mld-snooping static-group
Function
The mld-snooping static-group command configures static IPv6 group memberships on an interface.
The undo mld-snooping static-group command deletes the static IPv6 group memberships on an interface.
By default, no static IPv6 group membership is configured on an interface.
Format
mld-snooping static-group group-ipv6-address [ source source-ipv6-address ] vlan vlan-id
undo mld-snooping static-group { group-ipv6-address [ source source-ipv6-address ] vlan vlan-id | all }
Parameters
Parameter |
Description |
Value |
---|---|---|
group-ipv6-address |
Specifies the IPv6 address of a multicast group. |
The address is a 32-digit hexadecimal number, in the format X:X:X:X:X:X:X:X. An IPv6 multicast address starts with FF. |
source source-ipv6-address |
Specifies the IPv6 address of a multicast source. |
The address is a 32-digit hexadecimal number, in the format X:X:X:X:X:X:X:X. NOTE:
Address 0::0 and addresses starting with FF cannot be configured as multicast source addresses. |
vlan vlan-id |
Specifies a VLAN ID. |
The value is an integer that ranges from 1 to 4094. |
all |
Deletes all static group memberships from an interface. |
- |
Usage Guidelines
Usage Scenario
In addition to dynamic multicast forwarding entries generated by Layer 2 multicast protocol protocols, you can configure static Layer 2 multicast forwarding entries by binding interfaces to multicast groups. After an interface is statically bound to a multicast group, users connected to this interface can receive multicast data of the multicast group for a long time. The interface then becomes a static member interface.
Configuring static member interfaces has the following advantages:
- Protects the system against attacks from protocol packets.
- Reduces the network delay by directly forwarding multicast packets based on static forwarding entries.
- Prevents unregistered users from receiving multicast flows, improving information security and protecting service providers' interests.
Prerequisites
MLD snooping has been enabled globally using the mld-snooping enable command.
Precautions
- MLD snooping is enabled in the specified VLAN using the mld-snooping enable command.
- The specified VLAN has been created and the interface has been added to the VLAN.
Multicast group addresses starting with FFx1 or FFx2 (x is any value) cannot be configured as static multicast group addresses.
Example
# Statically bind GE0/0/1 in VLAN 2 to multicast group ff1a::1.
<AC6605> system-view [AC6605] mld-snooping enable [AC6605] interface gigabitethernet 0/0/1 [AC6605-GigabitEthernet0/0/1] port link-type trunk [AC6605-GigabitEthernet0/0/1] port trunk allow-pass vlan 2 [AC6605-GigabitEthernet0/0/1] mld-snooping static-group ff1a::1 vlan 2