No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

S7700 and S9700 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Layer 3 Multicast CAC Commands

Layer 3 Multicast CAC Commands

Command Support

Commands provided in this section and all the parameters in the commands are supported by all switch models by default, unless otherwise specified. For details, see specific commands.

channel (Layer 3 multicast CAC)

Function

The channel command creates a channel and displays the channel view.

The undo channel command deletes a channel.

By default, no channel exists in the system.

Format

channel channel-name [ type { asm | ssm } ]

undo channel channel-name

Parameters

Parameter Description Value
channel-name Specifies a channel name. The value is a string of 1 to 15 case-sensitive characters without spaces.
type { asm | ssm } Specifies a channel type. The value asm indicates an any-source multicast (ASM) channel, and the value ssm indicates a source-specific multicast (SSM) channel. -

Views

Multicast-channel view of the public network instance, multicast-channel view of a VPN instance

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure Layer 3 multicast CAC for a channel, you must create a channel and run the group command in the channel view to specify a group address range for the channel.

Before configuring a group address range for a channel, use the channel command to specify a name and a multicast model (ASM or SSM) for the channel.

Prerequisites

IP multicast routing has been enabled using the multicast routing-enable command in the public network instance or VPN instance view.

Follow-up Procedure

After configuring a channel, you can configure Layer 3 multicast CAC limits to control the number of multicast groups in the channel at different levels.

Precautions

You must specify the type parameter when creating a channel. The type of a channel is unchangeable after the channel is created. To change the channel type, delete the channel, and then create the channel with the new type.

A maximum of 256 channels can be created in an instance.

Example

# Create a channel SDTV and set the channel type to ASM.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] channel SDTV type asm
[HUAWEI-multicast-channel-SDTV]
Related Topics

display multicast limit global

Function

The display multicast limit global command displays the global limit on the number of multicast routing entries and the number of existing multicast routing entries.

Format

display multicast [ vpn-instance vpn-instance-name ] limit [ channel channel-name ] global

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Specifies a VPN instance name. The value must be an existing VPN instance name.
channel channel-name Specifies a channel name. The value is a string of 1 to 15 case-sensitive characters without spaces.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

In the ASM model, all the (*, G) and (S, G) records for the same group are counted as one entry. In the SSM model, each (S, G) record is counted as one entry.

Example

# Display the global limit on the number of entries for channel SDTV in the public network instance and the number of existing entries.

<HUAWEI> display multicast limit channel SDTV global
Multicast limitation information of instance: public net
  -----------------------------------------------------------------------
  Channel Program                  Mode  Entries  Threshold  Used-Entries
  -----------------------------------------------------------------------
  SDTV                             ASM   30       -          30
  -----------------------------------------------------------------------
Table 8-89  Description of the display multicast limit global command output

Item

Description

Channel Program

Name of a channel.

Mode

Channel type, ASM or SSM.

Entries

Limit on the number of multicast routing entries.

Threshold

Alarm threshold on PIM routing entries. When the number of PIM routing entries exceeds the threshold, the system records alarm information in logs. The alarm threshold is configured using the multicast limit limit threshold threshold command. If no alarm threshold is configured, this field displays -.

Used-Entries

Number of existing multicast routing entries.

display multicast limit out-interface

Function

The display multicast limit out-interface command displays the limit on the number of multicast routing entries and the number of existing routing multicast entries on an outbound interface.

Format

display multicast [ vpn-instance vpn-instance-name ] limit [ channel channel-name ] out-interface { interface-type interface-number | all }

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Specifies a VPN instance name. The value must be an existing VPN instance name.
channel channel-name Displays the limit on the number of multicast routing entries and the number of existing routing multicast entries for a specified channel. The value is a string of 1 to 15 case-sensitive characters without spaces.
interface-type interface-number Displays the limit on the number of multicast routing entries and the number of existing routing multicast entries on a specified interface. -
all Displays the limit on the number of multicast routing entries and the number of existing routing multicast entries on all interfaces. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

In the ASM model, all the (*, G) and (S, G) records for the same group are counted as one entry. In the SSM model, each (S, G) record is counted as one entry.

