No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
VSI-based Layer 2 Multicast CAC Commands

VSI-based Layer 2 Multicast CAC Commands

Command Support

Commands provided in this section and all the parameters in the commands are supported by all switch models by default, unless otherwise specified. For details, see specific commands.

channel (Layer 2 multicast CAC)

Function

The channel command creates a global channel or virtual switching instance (VSI) channel and displays the channel view.

The undo channel command deletes a global channel or VSI channel.

By default, no global or VSI channel exists in the system.

Format

channel channel-name [ type { asm | ssm } ]

undo channel channel-name

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.
type { asm | ssm } Specifies a channel type. The value asm indicates an any-source multicast (ASM) channel, and the value ssm indicates a source-specific multicast (SSM) channel. -

Views

Global l2-multicast-channel view, VSI l2-multicast-channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To configure Layer 2 multicast CAC for a channel, you must create a channel and run the group command in the channel view to specify a group address range for the channel. The channel command is used to create a channel and enter the channel view.

Before configuring a group address range for a channel, use the channel command to specify a name and a multicast model (ASM or SSM) for the channel.

Follow-up Procedure

After configuring a global or VSI channel, you can configure Layer 2 multicast CAC limits to control the number of multicast groups in the channel at different levels.

Precautions

You must specify the type parameter when creating a channel. The type of a channel is unchangeable after the channel is created. To change the channel type, delete the channel, and then create the channel with the new type.

A VSI channel cannot have the same name as a global channel.

Example

# Create a global channel A1 and set the channel type to ASM.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] channel A1 type asm
[HUAWEI-l2-channel-glb-A1]

# Create a channel A2 in the VSI company1 and set the channel type to SSM.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vsi company1
[HUAWEI-l2-channel-vsi-company1] channel A2 type ssm
[HUAWEI-l2-channel-vsi-company1-A2]

display l2-multicast-channel

Function

The display l2-multicast-channel command displays information about channels.

Format

display l2-multicast-channel [ vsi [ vsi-name ] | global ] [ channel channel-name ]

Parameters

Parameter Description Value
vsi [ vsi-name ] Displays information about channels in a specified virtual switching instance (VSI). The value is a string of 1 to 31 case-sensitive characters without spaces.
global Displays information about global channels. -
channel channel-name Displays information about a specified channel. The value is a string of 1 to 31 case-sensitive characters without spaces.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can use this command to view information about global channels or channels configured in specified VSIs.

Example

# Display information about all channels.

<HUAWEI> display l2-multicast-channel
Channel information on Global
 ChannelName                     Group/Mask         Source/Mask        Bandwidth
--------------------------------------------------------------------------------
 aa                              232.111.111.0/24   10.222.222.0/24    0
--------------------------------------------------------------------------------
 tv1                             225.1.1.0/24       *                  0
--------------------------------------------------------------------------------

Channel information on VSI company1
 ChannelName                     Group/Mask         Source/Mask        Bandwidth
--------------------------------------------------------------------------------
 tv2                             232.111.1.0/24     10.222.222.0/24    0
--------------------------------------------------------------------------------
 tv3                             226.1.1.0/24       *                  0
--------------------------------------------------------------------------------
Table 8-149  Description of the display l2-multicast-channel command output

Item

Description

Channel information on Global

Information about global channels.

Channel information on VSI company1

Information about channels in the VSI company1.

ChannelName

Name of a channel.

Group/Mask

Multicast group address/mask for a channel.

Source/Mask

Multicast source address/mask for a channel.

Bandwidth

Bandwidth configured for a channel.

This field displays 0 because the switch does not support the bandwidth configuration currently.

display l2-multicast limit

Function

The display l2-multicast limit command displays Layer 2 multicast CAC configuration and statistics.

Format

display l2-multicast limit [ configuration | statistics ] [ global | interface interface-type interface-number | vsi [ vsi-name [ interface interface-type interface-number | remote-peer ip-address [ negotiation-vc-id vc-id ] ] ] ] [ channel channel-name ]

Parameters

Parameter Description Value
configuration Displays the current Layer 2 multicast CAC configuration. -
statistics Displays the current Layer 2 multicast CAC statistics. -
global Displays the global Layer 2 multicast CAC configuration or statistics. -
interface interface-type interface-number Displays the Layer 2 multicast CAC configuration or statistics on a specified interface. -
vsi-name Displays the Layer 2 multicast CAC configuration or statistics in a specified virtual switching instance (VSI). The value is a string of 1 to 31 case-sensitive characters without spaces.
remote-peer ip-address Displays the Layer 2 multicast CAC configuration or statistics on a PW-side interface. remote-peer ip-address specifies the IP address of a PW remote peer. The value is in dotted decimal notation.
negotiation-vc-id vc-id Specifies a virtual circuit ID. Generally, this parameter is specified when two ends of a PW have different VSI names. The vc-id parameter must specify an unused VC ID. That is, the specified VC ID cannot be the same as any other local VSI IDs or other VC IDs specified by negotiation-vc-id on the local end. The value is an integer that ranges from 1 to 4294967295.
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If you do not specify the configuration or statistics keyword in the command, the command displays both Layer 2 multicast CAC configuration and statistics. If you specify either keyword, the command displays Layer 2 multicast CAC configuration or statistics as specified.

Example

# Display all the Layer 2 multicast CAC configurations and statistics.

<HUAWEI> display l2-multicast limit
L2-multicast limit information, The unit of bandwidth is Kbits/sec              
------------------------------------------------------------------------------  
                                        ConfigEntries  ConfigBandwidth   
                                        CurrentEntries CurrentBandwidth  
------------------------------------------------------------------------------  
Global limit information:                                                       
------------------------------------------------------------------------------  
                                               1000           ----------        
                                               0              ----------        
Global channel limit information:                                               
------------------------------------------------------------------------------  
                                      xxtv     500           ----------        
                                               0              ----------        
VSI company1  limit information:                                               
------------------------------------------------------------------------------  
                                               200            ----------        
                                               0              ----------        
VSI company1  channel limit information:                                       
------------------------------------------------------------------------------  
                                      xxtv     100            ----------        
                                               0              ----------        
interface GigabitEthernet5/0/5 limit information:                               
------------------------------------------------------------------------------  
                                               100            ----------        
                                               0              ----------        
PW(Peer:2.2.2.2, VCID:123) limit information:                                   
------------------------------------------------------------------------------  
                                               250            ----------        
                                               0              ---------- 
Table 8-150  Description of the display l2-multicast limit command output

Item

Description

ConfigEntries

Limit on the number of multicast groups.

CurrentEntries

Number of existing multicast entries.

Global limit information

Global Layer 2 multicast CAC limit. This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] command.

Global channel limit information

Global Layer 2 multicast CAC limit for a channel. This parameter is configured using the l2-multicast limit channel channel-name max-entry count command.

VSI company1 limit information

Layer 2 multicast CAC limit for the VSI company1. This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] command.

VSI company1 channel limit information

Layer 2 multicast CAC limits for a channel in the VSI company1. This parameter is configured using the l2-multicast limit channel channel-name max-entry count command.

interface GigabitEthernet5/0/5 limit information

Layer 2 multicast CAC limit on AC-side interface GE5/0/5. This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] command.

PW(Peer:2.2.2.2, VCID:123) limit information

Layer 2 multicast CAC limit on the PW-side interface (with remote peer address 2.2.2.2 and VC ID 123). This parameter is configured using the l2-multicast limit max-entry count [ except acl-number ] remote-peer ip-address [ negotiation-vc-id vc-id ] command.

group (Layer 2 multicast CAC)

Function

The group command configures a group address range for a global or virtual switching instance (VSI) channel.

The undo group command deletes the group address range configured for a global or VSI channel.

By default, a global or VSI channel has no group address range configured.

Format

group group-address { group-mask-length | group-mask } [ source source-address { source-mask-length | source-mask } ]

undo group group-address { group-mask-length | group-mask } [ source source-address { source-mask-length | source-mask } ]

Parameters

Parameter Description Value
group group-address Specifies a group address for the channel. The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
group-mask-length Specifies the mask length of the group address. The value is an integer that ranges from 4 to 32.
group-mask Specifies the mask of the group address. The value is in dotted decimal notation.
source source-address Specifies a multicast source address for the channel. The value is in dotted decimal notation.
source-mask-length Specifies the mask length of the multicast source address. The value is an integer that ranges from 8 to 32.
source-mask Specifies the mask of the multicast source address. The value is in dotted decimal notation.

Views

Global channel view, VSI channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To limit the number of programs in a channel, create this channel and specify a group address range for the channel.

Precautions

The group address range of a global channel cannot overlap group address ranges of any other global channels or VSI channels.

Each channel can be configured with a maximum of 16 group address ranges.

Example

# Configure a group address range for global channel A1.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] channel A1
[HUAWEI-l2-channel-glb-A1] group 237.0.0.0 30 source 10.1.1.1 32

# Configure a group address range for channel A2 in the VSI company1.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vsi company1
[HUAWEI-l2-channel-vsi-company1] channel A2
[HUAWEI-l2-channel-vsi-company1-A2] group 238.0.0.0 30 source 10.2.2.2 32

l2-multicast limit channel (interface view)

Function

The l2-multicast limit channel command sets the maximum number of multicast groups in a channel allowed on an attachment circuit (AC) side interface bound to a virtual switching instance (VSI).

The undo l2-multicast limit channel command cancels the maximum number of multicast groups in a channel allowed on an AC-side interface.

By default, the number of multicast groups in a channel is not limited on an AC-side interface.

Format

l2-multicast limit channel channel-name max-entry count

undo l2-multicast limit channel channel-name max-entry [ count ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.

Views

GE interface view, XGE interface view,40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured on an AC-side interface bound to a VSI, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries in the VSI reaches the limit.

Depending on the AC access mode used on a virtual private LAN service (VPLS) network, Layer 2 multicast CAC can be configured on an AC-side interface using either of the following methods:

  • If the AC-side interface bound to a VSI is a physical interface that has been switched to Layer 3 mode using the undo portswitch command, run the l2-multicast limit channel command on this interface.
  • If the AC-side interface bound to the VSI is a VLANIF interface, you can configure a CAC limit on the Layer 2 interface in the corresponding VLAN. For details, see l2-multicast limit channel channel-name max-entry count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] in "VLAN-based Layer 2 CAC Commands."

Example

# Limit the number of multicast groups in channel 1 to 1000 on the AC-side interface GE1/0/1, which has been bound to the VSI company1.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] l2-multicast limit channel channel1 max-entry 1000

l2-multicast limit channel (system view)

Function

The l2-multicast limit channel command sets a global limit on the number of multicast groups for a channel.

The undo l2-multicast limit channel command deletes the global limit for a channel.

By default, no global limit on the number of multicast groups is configured for any channel.

Format

l2-multicast limit channel channel-name max-entry count

undo l2-multicast limit channel channel-name max-entry [ count ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured for a channel, the system no longer creates Layer 2 multicast forwarding entries for the channel if the number of Layer 2 multicast forwarding entries reaches the limit.

Example

# Set the global limit on number of multicast groups in channel 1 to 1000.

<HUAWEI> system-view
[HUAWEI] l2-multicast limit channel channel1 max-entry 1000

l2-multicast limit channel (VSI view)

Function

The l2-multicast limit channel command sets the maximum number of multicast groups in a channel allowed in a virtual switching instance (VSI).

The undo l2-multicast limit channel command deletes the maximum number of multicast groups in a channel allowed in a VSI.

By default, the number of multicast groups in a channel is not limited in any VSI.

Format

l2-multicast limit channel channel-name max-entry count

undo l2-multicast limit channel channel-name max-entry [ count ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.

