H3C Technologies H3C S3100 Series Switches - Manual (Page 354)

5-10
z The source IPv6 ACL and the destination IPv6 ACL must be of the same type.
z The destination ACL does not take the name of the source IPv6 ACL.
Displaying and Maintaining IPv6 ACLs
To do… Use the command… Remarks
Display information about one or all
IPv6 ACLs display acl ipv6 { acl6-number | all | name
acl6-name }
Available in any view
Clear statistics on one or all basic
and advanced IPv6 ACLs reset acl ipv6 counter { acl6-number | all |
name acl6-name }
Available in user view
IPv6 Multicast Group Filter Configuration
Configuring an IPv6 Multicast Group Filter
On a MLD snooping–enabled switch, the configuration of an IPv6 multicast group filter allows the
service provider to define limits of multicast programs available to different users.
In an actual application, when a user requests a multicast program, the user’s host initiates an MLD
report. Upon receiving this report message, the switch checks the report against the configured ACL
rule. If the port on which the report was received can join this IPv6 multicast group, the switch adds an
entry for this port in the MLD snooping forwarding table; otherwise the switch drops this report message.
Any IPv6 multicast data that fails the ACL check will not be sent to this port. In this way, the service
provider can control the VoD programs provided for multicast users.
Configuring an IPv6 multicast group filter globally
Follow these steps to configure an IPv6 multicast group globally:
To do... Use the command... Remarks
Enter system view system-view —
Enter MLD-Snooping view mld-snooping —
Configure an IPv6 multicast group
filter group-policy acl6-number [ vlan
vlan-list ]
Required
By default, no IPv6 group filter is
globally configured, that is, hosts in
VLANs can join any valid multicast
group.
Configuring an IPv6 multicast group filter on a port or a group of ports
Follow these steps to configure an IPv6 multicast group filer on a port or a group of ports:
To do... Use the command... Remarks
Enter system view system-view —
Enter Ethernet port view
interface interface-type
interface-number
—