Example

# Display the limit on the number of entries and the number of existing entries on VLANIF100.

<HUAWEI> display multicast limit out-interface vlanif 100
Multicast limitation information of instance: public net
 All Channel: 
 ---------------------------------------------------------------------
 Interface      Entries  Bandwidth(kbit/s) Used-Entries Used-Bandwidth(kbit/s)
 ---------------------------------------------------------------------
 Vlanif100      20       -                 15           -
 ---------------------------------------------------------------------
Table 8-90  Description of the display multicast limit out-interface command output

Item

Description

Interface

Name of an interface with multicast CAC configured.

Entries

Limit on the number of multicast routing entries.

Bandwidth(kbit/s)

Limit on the bandwidth of entries

Used-Entries

Number of existing multicast routing entries.

Used-Bandwidth(kbit/s)

Statistics about the bandwidth of current entries

group (Layer 3 multicast CAC)

Function

The group command configures a group address range for a channel.

The undo group command deletes the group address range configured for a channel.

By default, a channel has no group address range configured.

Format

group group-address mask { group-mask-length | group-mask } [ source source-address mask { source-mask-length | source-mask } ] [ per-bandwidth traffic-rate ]

undo group group-address mask { group-mask-length | group-mask } [ source source-address mask { source-mask-length | source-mask } ]

Parameters

Parameter Description Value
group group-address Specifies a group address for the channel. The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
group-mask-length Specifies the mask length of the group address. The value is an integer that ranges from 4 to 32.
group-mask Specifies the mask of the group address. The value is in dotted decimal notation.
source source-address Specifies a multicast source address for the channel. The value is in dotted decimal notation.
source-mask-length Specifies the mask length of the multicast source address. The value is an integer that ranges from 8 to 32.
source-mask Specifies the mask of the multicast source address. The value is in dotted decimal notation.
per-bandwidth traffic-rate Specifies the bandwidth reserved for each multicast group. The value is an integer that ranges from 1 to 1048576, expressed in kbit/s. The default value is 2048 kbit/s, that is, 2 Mbit/s.

Views

Public network instance channel view, VPN instance channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To limit the number of programs in a channel, create this channel and specify a group address range for the channel.

Prerequisites

IP multicast routing has been enabled using the multicast routing-enable command in the public network instance or VPN instance view.

Precautions

  • The group address and mask define the range of multicast groups. That is, multicast groups in a specified range belong to a channel.

  • A minimum of one multicast group rather than source/group should be configured for a channel of the Any-Source Multicast (ASM) model.

  • A minimum of one (S, G) entry rather than (*, G) entry should be configured for a channel of the Source-Specific Multicast (SSM) model.

  • A multicast group can belong to only one channel.

    • When a channel is configured with G1/Mask, the channel and other channels cannot be configured with G2/Mask that overlaps with G1/Mask, and other channels cannot be configured with (G1/Mask, S/Mask) or (G2/Mask, S/Mask) that overlaps with G1/Mask.

    • When a channel is configured with (G1/Mask, S1/Mask), the channel and other channels cannot be configured with (G2/Mask, S2/Mask). G2/Mask overlaps with G1/Mask, and S2/Mask overlaps with S1/Mask. Other channels cannot be configured with G1/Mask or G2/Mask that overlaps with G1/Mask.

  • Each channel can be configured with a maximum of 16 group address ranges.

Example

# Configure group address range 224.1.1.0/24 for channel SDTV.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] channel SDTV type asm
[HUAWEI-multicast-channel-SDTV] group 224.1.1.0 mask 24
Related Topics

multicast-channel

Function

The multicast-channel command enables Layer 3 multicast CAC and displays the multicast-channel view.

The undo multicast-channel command disables Layer 3 multicast CAC and deletes all the configurations related to Layer 3 multicast CAC.

By default, Layer 3 multicast CAC is disabled.

Format

multicast-channel [ vpn-instance vpn-instance-name ]

undo multicast-channel [ vpn-instance vpn-instance-name ]

Parameters

Parameter Description Value
vpn-instance vpn-instance-name Specifies the name of a VPN instance. The value must be an existing VPN instance name.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Before configuring other Layer 3 multicast CAC functions, use this command to enable Layer 3 multicast CAC.

Prerequisites

IP multicast routing has been enabled using the multicast routing-enable command in the public network instance or VPN instance view.

Precautions

Layer 3 multicast CAC can be deployed on an IPv4 network running PIM-SM.

To implement Layer 3 multicast CAC, enable PIM-SM and IGMP (or configure static IGMP groups) on user-side interfaces.

After you run the undo multicast-channel command, enter Y to confirm your operation or N to cancel the operation. This command will delete all the Layer 3 multicast CAC configurations in the current instance. Exercise caution when using this command.