Views

VSI view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured in a VSI, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries in the VSI reaches the limit.

Example

# Limit the number of multicast groups in channel 1 to 1000 in the VSI company1.

<HUAWEI> system-view
[HUAWEI] vsi company1
[HUAWEI-vsi-company1] l2-multicast limit channel channel1 max-entry 1000

l2-multicast limit channel (VSI-LDP view)

Function

The l2-multicast limit channel command sets the maximum number of multicast groups in a channel allowed on a pseudo wire (PW) side interface bound to a virtual switching instance (VSI).

The undo l2-multicast limit channel command deletes the maximum number of multicast groups in a channel allowed on a PW-side interface.

By default, the number of multicast groups in a channel is not limited on a PW-side interface.

Format

l2-multicast limit channel channel-name max-entry count remote-peer ip-address [ negotiation-vc-id vc-id ]

undo l2-multicast limit channel channel-name max-entry [ count ] remote-peer ip-address [ negotiation-vc-id vc-id ]

Parameters

Parameter Description Value
channel channel-name Specifies a channel name. The value is a string of 1 to 31 case-sensitive characters without spaces.
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
remote-peer ip-address Specifies the IP address of the remote peer on a PW. The value is in dotted decimal notation.
negotiation-vc-id vc-id Specifies a virtual circuit ID. Generally, this parameter is specified when two ends of a PW have different VSI names. The vc-id parameter must specify an unused VC ID. That is, the specified VC ID cannot be the same as any other local VSI IDs or other VC IDs specified by negotiation-vc-id on the local end. The value is an integer that ranges from 1 to 4294967295.

Views

VSI-LDP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured on a PW-side interface, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries on the PW-side interface reaches the limit.

Example

# Limit the number of multicast groups in channel 1 to 1000 on the PW-side interface (with remote peer address 1.1.1.1), which is bound to the VSI company1.

<HUAWEI> system-view
[HUAWEI] vsi company1
[HUAWEI-vsi-company1] pwsignal ldp
[HUAWEI-vsi-company1-ldp] l2-multicast limit channel channel1 max-entry 1000 remote-peer 1.1.1.1

l2-multicast limit (interface view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed on an attachment circuit (AC) side interface bound to a virtual service instance (VSI).

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed on an AC-side interface.

By default, the number of multicast groups is not limited on an AC-side interface.

Format

l2-multicast limit max-entry count [ except acl-number ]

undo l2-multicast limit max-entry [ count ] [ except acl-number ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.

Views

GE interface view, XGE interface view,40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

After a Layer 2 multicast CAC limit is configured on an AC-side interface bound to a VSI, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries on the AC-side interface reaches the limit.

Depending on the AC access mode used on a virtual private LAN service (VPLS) network, Layer 2 multicast CAC can be configured on an AC-side interface using either of the following methods:

  • If the AC-side interface bound to a VSI is a physical interface that has been switched to Layer 3 mode using the undo portswitch command, run the l2-multicast limit command on this interface.
  • If the AC-side interface bound to the VSI is a VLANIF interface, you can configure a CAC limit on the Layer 2 interface in the corresponding VLAN. For details, see l2-multicast limit count [ vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> ] [ except acl-number ] in "VLAN-based Layer 2 CAC Commands."

Example

# Limit the number of multicast groups in channel 1 to 1000 on the AC-side interface GE1/0/1, which is bound to the VSI company1.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] l2-multicast limit max-entry 1000

l2-multicast limit (system view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed in the system.

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed in the system.

By default, the number of multicast groups in a channel is not limited in the system.

Format

l2-multicast limit max-entry count [ except acl-number ]

undo l2-multicast limit max-entry [ count ] [ except acl-number ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

After a Layer 2 multicast CAC limit is configured, the system no longer creates Layer 2 multicast forwarding entries for the channel if the number of Layer 2 multicast forwarding entries reaches the limit.

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

Example

# Limit the number of multicast groups allowed in the system to 1000.

<HUAWEI> system-view
[HUAWEI] l2-multicast limit max-entry 1000

l2-multicast limit (VSI view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed in a virtual switching instance (VSI).

