No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

S7700 and S9700 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VLAN-based Layer 2 Multicast CAC Commands

VLAN-based Layer 2 Multicast CAC Commands

Command Support

Commands provided in this section and all the parameters in the commands are supported by all switch models by default, unless otherwise specified. For details, see specific commands.

channel (Layer 2 multicast CAC)

Function

The channel command creates a global channel or VLAN channel and displays the channel view.

The undo channel command deletes a global channel or VLAN channel.

By default, no global or VLAN channel exists in the system.

Format

channel channel-name [ type { asm | ssm } ]

undo channel channel-name

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.
type { asm | ssm } Specifies a channel type. The value asm indicates an any-source multicast (ASM) channel, and the value ssm indicates a source-specific multicast (SSM) channel. -

Views

Global l2-multicast-channel view, VLAN l2-multicast-channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure Layer 2 multicast CAC for a channel, you must create a channel and run the group command in the channel view to specify a group address range for the channel. The channel command is used to create a channel and enter the channel view.

Before configuring a group address range for a channel, use the channel command to specify a name and a multicast model (ASM or SSM) for the channel.

Follow-up Procedure

After configuring a global or VLAN channel, you can configure Layer 2 multicast CAC limits to control the number of multicast groups in the channel at different levels.

Precautions

You must specify the type parameter when creating a channel. The type of a channel is unchangeable after the channel is created. To change the channel type, delete the channel, and then create the channel with the new type.

A VLAN channel cannot have the same name as a global channel.

Example

# Create a global channel A1 and set the channel type to ASM.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] channel A1 type asm
[HUAWEI-l2-channel-glb-A1]

# Create a channel A2 in VLAN 10 and set the channel type to SSM.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vlan 10
[HUAWEI-l2-channel-vlan10] channel A2 type ssm
[HUAWEI-l2-channel-vlan10-A2]

display l2-multicast limit

Function

The display l2-multicast limit command displays Layer 2 multicast CAC configuration and statistics.

Format

display l2-multicast limit [ configuration | statistics ] [ global | interface interface-type interface-number | vlan [ vlan-id1 [ to vlan-id2 ] [ interface interface-type interface-number ] ] ] [ channel channel-name ]

Parameters

Parameter Description Value
configuration Displays the current Layer 2 multicast CAC configuration. -
statistics Displays the current Layer 2 multicast CAC statistics. -
global Displays the global Layer 2 multicast CAC configuration or statistics. -
interface interface-type interface-number Displays the Layer 2 multicast CAC configuration or statistics on a specified interface. -
vlan [ vlan-id1 [ to vlan-id2 ] ] Displays the Layer 2 multicast CAC configuration or statistics in a specified VLAN. The value is an integer that ranges from 1 to 4094.
channel channel-name Displays the Layer 2 multicast CAC configuration or statistics for a specified channel. The value is a string of 1 to 31 case-sensitive characters without spaces.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If you do not specify the configuration or statistics keyword in the command, the command displays both Layer 2 multicast CAC configuration and statistics. If you specify either keyword, the command displays Layer 2 multicast CAC configuration or statistics as specified.

Example

# Display all the Layer 2 multicast CAC configurations and statistics.

<HUAWEI> display l2-multicast limit
L2-multicast limit information, The unit of bandwidth is Kbits/sec
------------------------------------------------------------------------------
                                        ConfigEntries  ConfigBandwidth
                                        CurrentEntries CurrentBandwidth
------------------------------------------------------------------------------
Global limit information:
------------------------------------------------------------------------------
                                               200            ----------
                                               14             ----------
Global channel limit information:
------------------------------------------------------------------------------
                                       ch1     100            ----------
                                               0              ----------
VLAN 1 limit information:
------------------------------------------------------------------------------
                                               100            ----------
                                               0              ----------
VLAN 1 channel limit information:
------------------------------------------------------------------------------
                                       ch2     100            ----------
                                               0              ----------
interface GigabitEthernet3/0/0 limit information:
------------------------------------------------------------------------------
                                               100            ----------
                                               0              ----------
interface GigabitEthernet3/0/0 channel limit information:
------------------------------------------------------------------------------
                                       ch3     100            ----------
                                               0              ----------
interface GigabitEthernet3/0/0 VLAN 1 limit information:
------------------------------------------------------------------------------
                                               100            ----------
                                               0              ----------
interface GigabitEthernet3/0/0 VLAN 1 channel limit information:
------------------------------------------------------------------------------
                                       ch4     50             ----------
                                               0              ----------
------------------------------------------------------------------------------
Table 8-147  Description of the display l2-multicast limit command output

Item

Description

ConfigEntries

Limit on the number of multicast groups.

CurrentEntries

Number of existing multicast entries.

Global limit information

Global Layer 2 multicast CAC limit. This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] command.

Global channel limit information

Global Layer 2 multicast CAC limit for a channel. This parameter is configured using the l2-multicast limit channel channel-name max-entry count command.

VLAN 1 limit information

Layer 2 multicast CAC limit for VLAN 1. This parameter is configured using the l2-multicast limit max-entry count vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> [ except acl-number ] command.

VLAN 1 channel limit information

Layer 2 multicast CAC limit for a channel in VLAN 1. This parameter is configured using the l2-multicast limit channel channel-name max-entry count vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> command.

interface GigabitEthernet3/0/0 limit information

Layer 2 multicast CAC limit on GE3/0/0. This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] command.

interface GigabitEthernet3/0/0 channel limit information

Layer 2 multicast CAC limit for a channel on GE3/0/0. This parameter is configured using the l2-multicast limit channel channel-name max-entry count command.

interface GigabitEthernet3/0/0 VLAN 1 limit information

Layer 2 multicast CAC limit for VLAN 1 on GE3/0/0. This parameter is configured using the l2-multicast limit max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ] command.

interface GigabitEthernet3/0/0 VLAN 1 channel limit information

Layer 2 multicast CAC limit for a channel in VLAN 1 on GE3/0/0. This parameter is configured using the l2-multicast limit channel channel-name max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] command.

display l2-multicast-channel

Function

The display l2-multicast-channel command displays information about channels.

Format

display l2-multicast-channel [ vlan [ vlan-id1 [ to vlan-id2 ] ] | global ] [ channel channel-name ]

Parameters

Parameter Description Value
vlan [ vlan-id1 [ to vlan-id2 ] ] Displays information about channels in specified VLANs. The value is an integer that ranges from 1 to 4094.
global Displays information about global channels. -
channel channel-name Displays information about a specified channel. The value is a string of 1 to 31 case-sensitive characters without spaces.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can use this command to view information about global channels or channels configured in specified VLANs.

Example

# Display information about all channels.

<HUAWEI> display l2-multicast-channel
Channel information on Global
 ChannelName                     Group/Mask         Source/Mask        Bandwidth
--------------------------------------------------------------------------------
 aa                              232.111.111.0/24   10.222.222.0/24    0
--------------------------------------------------------------------------------
 tv1                             225.1.1.0/24       *                  0
--------------------------------------------------------------------------------

Channel information on VLAN 10
 ChannelName                     Group/Mask         Source/Mask        Bandwidth
--------------------------------------------------------------------------------
 tv2                             232.111.1.0/24     10.222.222.0/24    0
--------------------------------------------------------------------------------
 tv3                             226.1.1.0/24       *                  0
--------------------------------------------------------------------------------
Table 8-148  Description of the display l2-multicast-channel command output

Item

Description

Channel information on Global

Information about global channels.

Channel information on VLAN 10

Information about channels in VLAN 10.

ChannelName

Name of a channel.

Group/Mask

Multicast group address/mask for a channel.

Source/Mask

Multicast source address/mask for a channel.

Bandwidth

Bandwidth configured for a channel.

This field displays 0 because the switch does not support the bandwidth configuration currently.

group (Layer 2 multicast CAC)

Function

The group command configures a group address range for a global or VLAN channel.

The undo group command deletes the group address range configured for a global or VLAN channel.

By default, a global or VLAN channel has no group address range configured.