Example

# Enable Layer 3 multicast CAC in the public network instance and enter the multicast-channel view.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel]

multicast limit channel out

Function

The multicast limit channel out command sets the maximum number of multicast groups in a channel allowed on an interface, that is, the maximum number of PIM routing entries with this interface as the outbound interface for the channel.

The undo multicast limit channel out command deletes the maximum number of multicast groups in a channel allowed on an interface.

By default, the number of multicast groups in a channel is not limited on an interface.

Format

multicast limit channel channel-name out { max-entry limit | bandwidth traffic-rate } *

undo multicast limit channel channel-name out

Parameters

Parameter Description Value
channel-name Specifies a channel name. The value is a string of 1 to 15 case-sensitive characters without spaces.
max-entry limit Specifies the maximum number of PIM routing entries with the specified interface as the outbound interface for the channel. The value is an integer that ranges from 1 to 16384.
bandwidth traffic-rate Specifies the maximum available bandwidth on the current interface for a channel. The value is an integer that ranges from 1 to 10485760, expressed in kbit/s.

Views

Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Ethernet sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view, 100GE sub-interface view, Eth-Trunk sub-interface view, VLANIF interface view, Loopback interface view, tunnel interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 3 multicast CAC to limit the number of PIM routing entries. Layer 3 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Prerequisites

The specified channel has been created using the channel command.

Precautions

After a Layer 3 multicast CAC limit is configured on an interface, the system no longer generates PIM routing entries if the number of PIM routing entries on the interface reaches the limit.

The system counts PIM routing entries as follows:

  • In ASM group address range, all the (*, G) and (S, G) records for the same group are counted as one entry.

  • In the SSM group address range, each (S, G) record is counted as one entry.

Example

# Set the maximum number of PIM routing entries with VLANIF100 as the outbound interface for channel SDTV to 100.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] channel SDTV type asm
[HUAWEI-multicast-channel-SDTV] quit
[HUAWEI-multicast-channel] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] multicast limit channel SDTV out max-entry 100
# Set the maximum number of PIM routing entries with GE1/0/1 as the outbound interface for channel SDTV to 100.
<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] channel SDTV type asm
[HUAWEI-multicast-channel-SDTV] quit
[HUAWEI-multicast-channel] quit
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] undo portswitch
[HUAWEI-GigabitEthernet1/0/1] multicast limit channel SDTV out max-entry 100

multicast limit (channel view)

Function

The multicast limit command sets a global limit and alarm threshold on the number of multicast groups (PIM routing entries) in a channel.

The undo multicast limit command deletes the global limit and alarm threshold on the number of multicast groups in a channel.

By default, no global limit or alarm threshold on the number of multicast groups is configured for any channel.

Format

multicast limit limit [ threshold threshold ]

undo multicast limit

Parameters

Parameter Description Value
limit Specifies the maximum number of multicast groups in the specified channel. The value is an integer that ranges from 1 to 16384.
threshold threshold Specifies the alarm threshold on the number of multicast groups in the specified channel. The value is an integer that ranges from 1 to 16383 and must be smaller than the value of limit.

Views

Public network instance channel view, VPN instance channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 3 multicast CAC to limit the number of PIM routing entries for a channel. Layer 3 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Prerequisites

The specified channel has been created using the channel command.

Precautions

After a Layer 3 multicast CAC limit is configured for a channel, the system no longer generates PIM routing entries if the number of PIM routing entries for the channel reaches the limit.

The system counts PIM routing entries as follows:

  • In ASM group address range, all the (*, G) and (S, G) records for the same group are counted as one entry.

  • In the SSM group address range, each (S, G) record is counted as one entry.

If threshold is specified in the command, the system records an alarm when the number of PIM routing entries exceeds the threshold.

Example

# Set the maximum number of PIM routing entries for channel SDTV to 100 and the alarm threshold on the number of PIM routing entries for this channel to 50.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] channel SDTV type asm
[HUAWEI-multicast-channel-SDTV] multicast limit 100 threshold 50

multicast limit (multicast-channel view)

Function

The multicast limit command sets a global limit and alarm threshold on the number of multicast groups.

The undo multicast limit command deletes the global limit and alarm threshold on the number of multicast groups.

By default, no global limit or alarm threshold on the number of multicast groups is configured.

