H3C Technologies H3C SecPath F1000-E User Manual
Page 935
910
# Enable IPv6 multicast routing on SecPath A, enable IPv6 PIM-DM on each interface, and enable
MLD on the host-side interface GigabitEthernet 0/1.
[SecPathA] multicast ipv6 routing-enable
[SecPathA] interface GigabitEthernet 0/1
[SecPathA-GigabitEthernet0/1] mld enable
[SecPathA-GigabitEthernet0/1] pim ipv6 dm
[SecPathA-GigabitEthernet0/1] quit
[SecPathA] interface GigabitEthernet 0/2
[SecPathA-GigabitEthernet0/2] pim ipv6 dm
[SecPathA-GigabitEthernet0/2] quit
# Enable IPv6 multicast routing on SecPath B, enable IPv6 PIM-DM on each interface, and enable
MLD on the host-side interface GigabitEthernet 0/1.
[SecPathB] multicast ipv6 routing-enable
[SecPathB] interface GigabitEthernet 0/1
[SecPathB-GigabitEthernet0/1] mld enable
[SecPathB-GigabitEthernet0/1] pim ipv6 dm
[SecPathB-GigabitEthernet0/1] quit
[SecPathB] interface GigabitEthernet 0/2
[SecPathB-GigabitEthernet0/2] pim ipv6 dm
[SecPathB-GigabitEthernet0/2] quit
# Enable IPv6 multicast routing on SecPath C, enable IPv6 PIM-DM on each interface, and enable
MLD on the host-side interface GigabitEthernet 0/1.
[SecPathC] multicast ipv6 routing-enable
[SecPathC] interface GigabitEthernet 0/1
[SecPathC-GigabitEthernet0/1] mld enable
[SecPathC-GigabitEthernet0/1] pim ipv6 dm
[SecPathC-GigabitEthernet0/1] quit
[SecPathC] interface GigabitEthernet 0/3
[SecPathC-GigabitEthernet0/3] pim ipv6 dm
[SecPathC-GigabitEthernet0/3] quit
3.
Configure an IPv6 multicast group filter:
# Configure an IPv6 multicast group filter on SecPath A, so that the hosts connected to
GigabitEthernet 0/1 can join IPv6 multicast group FF1E::101 only.
[SecPathA] acl ipv6 number 2001
[SecPathA-acl6-basic-2001] rule permit source ff1e::101 128
[SecPathA-acl6-basic-2001] quit
[SecPathA] interface GigabitEthernet 0/1
[SecPathA-GigabitEthernet0/1] mld group-policy 2001
[SecPathA-GigabitEthernet0/1] quit
4.
Verify the configuration:
Use the display mld interface command to display MLD information on each interface of firewalls.
For example:
# Display MLD information on GigabitEthernet 0/1 of SecPath B.
[SecPathB] display mld interface GigabitEthernet 0/1
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer