • The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

  • IGMP message suppression cannot be configured in a VLAN if the corresponding VLANIF interface has Layer 3 multicast function (such as IGMP and PIM) enabled.

  • The functions of IGMP snooping proxy and IGMP message suppression cannot be configured in the same VLAN or BD.

Example

# Enable suppression of Report and Leave messages in VLAN 2.

<HUAWEI> system view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable
[*HUAWEI-vlan2] igmp snooping report-suppress

igmp snooping require-router-alert

Function

The igmp snooping require-router-alert command configures the switch to drop the IGMP messages without the Router-Alert option in the IP header received from a VLAN or BD.

The undo igmp snooping require-router-alert command restores the default configuration.

By default, the switch does not check the Router-Alert option of IGMP messages and processes all the received IGMP messages, regardless of whether they carry the Router-Alert option in the IP header.

Format

igmp snooping require-router-alert

undo igmp snooping require-router-alert

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The Router-Alert option identifies the protocol messages that need to be processed by upper-layer routing protocols.

By default, the switch does not check whether IGMP messages contain the Router-Alert option and sends all the IGMP messages to the upper-layer routing protocol. Discarding IGMP messages without the Router-Alert option improves device performance, reduces cost, and enhances security of the upper-layer routing protocol. After the igmp snooping require-router-alert command is executed, the switch checks each IGMP message for the Router-Alert option and discards those IGMP messages without this option.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

Example

# Configure the switch to forward only the IGMP messages with the Router-Alert option in the IP header received from VLAN 3.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping require-router-alert

igmp snooping robust-count

Function

The igmp snooping robust-count command sets the IGMP robustness variable in a VLAN or BD, which specifies how many times IGMP Query messages are sent.

The undo igmp snooping robust-count command restores the default IGMP robustness variable in a VLAN or BD.

By default, the robustness variable in a VLAN or BD is 2.

Format

igmp snooping robust-count robust-count

undo igmp snooping robust-count

Parameters

Parameter

Description

Value

robust-count

Specifies the IGMP robustness variable in a VLAN or BD.

The value is an integer that ranges from 2 to 5.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Setting IGMP snooping parameters helps improve multicast forwarding performance. By setting the IGMP robustness variable, you can:

  • Specify the number of times the querier sends a Group-Specific Query message, which prevents packet loss on the network.

    When receiving an IGMP Leave message for a multicast group, the switch sends a Group-Specific Query message certain times (specified by the IGMP robustness variable) to check whether this group has any other members. If the quality of transmission links is low, increase the IGMP robustness variable.

  • Change the aging time of multicast group member ports.

    When receiving an IGMP Report message from a host, the switch starts the aging timer for the member port. The aging time is calculated using the following formula: Aging time = IGMP robustness variable x General query interval + Maximum response time for General Query messages. The igmp snooping robust-count command sets the general query count.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

Perform the following operations to optimize multicast service performance:

Precautions

The configuration takes effect only after you run the igmp snooping enable (VLAN or BD view) command to enable IGMP snooping in the VLAN or BD.

Example

# Set the IGMP robustness variable to 5 in VLAN 3.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping robust-count 5

igmp snooping router-aging-time

Function

The igmp snooping router-aging-time command sets the aging time of dynamic router ports in a VLAN or BD.

The undo igmp snooping router-aging-time command restores the default aging time of dynamic router ports in a VLAN or BD.

By default, the aging time of dynamic router ports in a VLAN or BD is 180 seconds or equal to the holdtime value contained in PIM Hello messages.

Format

igmp snooping router-aging-time router-aging-time

undo igmp snooping router-aging-time

Parameters

Parameter

Description

Value

router-aging-time

Specifies the aging time of dynamic router ports in a VLAN or BD.

The value is an integer that ranges from 1 to 1000, in seconds.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a short-term congestion occurs on the network, it takes a longer time to transmit Query messages from the IGMP querier to the switch. If a router port on the switch ages in this period, the switch does not send Report or Leave messages to router ports. As a result, multicast data forwarding may be interrupted. Therefore, set a long aging time for the router port on an unstable network.

When a dynamic router port on the switch receives an IGMP Query message or a PIM Hello message, the switch resets the aging time of the router port.

Configuration Impact

No matter whether a router port receives a PIM Hello message or an IGMP Query message, the aging time of the router port is set to the value configured using the igmp-snooping router-aging-time command, as long as the current remaining aging time of the router port is smaller than the configured value.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

If the aging time of a router port is too short, the router port ages frequently, degrading system performance.

Example

# Set the aging time of router ports in VLAN 3 to 300 seconds.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping router-aging-time 300

igmp snooping router-learning disable

Function

The igmp snooping router-learning disable command disables router port learning in a VLAN or BD.

The undo igmp snooping router-learning disable command enables router port learning in a VLAN or BD.

By default, router port learning is enabled in a VLAN or BD.

Format

igmp snooping router-learning disable

undo igmp snooping router-learning disable

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A router port is located on a Layer 2 device and connects to an upstream Layer 3 device (a multicast router or Layer 3 switch). A switch running IGMP snooping considers an interface as a dynamic router port when the interface receives an IGMP General Query message with any source IP address except 0.0.0.0 or a PIM Hello message. A router port provides the following functions:

  • Receives multicast data from the upstream device.
  • Forwards IGMP Report/Leave messages. IGMP Report/Leave messages received in a VLAN or BD are forwarded only to router ports in the VLAN or BD.