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed in a VSI.

By default, the number of multicast groups is not limited in any VSI.

Format

l2-multicast limit max-entry count [ except acl-number ]

undo l2-multicast limit max-entry [ count ] [ except acl-number ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.

Views

VSI view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

After a Layer 2 multicast CAC limit is configured in a VSI, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries in the VSI reaches the limit.

Example

# Limit the number of multicast groups to 1000 in the VSI company1.

<HUAWEI> system-view
[HUAWEI] vsi company1
[HUAWEI-vsi-company1] l2-multicast limit max-entry 1000

l2-multicast limit (VSI-LDP view)

Function

The l2-multicast limit command sets the maximum number of multicast groups allowed on a pseudo wire (PW) side interface bound to a virtual switching instance (VSI).

The undo l2-multicast limit command deletes the maximum number of multicast groups allowed on a PW-side interface.

By default, the number of multicast groups is not limited on a PW-side interface.

Format

l2-multicast limit max-entry count [ except acl-number ] remote-peer ip-address [ negotiation-vc-id vc-id ]

undo l2-multicast limit max-entry [ count ] remote-peer ip-address [ negotiation-vc-id vc-id ]

Parameters

Parameter Description Value
max-entry count Specifies the maximum number of multicast groups. The value is an integer that ranges from 1 to 4096.
except acl-number Indicates that the number of multicast groups matching the specified ACL is not limited. The value is an integer that ranges from 2000 to 3999.
remote-peer ip-address Specifies the IP address of the remote peer on a PW. The value is in dotted decimal notation.
negotiation-vc-id vc-id Specifies a virtual circuit ID. Generally, this parameter is specified when two ends of a PW have different VSI names. The vc-id parameter must specify an unused VC ID. That is, the specified VC ID cannot be the same as any other local VSI IDs or other VC IDs specified by negotiation-vc-id on the local end. The value is an integer that ranges from 1 to 4294967295.

Views

VSI-LDP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When deploying the IPTV service, you can configure Layer 2 multicast CAC to limit the number of multicast forwarding entries. Layer 2 multicast CAC ensures multicast service quality and mitigates the impact of multicast attacks.

Precautions

If you do not want to apply a CAC limit to certain multicast groups, define a permit rule in an ACL to match such multicast groups.

After a Layer 2 multicast CAC limit is configured on a PW-side interface, the system no longer creates Layer 2 multicast forwarding entries if the number of Layer 2 multicast forwarding entries on the PW-side interface reaches the limit.

Example

# Limit the number of multicast groups to 1000 on the PW-side interface (with remote peer address 1.1.1.1), which is bound to the VSI company1.

<HUAWEI> system-view
[HUAWEI] vsi company1
[HUAWEI-vsi-company1] pwsignal ldp
[HUAWEI-vsi-company1-ldp] l2-multicast limit max-entry 1000 remote-peer 1.1.1.1

l2-multicast-channel

Function

The l2-multicast-channel command displays the global l2-multicast-channel view.

The undo l2-multicast-channel command deletes all the configurations for global channels.

Format

l2-multicast-channel

undo l2-multicast-channel

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

To configure Layer 2 multicast CAC for global channels, enter the global l2-multicast-channel view first.

Example

# Enter the global l2-multicast-channel view.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb]

l2-multicast-channel vsi

Function

The l2-multicast-channel vsi command displays the l2-multicast-channel view of a virtual switching instance (VSI).

The undo l2-multicast-channel vsi command deletes all the configurations for channels in a VSI.

Format

l2-multicast-channel vsi vsi-name

undo l2-multicast-channel vsi vsi-name

Parameters

Parameter Description Value
vsi vsi-name Specifies the VSI to which channels belong. The value is a string of 1 to 31 case-sensitive characters without spaces.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

To configure Layer 2 multicast CAC for channels in a specified VSI, enter the l2-multicast-channel view of the VSI.