Format

multicast limit limit [ threshold threshold ]

undo multicast limit

Parameters

Parameter Description Value
limit Specifies the global limit on the number of multicast groups. The value is an integer that ranges from 1 to 16384.
threshold threshold Specifies the alarm threshold on the number of multicast groups. The value is an integer that ranges from 1 to 16383 and must be smaller than the value of limit.

Views

Multicast-channel view of the public network instance, multicast-channel view of a VPN instance

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 3 multicast CAC to limit the number of PIM routing entries. Layer 3 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Prerequisites

Layer 3 multicast CAC has been enabled using the multicast-channel command.

Precautions

After a global limit is configured, the system no longer generates PIM routing entries if the number of PIM routing entries in the public network instance or VPN instance reaches the limit.

The system counts PIM routing entries as follows:

  • In ASM group address range, all the (*, G) and (S, G) records for the same group are counted as one entry.

  • In the SSM group address range, each (S, G) record is counted as one entry.

If threshold threshold is specified in the command, the system records an alarm when the number of PIM routing entries exceeds the threshold.

Example

# Set the maximum number of PIM routing entries for all channels in the public network instance to 1024 and set the alarm threshold to 1000.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] multicast limit 1024 threshold 1000

multicast limit out

Function

The multicast limit out command sets the maximum number of multicast groups allowed on an interface, that is, the maximum number of PIM routing entries with the interface as the outbound interface.

The undo multicast limit out command deletes the maximum number of multicast groups allowed on an interface.

By default, the number of multicast groups is not limited on an interface.

Format

multicast limit out { max-entry limit | bandwidth traffic-rate } *

undo multicast limit out

Parameters

Parameter Description Value
max-entry limit Specifies the maximum number of PIM routing entries with the specified interface as the outbound interface. The value is an integer that ranges from 1 to 16384.
bandwidth traffic-rate Specifies the maximum bandwidth of all multicast groups on the current interface. The value is an integer that ranges from 1 to 10485760, expressed in kbit/s.

Views

Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Ethernet sub-interface view, GE sub-interface view, XGE sub-interface view, 40GE sub-interface view, 100GE sub-interface view, Eth-Trunk sub-interface view, VLANIF interface view, Loopback interface view, tunnel interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 3 multicast CAC to limit the number of PIM routing entries. Layer 3 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Prerequisites

Layer 3 multicast CAC has been enabled using the multicast-channel command.

Precautions

After a limit is configured on an interface, the system no longer generates PIM routing entries if the number of PIM routing entries on the interface reaches the limit.

The system counts PIM routing entries as follows:

  • In ASM group address range, all the (*, G) and (S, G) records for the same group are counted as one entry.

  • In the SSM group address range, each (S, G) record is counted as one entry.

Example

# Set the maximum number of PIM routing entries with VLANIF100 as the outbound interface to 100.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] quit
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] multicast limit out max-entry 100
# Set the maximum number of PIM routing entries with GE1/0/1 as the outbound interface to 100.
<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] quit
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] undo portswitch
[HUAWEI-GigabitEthernet1/0/1] multicast limit out max-entry 100

unspecified-channel deny (Layer 3 multicast CAC)

Function

The unspecified-channel deny command prevents the switch from forwarding multicast data to the groups out of the group address range configured for channels.

The undo unspecified-channel deny command enables the switch to forward multicast data to the groups out of the group address range configured for channels.

By default, the switch can create PIM routing entries for the groups out of the group address range configured for channels and forward multicast data to the groups.

Format

unspecified-channel deny

undo unspecified-channel deny

Parameters

None

Views

Multicast-channel view of the public network instance, multicast-channel view of a VPN instance

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If you want the switch to forward multicast data only to groups in channels, use this command to filter out multicast data sent to groups out of the group address range configured for channels.

Prerequisites

Layer 3 multicast CAC has been enabled using the multicast-channel command.

Precautions

After you run the unspecified-channel deny command, the switch does not create PIM routing entries for the groups that are not in the configured group address range.

For the PIM routing entries that have been created for the groups out of the group address range, the switch does not delete them after you run this command. After these PIM routing entries are aged out, the switch stops forwarding multicast data to these groups.

Example

# Prevent the switch from forwarding multicast data to the groups out of the group address range configured for channels.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] multicast-channel
[HUAWEI-multicast-channel] unspecified-channel deny
Translation
Download
Updated: 2019-10-18

Document ID: EDOC1000178288

Views: 25933

Downloads: 109

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next