By default, router port learning is enabled on an interface. To prevent interfaces in a VLAN or BD from becoming a router port, disable router port learning in the VLAN or BD.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

The switch does not listen on IGMP Query messages in a VLAN or BD after router port learning is disabled in the VLAN or BD. To ensure normal multicast forwarding in the VLAN or BD, run the igmp snooping static-router-port command to configure a static router port.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

Example

# Disable router port learning in VLAN 3.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping router-learning disable

igmp snooping send-query enable

Function

The igmp snooping send-query enable command enables the switch to send IGMP General Query messages to non-router ports when receiving topology change events.

The undo igmp snooping send-query enable command disables the switch from sending IGMP General Query messages to non-router ports.

By default, the switch does not send IGMP General Query messages to non-router ports when receiving topology change events.

Format

igmp snooping send-query enable

undo igmp snooping send-query enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When the network topology changes, the switch receives a topology change event. By default, the switch does not send IGMP General Query messages in this case. A network topology change triggers recalculation of the Multiple Spanning Tree Protocol (MSTP), but multicast data packets cannot be switched to the new path immediately. To enable multicast data flows to be switched to the new forwarding path immediately after a network topology change, configure the switch to send IGMP General Query messages upon topology changes.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

This command is used on a ring network. When the ring network topology changes, the switch sends IGMP General Query messages with source IP address 192.168.0.1. When this address has been occupied by another device on the network, run the igmp snooping send-query source-address command to set the source IP address to 0.0.0.0.

Precautions

Use this command only when MSTP is enabled on the network.

Example

# Configure the switch to send IGMP General Query messages upon topology changes.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] igmp snooping send-query enable

igmp snooping send-query source-address

Function

The igmp snooping send-query source-address command sets the source IP address of IGMP General Query messages.

The undo igmp snooping send-query source-address command restores the default source IP address of IGMP General Query messages.

By default, the source IP address of IGMP General Query messages is 192.168.0.1.

Format

igmp snooping send-query source-address ip-address

undo igmp snooping send-query source-address

Parameters

Parameter

Description

Value

ip-address

Specifies the source IP address of IGMP General Query messages.

The value is in dotted decimal notation.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A Layer 2 device sends two types of IGMP General Query messages:

By default, IGMP General Query messages sent from a Layer 2 device use the source IP address 192.168.0.1. When this IP address is used by another device on the network, run the igmp snooping send-query source-address command to change the source IP address of IGMP General Query messages.

When multiple Layer 2 devices exist on a shared network, you can set source IP addresses of IGMP Query messages to identify the devices. For example, when multiple devices with different performance need to participate in querier election, you must configure a different source IP address of IGMP Query messages for each device.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Example

# Set the source IP address of IGMP Query messages sent by the switch to 192.168.0.2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] igmp snooping send-query source-address 192.168.0.2

igmp snooping send-router-alert disable

Function

The igmp snooping send-router-alert disable command configures the switch to send IGMP messages without the Router-Alert option in the IP header to a VLAN or BD.

The undo igmp snooping send-router-alert disable command configures the switch to send IGMP messages with the Router-Alert option in the IP header to a VLAN or BD.

By default, the switch sends IGMP messages with the Router-Alert option in the IP header to a VLAN or BD.

Format

igmp snooping send-router-alert disable

undo igmp snooping send-router-alert disable

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Router-Alert is a special mechanism to identify protocol packets. Packets carrying the Router-Alert option need to be processed by an upper-layer routing protocol.

By default, the switch sends IGMP messages with the Router-Alert option. If some devices in the same VLAN or BD as the switch can process only the IGMP messages without the Router-Alert option, use the igmp snooping send-router-alert disable command to configure the switch to send IGMP messages without the Router-Alert option.

The switch adds the Router-Alert option only to locally originated IGMP messages and does not add this option to IGMP messages received from other devices.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

Example

# Configure the switch to send IGMP messages that do not contain the Router-Alert option in the IP header to VLAN 3.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping send-router-alert disable

igmp snooping ssm-mapping

Function

The igmp snooping ssm-mapping command configures the mapping between a multicast group and a multicast source in a VLAN.

The undo igmp snooping ssm-mapping command deletes the mapping between a multicast group and a multicast source in a VLAN.

By default, no mappings between multicast groups and multicast sources exist in a VLAN.

NOTE:

The CE6810LI does not support this command.

Format

igmp snooping ssm-mapping group-address { group-mask | mask-length } source-address

undo igmp snooping ssm-mapping group-address { group-mask | mask-length } source-address

Parameters

Parameter

Description

Value

group-address

Specifies the IP address of a multicast group.

The value is in dotted decimal notation, and the value range is specified by the igmp snooping ssm-policy command..

group-mask

Specifies the mask of the multicast group address.

The value is in dotted decimal notation.

mask-length

Specifies the mask length of the multicast group address.

The value is an integer that ranges from 4 to 32.

source-address

Specifies the IP address of the multicast source mapped to a multicast group.

The value is in dotted decimal notation.

Views

VLAN view, VLAN-range view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The SSM mapping mechanism converts IGMPv1 and IGMPv2 Report messages into messages with (S, G) information. This mechanism enables hosts that do not support IGMPv3 to work with SSM. To use this mechanism, enable SSM mapping and configure mappings between a multicast group G and multicast sources such as S1, S2 on the Layer 2 device connected to user hosts. When the Layer 2 device receives IGMPv1 and IGMPv2 Report messages for a multicast group, it checks the group address of the messages. If the group address is in the SSM group range, the Layer 2 device converts the messages into one or more IGMPv3 IS_IN (S1, S2...) messages with the group address G.