Example

# Enter the l2-multicast-channel view of the VSI company1.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vsi company1
[HUAWEI-l2-channel-vsi-company1]

reset l2-multicast dynamic-group

Function

The reset l2-multicast dynamic-group command clears dynamic IGMP snooping entries.

Format

reset l2-multicast dynamic-group [ source-address source-address ] group-address group-address vsi vsi-name { interface interface-type interface-number | remote-peer ip-address [ negotiation-vc-id vc-id ] }

Parameters

Parameter Description Value
source-address source-address

Clears the dynamic IGMP snooping entries of a specified multicast source address.

The value is expressed in dotted decimal notation.
group-address group-address

Clears the dynamic IGMP snooping entries of a specified group address.

The value ranges from 224.0.1.0 to 239.255.255.255, in dotted decimal notation.
vsi vsi-name

Clears the dynamic IGMP snooping entries in a specified VSI.

The value is a string of 1 to 31 case-sensitive characters without spaces.
interface interface-type interface-number

Clears the dynamic IGMP snooping entries on a specified AC-side interface.

-
remote-peer ip-address

Clears the dynamic IGMP snooping entries on a specified PW-side interface. remote-peer ip-address specifies the IP address of the remote peer on the PW.

The value is in dotted decimal notation.
negotiation-vc-id vc-id

Specifies a virtual circuit ID. Generally, this parameter is specified when two ends of a PW have different VSI names. The vc-id parameter must specify an unused VC ID. That is, the specified VC ID cannot be the same as any other local VSI IDs or other VC IDs specified by negotiation-vc-id on the local end.

The value is an integer that ranges from 1 to 4294967295.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

If the number of dynamic forwarding entries on the device has exceeded the newly configured Layer 2 multicast CAC limit, the device cannot generate new dynamic forwarding entries after receiving multicast requests. You can run this command to clear dynamic forwarding entries so that the device can generate multicast forwarding entries again.

Precautions

Clearing dynamic multicast forwarding entries will cause temporary interruption of multicast forwarding. Exercise caution when performing this operation.

Example

# Clear dynamic IGMP snooping entries of group 225.0.0.1 on AC-side interface GE1/0/0 bound to the VSI company1.

<HUAWEI> reset l2-multicast dynamic-group group-address 225.0.0.1 vsi company1 interface gigabitethernet 1/0/0

unspecified-channel deny (Layer 2 multicast CAC)

Function

The unspecified-channel deny command prevents the switch from forwarding multicast data to the groups out of the group address range configured for channels.

The undo unspecified-channel deny command enables the switch to forward multicast data to the groups out of the group address range configured for channels.

By default, the switch can create Layer 2 multicast forwarding entries for the groups out of the group address range configured for channels and forward multicast data to the groups.

Format

unspecified-channel deny

undo unspecified-channel deny

Parameters

None

Views

Global l2-multicast-channel view, VSI l2-multicast-channel view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If you want the switch to forward multicast data only to groups in global channels or channels in a VSI, use this command to filter out multicast data sent to groups out of the group address range configured for the channels.

Precautions

After you run the unspecified-channel deny command, the switch does not create Layer 2 multicast forwarding entries for the groups that are not in the configured group address range.

For the Layer 2 multicast forwarding entries that have been created for the groups out of the group address range, the switch does not delete them after you run this command. After these Layer 2 multicast forwarding entries are aged out, the switch stops forwarding multicast data to these groups.

Example

# Prevent the switch from forwarding multicast data to the groups out of the group address range configured for global channels.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel
[HUAWEI-l2-channel-glb] unspecified-channel deny

# Prevent the switch from forwarding multicast data to the groups out of the group address range configured for channels in the VSI company1.

<HUAWEI> system-view
[HUAWEI] l2-multicast-channel vsi company1
[HUAWEI-l2-channel-vsi-company1] unspecified-channel deny
Translation
Download
Updated: 2019-04-09

Document ID: EDOC1100065659

Views: 126891

Downloads: 88

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next