Format

group group-address { group-mask-length | group-mask } [ source source-address { source-mask-length | source-mask } ]

undo group group-address { group-mask-length | group-mask } [ source source-address { source-mask-length | source-mask } ]

Parameters

Parameter Description Value
group group-address Specifies a group address for the channel. The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
group-mask-length Specifies the mask length of the group address. The value is an integer that ranges from 4 to 32.
group-mask Specifies the mask of the group address. The value is in dotted decimal notation.
source source-address Specifies a multicast source address for the channel. The value is in dotted decimal notation.
source-mask-length Specifies the mask length of the multicast source address. The value is an integer that ranges from 8 to 32.
source-mask Specifies the mask of the multicast source address. The value is in dotted decimal notation.

Views

Global channel view, VLAN channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To limit the number of programs in a channel, create this channel and specify a group address range for the channel.

Precautions

The group address range of a global channel cannot overlap group address ranges of any other global channels or VLAN channels.

Each channel can be configured with a maximum of 16 group address ranges.

Example

# Configure a group address range for global channel A1.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] channel A1
[HUAWEI-l2-channel-glb-A1] group 237.0.0.0 30 source 10.1.1.1 32

# Configure a group address range for channel A2 in VLAN 10.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vlan 10
[HUAWEI-l2-channel-vlan10] channel A2
[HUAWEI-l2-channel-vlan10-A2] group 238.0.0.0 30 source 10.2.2.2 32

l2-multicast limit channel (interface view)

Function

The l2-multicast limit channel command sets the maximum number of multicast groups in a channel allowed on an interface or in specified VLANs on an interface.

The undo l2-multicast limit channel command deletes the maximum number of multicast groups in a channel allowed on an interface or in specified VLANs on an interface.

By default, the number of multicast groups in a channel is not limited on any interface or VLANs on an interface.

Format

l2-multicast limit channel channel-name max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ]

undo l2-multicast limit channel channel-name max-entry [ count ] [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
vlan { vlan-id1 [ to vlan-id2 ] } Specifies a range of VLAN IDs for multicast groups in the specified channel. vlan-id1 and vlan-id2 are integers that range from 1 to 4094.

Views

Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured on an interface, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries on the interface reaches the limit.

Example

# On GE1/0/1, limit number of multicast groups in channel 1 to 1000 in VLAN 10.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] l2-multicast limit channel channel1 max-entry 1000 vlan 10

l2-multicast limit channel (system view)

Function

The l2-multicast limit channel command sets the maximum number of multicast groups in a channel allowed in the system or specified VLANs.

The undo l2-multicast limit channel command deletes the maximum number of multicast groups in a channel allowed in the system or specified VLANs.

By default, the number of multicast groups in a channel is not limited in the system or in a VLAN.

Format

l2-multicast limit channel channel-name max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ]

undo l2-multicast limit channel channel-name max-entry [ count ] [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
vlan { vlan-id1 [ to vlan-id2 ] } Specifies a range of VLAN IDs. vlan-id1 and vlan-id2 are integers that range from 1 to 4094.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Example

# Limit the number of multicast groups in channel 1 to 1000 in VLAN 10, VLAN 20, and VLAN 30.

<HUAWEI> system-view
[HUAWEI] l2-multicast limit channel channel1 max-entry 1000 vlan 10 20 30

l2-multicast limit (interface view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed on an interface or specified VLANs on an interface.

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed on an interface or specified VLANs on an interface.

By default, the number of multicast groups is not limited on any interface or any VLAN on an interface.

Format

l2-multicast limit max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ]

undo l2-multicast limit max-entry [ count ] [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
vlan { vlan-id1 [ to vlan-id2 ] } Specifies a range of VLAN IDs. The vlan-id1 and vlan-id2 are integers that range from 1 to 4094.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.

Views

Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

Example

# On GE1/0/1, limit the number of multicast groups in VLAN 10 to 1000.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] l2-multicast limit max-entry 1000 vlan 10

l2-multicast limit (system view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed in the system or specified VLANs.

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed in the system or specified VLANs.

By default, the number of multicast groups is not limited in the system or any VLAN.

Format

l2-multicast limit max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ]

undo l2-multicast limit max-entry [ count ] [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.
vlan { vlan-id1 [ to vlan-id2 ] } Specifies a range of VLAN IDs. vlan-id1 and vlan-id2 are integers that range from 1 to 4094.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

Example

# Limit the number of multicast groups in the system to 100.

<HUAWEI> system-view
[HUAWEI] l2-multicast limit max-entry 100

l2-multicast-channel

Function

The l2-multicast-channel command displays the global l2-multicast-channel view.