Prerequisites

Precautions

Before configuring the mapping between a multicast group and a multicast source:

Example

# Map multicast groups 238.1.1.1 through 238.1.1.255 to multicast source 10.1.1.1 in VLAN 10.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] igmp snooping enable
[*HUAWEI-vlan10] igmp snooping version 3
[*HUAWEI-vlan10] igmp snooping ssm-mapping enable
[*HUAWEI-vlan10] igmp snooping ssm-mapping 238.1.1.0 24 10.1.1.1

igmp snooping ssm-mapping enable

Function

The igmp snooping ssm-mapping enable command enables Source-Specific Multicast (SSM) mapping in a VLAN.

The undo igmp snooping ssm-mapping enable command disables SSM mapping in a VLAN.

By default, SSM mapping is disabled in a VLAN.

NOTE:

The CE6810LI does not support this command.

Format

igmp snooping ssm-mapping enable [ policy policy-name ]

undo igmp snooping ssm-mapping enable

Parameters

Parameter

Description

Value

policy policy-name

Specifies the name of an SSM mapping policy, which is created using the ssm-mapping policy command.

The name of an SSM mapping policy must already exist.

Views

VLAN view, VLAN-range view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On an SSM network, some hosts can run only IGMPv1 or IGMPv2 and therefore cannot select multicast sources when they join a multicast group. To provide SSM services for these hosts, enable IGMP snooping SSM mapping on the Layer 2 device.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

Run the igmp snooping ssm-mapping command to configure group-source mappings. If you specify policy policy-name when enabling SSM mapping, you can use the mapping configured in the specified SSM mapping policy and do not need to configure an SSM mapping again.

Precautions

  • If IGMP snooping is disabled in the specified VLAN, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN. To enable IGMP snooping in a VLAN, run the igmp snooping enable (VLAN or BD view) command.

  • SSM mapping is applicable only to the VLANs where IGMP snooping can process IGMPv3 messages. To set the IGMP message version to v3, use the igmp snooping version command in the VLAN.

  • If the multicast group address is an Any-Source Multicast (ASM) address, configure an SSM group policy to add the multicast group address to the SSM group range using the igmp snooping ssm-policy command in the VLAN view.

Example

# Enable SSM mapping in VLAN 10.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] igmp snooping enable
[*HUAWEI-vlan10] igmp snooping version 3
[*HUAWEI-vlan10] igmp snooping ssm-mapping enable

igmp snooping ssm-policy

Function

The igmp snooping ssm-policy command configures an SSM group policy in a VLAN or BD to specify the range of SSM groups.

The undo igmp snooping ssm-policy command deletes the SSM group policy from a VLAN or BD.

By default, no SSM group policy is available in a VLAN or BD.

Format

igmp snooping ssm-policy { basic-acl-number | acl-name acl-name }

undo igmp snooping ssm-policy

Parameters

Parameter

Description

Value

basic-acl-number

Specifies the number of a basic ACL that defines the range of SSM groups.

The value is an integer that ranges from 2000 to 2999.

acl-name acl-name

Specifies the name of a basic ACL.

The value is a string of 1 to 32 case-sensitive characters except spaces. The value must start with a letter (case-sensitive).

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

SSM allows multicast group addresses in the range of 232.0.0.0 to 232.255.255.255. If hosts join multicast groups out of this range or they are allowed to join only some of multicast groups in the range, configure an SSM group range for the hosts.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Follow-up Procedure

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

This command must reference an ACL. Before using this command, create an ACL and configure rules for the ACL. By default, the ACL applied to an SSM group policy denies all multicast groups. Therefore, to exclude specific group addresses from the SSM group address range, use a rule permit source any rule with deny rules in the ACL. For details about ACL configuration commands, see ACL Configuration Commands.

Example

# Specify multicast group 225.1.1.123 as an SSM group in VLAN 3.

<HUAWEI> system-view
[~HUAWEI] acl number 2000
[*HUAWEI-acl4-basic-2000] rule permit source 225.1.1.123 0
[*HUAWEI-acl4-basic-2000] quit
[*HUAWEI] igmp snooping enable
[*HUAWEI] vlan 3
[*HUAWEI-vlan3] igmp snooping enable
[*HUAWEI-vlan3] igmp snooping ssm-policy 2000

igmp snooping static-group

Function

The igmp snooping static-group command configures static group memberships on an interface.

The undo igmp snooping static-group command deletes static group memberships from an interface.

By default, no static group membership is configured on an interface.

Format

# Configure a single static multicast group:

# Command syntax in the Layer 2 sub-interface view:

igmp snooping static-group [ source-address source-ip-address ] group-address group-ip-address [ dot1q vid vid | qinq pe-vid pe-vid ce-vid ce-vid ]

undo igmp snooping static-group [ source-address source-ip-address ] group-address { group-ip-address | all } [ dot1q vid vid | qinq pe-vid pe-vid ce-vid ce-vid ]

# Command syntax in other interface views:

igmp snooping static-group [ source-address source-ip-address ] group-address group-ip-address vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo igmp snooping static-group [ source-address source-ip-address ] group-address group-ip-address vlan { all | { vlan-id1 [ to vlan-id2 ] } &<1-10> }

# Configure a series of static multicast groups:(Not supported in the Layer 2 sub-interface view.)

igmp snooping static-group [ source-address source-ip-address ] group-address group-ip-address1 to group-ip-address2 vlan vlan-id

undo igmp snooping static-group [ source-address source-ip-address ] group-address group-ip-address1 to group-ip-address2 vlan vlan-id

undo igmp snooping static-group [ source-address source-ip-address ] group-address all vlan { all | { vlan-id1 [ to vlan-id2 ] } &<1-10> }

Parameters

Parameter

Description

Value

source-address source-ip-address

Specifies the IP address of a multicast source.

