H3C Technologies H3C S3100V2 Series Switches - Manual (Page 85)

77
CAUTION:
Be sure to configure the maximum number of IPv6 multicast groups allowed on a port before enabling IPv6
multicast group replacement. Otherwise, the IPv6 multicast group replacement functionality will not take
effect. For more information about the maximum number of IPv6 groups that a port can join, see
“
Configuring maximum multicast groups that a port can join .”
Configuring 802.1p precedence for MLD messages
You can change 802.1p precedence of MLD messages so that they can be assigned higher forwarding
priority when congestion occurs on their outgoing ports.
Configuring 802.1p precedence for MLD messages globally
Follow these steps to configure 802.1p precedence for MLD messages globally:
To do... Use the command... Remarks
Enter system view system-view —
Enter MLD snooping view mld-snooping —
Configure 802.1p precedence for
MLD Messages
dot1p-priority priority-number
Required
The default 802.1p precedence for
MLD messages is 0.
Configuring 802.1p precedence for MLD messages in a VLAN
Follow these steps to configure 802.1p precedence for MLD messages in a VLAN:
To do... Use the command... Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id —
Configure 802.1p precedence for
MLD Messages mld-snooping dot1p-priority
priority-number
Required
The default 802.1p precedence for
MLD messages is 0.
Configuring an IPv6 multicast user control policy
IPv6 multicast user control policies are configured on access switches to allow only authorized users to
receive requested IPv6 multicast flows. This helps restrict users from ordering certain multicast-on-demand
programs.
In practice, a device first needs to perform authentication, 802.1X authentication for example, on
connected hosts through a RADIUS server. Then, the device uses the configured multicast user control
policy to perform multicast access control on authenticated users as follows.
• Upon receiving an MLD report from a host, the access switch checks the IPv6 multicast group
address and multicast source address carried in the report against the configured policies. If a
match is found, the user is allowed to join the multicast group. Otherwise, the join report is dropped
by the access switch.
• Upon receiving a done message from a host, the access switch matches the IPv6 multicast group
and source addresses against the policies. If a match is found, the host is allowed to leave the group.
Otherwise, the done message is dropped by the access switch.