The undo l2-multicast-channel command deletes all the configurations for global channels.

Format

l2-multicast-channel

undo l2-multicast-channel

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

To configure Layer 2 multicast CAC for global channels, enter the global l2-multicast-channel view first.

Example

# Enter the global l2-multicast-channel view.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb]

l2-multicast-channel vlan

Function

The l2-multicast-channel vlan command displays the l2-multicast-channel view of a VLAN.

The undo l2-multicast-channel vlan command deletes all the configurations for channels in a VLAN.

Format

l2-multicast-channel vlan vlan-id

undo l2-multicast-channel vlan vlan-id

Parameters

Parameter Description Value
vlan vlan-id Specifies the VLAN to which channels belong. The value is an integer that ranges from 1 to 4094.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure Layer 2 multicast CAC for channels in a specified VLAN, enter the l2-multicast-channel view of the VLAN.

Precautions

The VLAN specified in this command cannot be a user VLAN used in the multicast VLAN function or a super VLAN used in the VLAN aggregation function.

Example

# Enter the l2-multicast-channel view of VLAN 10.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vlan 10
[HUAWEI-l2-channel-vlan10]

reset l2-multicast dynamic-group

Function

The reset l2-multicast dynamic-group command clears dynamic IGMP snooping entries.

Format

reset l2-multicast dynamic-group [ source-address source-address ] group-address group-address vlan vlan-id [ interface interface-type interface-number ]

Parameters

Parameter Description Value
source-address source-address

Clears the dynamic IGMP snooping entries of a specified multicast source address.

The value is expressed in dotted decimal notation.
group-address group-address

Clears the dynamic IGMP snooping entries of a specified group address.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
vlan vlan-id

Clears the dynamic IGMP snooping entries in a specified VLAN.

The value is an integer that ranges from 1 to 4094.
interface interface-type interface-number

Clears the dynamic IGMP snooping entries on a specified interface.

-

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

If the number of dynamic forwarding entries on the device has exceeded the newly configured Layer 2 multicast CAC limit, the device cannot generate new dynamic forwarding entries after receiving multicast requests. You can run this command to clear dynamic forwarding entries so that the device can generate multicast forwarding entries again.

Precautions

Clearing dynamic multicast forwarding entries will cause temporary interruption of multicast forwarding. Exercise caution when performing this operation.

Example

# Clear the dynamic IGMP snooping entries of group 225.0.0.1 in VLAN 10.

<HUAWEI> reset l2-multicast dynamic-group group-address 225.0.0.1 vlan 10

unspecified-channel deny (Layer 2 multicast CAC)

Function

The unspecified-channel deny command prevents the switch from forwarding multicast data to the groups out of the group address range configured for channels.

The undo unspecified-channel deny command enables the switch to forward multicast data to the groups out of the group address range configured for channels.

By default, the switch can create Layer 2 multicast forwarding entries for the groups out of the group address range configured for channels and forward multicast data to the groups.

Format

unspecified-channel deny

undo unspecified-channel deny

Parameters

None

Views

Global l2-multicast-channel view, VLAN l2-multicast-channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If you want the switch to forward multicast data only to groups in channels, use this command to filter out multicast data sent to groups out of the group address range configured for global channels or channels in a VLAN.

Precautions

After you run the unspecified-channel deny command, the switch does not create Layer 2 multicast forwarding entries for the groups that are not in the configured group address range.

For the Layer 2 multicast forwarding entries that have been created for the groups out of the group address range, the switch does not delete them after you run this command. After these Layer 2 multicast forwarding entries are aged out, the switch stops forwarding multicast data to these groups.

Example

# Prevent the switch from forwarding multicast data to the groups out of the group address range configured for global channels.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] unspecified-channel deny

# Prevent the switch from forwarding multicast data to the groups out of the group address range configured for channels in VLAN 10.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vlan 10
[HUAWEI-l2-channel-vlan10] unspecified-channel deny
Translation
Download
Updated: 2019-10-18

Document ID: EDOC1000178288

Views: 29185

Downloads: 109

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next