The value of source-ip-address can be any Class A, Class B, or Class C address, in dotted decimal notation.

group-address group-ip-address

Specifies the IP address of a multicast group.

The value of group-ip-address ranges from 224.0.1.0 to 239.255.255.255 in dotted decimal notation.

dot1q vid vid
Configures a static group membership on a dot1q Layer 2 sub-interface. vid specifies the outer VLAN ID of the packets received on the Layer 2 sub-interface.
NOTE:

This parameter is only applicable to Layer 2 sub-interfaces that use the dot1q encapsulation type.

The value is an integer ranging from 1 to 4094.

qinq pe-vid pe-vid ce-vid ce-vid
Configures a static group membership on a QinQ Layer 2 sub-interface. pe-vid specifies the outer VLAN ID of the packets received on the Layer 2 sub-interface, and ce-vid specifies the inner VLAN ID of the packets.
NOTE:

This parameter is only applicable to Layer 2 sub-interfaces that use the QinQ encapsulation type.

The values of pe-vid and ce-vid are integers that range from 1 to 4094.

vlan { vlan-id1 [ to vlan-id2 ] }

Specifies the VLANs that the interface belongs to. vlan-id1 [ to vlan-id2 ] specifies a range of VLAN IDs.
  • vlan-id1 specifies the first VLAN ID.
  • to vlan-id2 specifies the last VLAN ID. If to vlan-id2 is not specified, the interface is bound only to the multicast group in the VLAN specified by vlan-id1.

The values of vlan-id1 and vlan-id2 are integers that range from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

vlan-id2 must be larger than vlan-id1.

vlan vlan-id

Specifies a VLAN that the interface belongs to.

The values of vlan-id1 and vlan-id2 are integers that range from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

all

Deletes all group memberships from the interface.
  • In group-address all, all indicates that the interface is removed from all multicast groups.
  • In vlan { all | {vlan-id1 [ to vlan-id2 ] } &<1-10> }, all indicates that the interface is removed from multicast groups in all VLANs.

-

group-ip-address1 to group-ip-address2

Configures multiple static group memberships on the interface. group-ip-address1 and group-ip-address2 identify a range of multicast group addresses.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.

The values of group-ip-address1 and group-ip-address2 must be in the same network segment (with a 24-bit mask).

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In addition to dynamic multicast forwarding entries generated by Layer 2 multicast protocols, you can configure static Layer 2 multicast forwarding entries by binding interfaces to multicast groups. After an interface is statically bound to a multicast group, users connected to this interface can receive multicast data of the multicast group for a long time. The interface then becomes a static member interface.

Configuring static member interfaces has the following advantages:

  • Protects the system against attacks from protocol packets.
  • Reduces the network delay by directly forwarding multicast packets based on static forwarding entries.
  • Prevents unregistered users from receiving multicast flows, improving information security and protecting service providers' interests.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

The configuration takes effect only when both the following conditions are met:
  • IGMP snooping is enabled in the specified VLANs or BDs using the igmp snooping enable (VLAN or BD view).
  • The specified VLANs or BDs have been created and the interface has been added to these VLANs or BDs.
  • The specified group address is not a reserved group address.

Example

# Configure a static multicast group 224.1.1.1 on 10GE1/0/1 in VLAN 2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type trunk
[*HUAWEI-10GE1/0/1] port trunk allow-pass vlan 2
[*HUAWEI-10GE1/0/1] igmp snooping static-group group-address 224.1.1.1 vlan 2

# Configure static multicast groups 224.1.1.1 to 224.1.1.3 on 10GE1/0/1 in VLAN 2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type trunk
[*HUAWEI-10GE1/0/1] port trunk allow-pass vlan 2
[*HUAWEI-10GE1/0/1] igmp snooping static-group group-address 224.1.1.1 to 224.1.1.3 vlan 2

# Delete static multicast group 224.1.1.1 from 10GE1/0/1 in all VLANs.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo igmp snooping static-group group-address 224.1.1.1 vlan all

igmp snooping static-group suppress-dynamic-join

Function

The igmp snooping static-group suppress-dynamic-join command disables a device from forwarding IGMP Report and Leave messages that are received from a VLAN or BD and contain a static group address to upstream Layer 3 devices configured with the static group address.

The undo igmp snooping static-group suppress-dynamic-join command enables a device to forward IGMP Report and Leave messages that are received from a VLAN or BD and contain a static group address to upstream Layer 3 devices configured with the static group address.

By default, a device forwards IGMP Report and Leave messages that are received from a VLAN or BD and contain a static group address to upstream Layer 3 devices configured with the static group address.

Format

igmp snooping static-group suppress-dynamic-join

undo igmp snooping static-group suppress-dynamic-join

Parameters

None

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the upstream Layer 3 multicast device is a non-Huawei device and a static group is configured on its interface connected to the switch, users cannot dynamically join or leave the multicast group. You must disable the switch from sending Report and Leave messages that contain static group addresses to the Layer 3 multicast device.

This function takes effect only for IGMPv1 and IGMPv2 message and is invalid for IGMPv3 messages.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

Example

# Disable a device from forwarding IGMP Report and Leave messages that are received from VLAN 10 and contain a static group address to upstream Layer 3 devices configured with the static group address.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] igmp snooping enable
[*HUAWEI-vlan10] igmp snooping static-group suppress-dynamic-join

igmp snooping static-router-port

Function

The igmp snooping static-router-port command configures an interface as a static router port in specified VLANs or BDs.

The undo igmp snooping static-router-port command cancels the router port configuration in specified VLANs or BDs.

By default, an interface is not a static router port.

Format

# Command syntax in the Layer 2 sub-interface view:

igmp snooping static-router-port [ dot1q vid vid | qinq pe-vid pe-vid ce-vid ce-vid ]

undo igmp snooping static-router-port [ dot1q vid vid | qinq pe-vid pe-vid ce-vid ce-vid ]

# Command syntax in other interface views:

igmp snooping static-router-port vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo igmp snooping static-router-port vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }

Parameters

Parameter

Description

Value

dot1q vid vid
Configures a dot1q Layer 2 sub-interface as a static router port. vid specifies the outer VLAN ID of the packets received on the Layer 2 sub-interface.
NOTE:

This parameter is only applicable to Layer 2 sub-interfaces that use the dot1q encapsulation type.

The value is an integer ranging from 1 to 4094.

qinq pe-vid pe-vid ce-vid ce-vid
Configures a QinQ Layer 2 sub-interface as a static router port. pe-vid specifies the outer VLAN ID of the packets received on the Layer 2 sub-interface, and ce-vid specifies the inner VLAN ID of the packets.
NOTE:

This parameter is only applicable to Layer 2 sub-interfaces that use the QinQ encapsulation type.

The values of pe-vid and ce-vid are integers that range from 1 to 4094.

vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

Specifies VLAN IDs. This parameter specifies in which VLANs the current interface functions as a router port.
  • vlan-id1 specifies the first VLAN ID.
  • to vlan-id2 specifies the last VLAN ID. If to vlan-id2 is not specified, the interface functions as a router port only in the VLAN specified by vlan-id1.

The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

The value of vlan-id2 must be greater than the value of vlan-id1. The vlan-id1 and vlan-id2 parameters identify a range of VLANs.

all

Cancels the static router port configuration in all VLANs on the interface.

-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When an interface needs to forward IGMP Report/Leave messages for a long time, configure the interface as a static router port.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

This command takes effect only when the interface is added to the specified VLANs or BDs.

If you run the igmp snooping static-router-port command multiple times, all the configurations take effect.

Example

# Configure 10GE1/0/1 as a static router port in VLAN 2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] igmp snooping static-router-port vlan 2

igmp snooping version

Function

The igmp snooping version command configures the version of IGMP messages that IGMP snooping can process in a VLAN or BD.

The undo igmp snooping version command restores the default IGMP message version.

By default, IGMP snooping can process IGMPv1 and IGMPv2 messages in a VLAN or BD.

Format

igmp snooping version version

undo igmp snooping version

Parameters

Parameter

Description

Value

version

Specifies the version of IGMP messages that can be processed in a VLAN or BD.

NOTE:

The CE6810LI does not support IGMP snooping V3.

The value is an integer ranging from 1 to 3.
  • 1: indicates that IGMP snooping processes only IGMPv1 messages.
  • 2: indicates that IGMP snooping processes IGMPv1 and IGMPv2 messages.
  • 3: indicates that IGMP snooping processes IGMPv1, IGMPv2, and IGMPv3 messages.
NOTE:

When this command is configured in the BD view, version cannot be set to 3.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The IGMP protocol maintains group memberships between Layer 3 multicast devices and hosts. IGMP has three versions: v1, v2, and v3. This command specifies the version of IGMP messages that IGMP snooping can process. Generally, configure the same version on the Layer 2 device as that on the upstream Layer 3 multicast device. If IGMP is not enabled on the Layer 3 multicast device, configure the IGMP message version on the Layer 2 device to be later than or equal to the version running on downstream hosts.

When hosts in a VLAN or BD run different IGMP versions, run the igmp snooping version command to enable the Layer 2 device to process IGMP messages sent from all the hosts.

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

When MAC address-based forwarding is used in a VLAN, the IGMP message version cannot be set to IGMPv3.

When the IGMP message version is changed from IGMPv3 to IGMPv2, the system deletes all the dynamic IGMP snooping entries when the aging time is reached and processes static IGMP snooping entries as follows:
  • Does not delete static entries that have only multicast groups but not multicast sources.
  • Deletes the static entries that have both multicast groups and multicast sources. When the IGMP message version is restored to IGMPv3, the system restores these entries.

Example

# Set the version of the IGMP messages that can be processed by IGMP snooping to IGMPv1 in VLAN 2.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 2
[*HUAWEI-vlan2] igmp snooping enable
[*HUAWEI-vlan2] igmp snooping version 1

multicast drop-unknown

Function

The multicast drop-unknown command configures the switch to drop unknown multicast flows in a VLAN.

The undo multicast drop-unknown command restores the default measure taken for unknown multicast flows.

By default, the switch broadcasts unknown multicast flows in a VLAN.

Format

multicast drop-unknown

undo multicast drop-unknown

Parameters

None

Views

VLAN view, VLAN-range view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Unknown multicast flows are multicast data flows that match no entry in the multicast forwarding table. By default, the switch broadcasts unknown multicast flows in the corresponding VLAN. You can use the multicast drop-unknown command to configure the switch to drop unknown multicast flows, which reduces instant bandwidth usage compared with the broadcast mode.

Configuration Impact

After the multicast drop-unknown command is configured:
  • A CE6870EI switch drops received unknown multicast data flows. As a result, multicast flows may not be forwarded.
  • Switches excluding the CE6870EI drop the original unknown multicast data packets. Multicast data flows can be forwarded after the matching multicast forwarding entries are generated.
  • A switch drops protocol packets with reserved group addresses, such as Protocol Independent Multicast (PIM) Hello packets, Open Shortest Path First (OSPF) packets, and Bidirectional Forwarding Detection (BFD) packets. If no multicast function is enabled, the switch drops IGMP packets. If multicast functions are enabled, the switch processes IGMP packets normally.

Precautions

If a VLANIF interface on a CE6870EI switch has Layer 3 multicast enabled and is the inbound interface of multicast flows, do not use the multicast drop-unknown command in the corresponding VLAN. Otherwise, multicast flows may fail to be forwarded.

The multicast drop-unknown command is not supported in a super-VLAN.

Example

# Drop unknown multicast flows in VLAN 10.
<HUAWEI> system-view
[~HUAWEI] vlan 10
[*HUAWEI-vlan10] multicast drop-unknown

multicast deny-vlan

Function

The multicast deny-vlan command discards multicast data packets sent from specified VLANs on an interface.

The undo multicast deny-vlan command restores multicast forwarding in specified VLANs on an interface.

By default, multicast data packets from all VLANs are forwarded on an interface.

NOTE:

The CE6870EI does not support this command.

Format

multicast deny-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo multicast deny-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

Parameters

Parameter

Description

Value

vlan-id1 [ to vlan-id2 ]

Specifies a VLAN ID.

  • vlan-id1 specifies the first VLAN ID.
  • to vlan-id2 specifies the last VLAN ID. vlan-id2 must be larger than vlan-id1. vlan-id1 and vlan-id2 specify a range of VLANs. If you do not specify to vlan-id2, only one VLAN is specified.

The value is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After you run the multicast deny-vlan command on an interface, multicast packets received from specified VLANs are discarded on the interface. You may need to use this command in the following scenarios:
  • A user-side interface receives multicast packets, but the switch does not need to receive multicast data packets from user-side interfaces. Discarding multicast data packets received on a user-side interface protects the system against forged multicast flows sent from malicious users.
  • Multiple multicast sources in different VLANs are connected to the switch through a Layer 2 network, but the switch only needs to receive multicast data from some of the multicast sources.
  • In some situations, for example, multicast services for users connected to an interface have expired and need to be stopped, the network administrator can use this command on this interface. Then multicast data packets from specified VLANs cannot be sent to the users.

Precautions

If you run the multicast deny-vlan command multiple times, all the configurations take effect.

When using the multicast deny-vlan command on an interface, ensure that the interface has been added to the specified VLANs. Otherwise, the configuration does not take effect.

This command can discard only multicast data packets that meet both of the following conditions:
  • The destination MAC address is an IP multicast MAC address (IPv4 MAC address starting with 0x01-00-5e ).
  • The packet encapsulation protocol is UDP.

Example

# Discard multicast data packets sent from VLANs 100 to 105 on 10GE1/0/1.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10ge1/0/1] multicast deny-vlan 100 to 105

multicast layer-2 forwarding-mode

Function

The multicast layer-2 forwarding-mode command configures the forwarding mode of multicast data in a VLAN.

The undo multicast layer-2 forwarding-mode command restores the default forwarding mode of multicast data.

By default, multicast data is forwarded in a VLAN based on IP addresses.

NOTE:

The CE6810LI does not support this command and uses the MAC address-based forwarding mode for multicast data in a VLAN.

Format

multicast layer-2 forwarding-mode { ip | mac }

undo multicast layer-2 forwarding-mode [ mac ]

Parameters

Parameter Description Value
ip

Forwards multicast data based on IP addresses.

-
mac

Forwards multicast data based on MAC addresses.

-

Views

VLAN view, VLAN-range view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After Layer 2 multicast is enabled on a Layer 2 device, the Layer 2 device maintains a Layer 2 multicast forwarding table. When receiving a multicast packet, the Layer 2 device searches the Layer 2 multicast forwarding table for the outbound interface based on the multicast address of the packet. The Layer 2 device determines the outbound interface based on the IP multicast address or IP multicast MAC address, depending on the configured Layer 2 multicast forwarding mode.

Multiple multicast IP addresses may be mapped to one MAC address. If multicast data is forwarded based on MAC addresses, multicast data may be sent to the users who do not order the multicast data. To prevent this problem, use the IP address-based forwarding mode on devices with Layer 3 functions.

Configuration Impact

When multicast forwarding in a VLAN is based on MAC addresses, the IGMP message version cannot be set to IGMPv3.

Precautions

This command can only be used in VLANs with IGMP snooping disabled. The configured Layer 2 multicast forwarding mode takes effect only after you run the igmp snooping enable (VLAN view) command to enable IGMP snooping in the VLAN.

If the VLAN is configured as a TRILL CE VLAN and enabled with IGMP snooping, the multicast packets in the VLAN are forwarded based on MAC addresses, and the forwarding mode cannot be changed.

Example

# After IGMP snooping is enabled globally, configure the switch to forward multicast data in VLAN 100 based on MAC addresses.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] multicast layer-2 forwarding-mode mac
[*HUAWEI-vlan100] igmp snooping enable

multicast layer-2 invalid-packet

Function

The multicast layer-2 invalid-packet command sets the maximum number of invalid Layer 2 multicast protocol packets allowed on a device.

The undo multicast layer-2 invalid-packet command deletes the set maximum number of invalid Layer 2 multicast protocol packets allowed on a device.

By default, a multicast device can store a maximum of 10 invalid Layer 2 multicast protocol packets.

Format

multicast layer-2 invalid-packet igmp snooping max-count max-number

undo multicast layer-2 invalid-packet igmp snooping

Parameters

Parameter Description Value
max-count max-number Specifies the maximum number of invalid packets allowed on a device. The value is an integer ranging from 1 to 100.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

If forwarding entries cannot be created on a multicast network, set the maximum number of invalid Layer 2 multicast protocol packets allowed on a device. Then, you can run the display igmp snooping invalid-packet command to locate and rectify the fault based on statistics and detailed information about invalid Layer 2 multicast protocol packets.

Example

# Set the maximum number of invalid IGMP Snooping protocol packets allowed on a device to 20.

<HUAWEI> system-view
[~HUAWEI] multicast layer-2 invalid-packet igmp snooping max-count 20

multicast layer-2 source-lifetime

Function

The multicast layer-2 source-lifetime command sets the aging time for an (S, G) or (*, G) entry triggered by multicast traffic in a VLAN or BD.

undo multicast layer-2 source-lifetime command restores the default configuration in a VLAN or BD.

By default, the aging time of an (S, G) or (*, G) entry triggered by multicast traffic in a VLAN or BD is 210s.

Format

multicast layer-2 source-lifetime lifetime

undo multicast layer-2 source-lifetime

Parameters

Parameter Description Value
lifetime

Specifies the aging time of an (S, G) or (*, G) entry triggered by multicast traffic in a VLAN or BD.

The value is an integer that ranges from 60 to 1000 in the BD view and from 60 to 65535 in other views, in seconds.

Views

VLAN view, VLAN-range view, BD view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If no multicast data is sent to a multicast group, matching (S, G) or (*, G) entries need to be deleted. Therefore, the device needs to periodically detect presence of multicast flows sent to the multicast group to determine whether to delete the matching entry. To address this problem, the multicast layer-2 source-lifetime command can be used to set the aging time for entries triggered by multicast traffic based on system performance.

Configure aging time of (S, G) or (*, G) entries according to the number of the multicast forwarding entries used. If a large number of multicast entries are used on your network, a too short aging time will make the multicast forwarding table incomplete. However, if the aging time is too long, invalid entries will be retained for a long time, wasting system resources. The following table lists the recommended aging time values for different quantities of multicast forwarding entries.

Table 10-95  Recommended aging time for multicast forwarding entries in a VLAN

Number of Entries

Recommended Aging Time

Within 1000

Default value

1000 to 2000

1000 seconds

2000 to 8000

2000 seconds

More than 8000

3000 seconds or 4000 seconds

Table 10-96  Recommended aging time for multicast forwarding entries in a BD

Number of Entries

Recommended Aging Time

Within 1000

Default value

1000 or more

1000 seconds

Prerequisites

IGMP snooping has been enabled globally using the igmp snooping enable (system view) command.

Precautions

If IGMP snooping is disabled in the specified VLAN or BD, the configuration succeeds but does not take effect until IGMP snooping is enabled in the VLAN or BD. To enable IGMP snooping in a VLAN or BD, run the igmp snooping enable (VLAN or BD view) command.

Example

# Set the timer for deleting multicast forwarding entries triggered by multicast traffic to 100 seconds in VLAN 100.

<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] igmp snooping enable
[*HUAWEI-vlan100] multicast layer-2 source-lifetime 100

reset igmp snooping group

Function

The reset igmp snooping group command deletes dynamic group memberships learned by IGMP snooping.

Format

reset igmp snooping group { all | vlan { all | vlan-id } | bridge-domain { all | bd-id } }

Parameters

Parameter

Description

Value

all

Deletes all dynamic group memberships learned by IGMP snooping.

-

vlan { all | vlan-id }

Deletes the dynamic group memberships of a specified VLAN. If all is specified, the system deletes IGMP dynamic group memberships of all VLANs.

The value of vlan-id is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain { all | bd-id }

Deletes the dynamic group memberships of a specified BD. If all is specified, the system deletes IGMP dynamic group memberships of all BDs.

The value of bd-id is an integer that ranges from 1 to 16777215.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When multicast groups on a network change, the switch generates new Layer 2 multicast forwarding entries until the aging time of member ports expire. To enable the switch to generate new multicast forwarding entries immediately, use the reset igmp snooping group command to delete existing group memberships.

Precautions

Deleting group memberships in a VLAN or BD temporarily interrupts multicast forwarding in the VLAN or BD. The switch generates new forwarding entries only when receiving IGMP Report messages from hosts in the VLAN or BD. The hosts can then receive multicast data.

This command cannot delete static group memberships.

This command is valid only for VLANs with IGMP snooping enabled and is invalid for a VLAN if IGMP is enabled on the corresponding VLANIF interface.

Example

# Delete all dynamic group memberships learned by IGMP snooping.

<HUAWEI> reset igmp snooping group all

# Delete dynamic group memberships in VLAN 3.

<HUAWEI> reset igmp snooping group vlan 3

reset igmp snooping qinq-group

Function

The reset igmp snooping qinq-group command deletes multicast entries on Dot1q termination Layer 3 sub-interfaces.

NOTE:

The CE6810LI does not support this command.

Format

reset igmp snooping qinq-group all

reset igmp snooping qinq-group interface interface-type interface-number.subinterface-number [ pe-vid pe-vid [ group-address [ mask { group-mask | group-mask-length } ] [ source-address [ mask { source-mask | source-mask-length } ] ] ] ]

Parameters

Parameter Description Value
all Deletes multicast entries on all Dot1q termination Layer 3 sub-interfaces. -
interface interface-type interface-number.subinterface-number Deletes multicast entries on a specified Dot1q termination Layer 3 sub-interface. interface-type interface-number.subinterface-number specifies the type and number of the interface. -
pe-vid pe-vid Specifies the VLAN ID of the Dot1q termination Layer 3 sub-interface. The value is an integer ranging from 1 to 4094.
group-address Specifies a multicast group address. The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
mask Indicates a mask. -
group-mask Specifies the mask of a multicast group address. This value is in dotted decimal notation.
group-mask-length Specifies the mask length of a multicast group address. The value is an integer ranging from 4 to 32.
source-address Specifies a multicast source address. This value is in dotted decimal notation.
source-mask Specifies the mask of a multicast source address. This value is in dotted decimal notation.
source-mask-length Specifies the mask length of a multicast source address. The value is an integer ranging from 0 to 32.

Views

User view

Default Level

3: Management level

Usage Guidelines

If multicast entries on all Dot1q termination Layer 3 sub-interfaces are unnecessary, run the reset igmp snooping qinq-group all command to delete the multicast entries.

If multicast entries on a specified Dot1q termination Layer 3 sub-interface are unnecessary, run the reset igmp snooping qinq-group interface command to delete the multicast entries.

Example

# Delete multicast entries on all Dot1q termination Layer 3 sub-interfaces.

<HUAWEI> reset igmp snooping qinq-group all

# Delete multicast entries on a specified Dot1q termination Layer 3 sub-interface.

<HUAWEI> reset igmp snooping qinq-group interface 10ge 1/0/1.1

reset igmp snooping statistics

Function

The reset igmp snooping statistics command clears IGMP snooping statistics.

Format

reset igmp snooping statistics { all | vlan { all | vlan-id } | bridge-domain { all | bd-id } }

Parameters

Parameter

Description

Value

all

Clears all the IGMP snooping statistics.

-

vlan { all | vlan-id }

Clears IGMP snooping statistics of a specified VLAN. If all is specified, the system clears IGMP snooping statistics of all VLANs.

The value of vlan-id is an integer that ranges from 1 to 4094. It cannot be any reserved VLAN IDs configured using the vlan reserved command.

bridge-domain { all | bd-id }

Clears IGMP snooping statistics of a specified BD. If all is specified, the system clears IGMP snooping statistics of all BDs.

The value of bd-id is an integer that ranges from 1 to 1677721532768.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To analyze the IGMP snooping statistics collected in a certain period, run this command to clear the previous statistics. After a while, run the display igmp snooping statistics command to view the IGMP snooping statistics.

Precautions

The cleared IGMP snooping statistics cannot be restored.

Example

# Clear IGMP snooping statistics of VLAN 2.

<HUAWEI> reset igmp snooping statistics vlan 2

ssm-mapping policy

Function

The ssm-mapping policy command creates an SSM mapping policy and displays the SSM mapping policy view.

The undo ssm-mapping policy command deletes an SSM mapping policy.

By default, no SSM mapping policy is configured.

NOTE:

The CE6810LI does not support this command.

Format

ssm-mapping policy policy-name

undo ssm-mapping policy policy-name

Parameters

Parameter Description Value
policy-name Specifies the name of an SSM mapping policy. The value is a string of 1 to 31 case-insensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To use the SSM mapping function to provide Layer 2 multicast service, configure mappings between group addresses and multicast source addresses. An SSM mapping can be configured using the igmp snooping ssm-mapping command in the VLAN view or using the group command in the SSM mapping policy view. The ssm-mapping policy command creates an SSM mapping policy and displays the SSM mapping policy view. An SSM mapping policy can be applied to multiple VLANs.

Follow-up Procedure

Run the group command in the SSM mapping policy view to configure mappings between group addresses and source addresses.

Precautions

An SSM mapping policy takes effect only if you specify the name of this policy when running the igmp snooping ssm-mapping enable [ policy policy-name ] command in the VLAN view to enable SSM mapping.

When you use the undo ssm-mapping policy policy-name command to delete an SSM mapping policy, all configurations in the SSM mapping policy are deleted.

Example

# Create SSM mapping policy policy1.

<HUAWEI> system-view
[~HUAWEI] ssm-mapping policy policy1
[*HUAWEI-ssm-map-policy1] 
Translation
Download
Updated: 2019-03-21

Document ID: EDOC1000166501

Views: 52395

Downloads: 339

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next