User's Manual

49-22
The last is to configure the rules to the specified port.
Pay attention: since the configured rules will take up entries of hardware, configuring too many rules might
cause failure if the underlying entries are full, so it is recommended that users adopt rules as simple as
possible. The following is the configuration command:
Command
Explanation
Port Configuration Mode
[no] ipv6 multicast source-control
access-group <8000-8099>
Used to configure the source control rule to a
port, he no operation will cancel this
configuration.
2
．
The configuration of destination control
The configuration of destination control is similar to that of source control, and also has three steps:
First, globally enable the destination control, since destination control needs to avoid the unauthorized users
from receiving multicast data, once it is enabled globally, the switch will stop broadcasting received multicast
data, so if a switch has enabled destination control, users should not connect two or more other Layer three
switches within the same VLAN where it locates. The following is the configuration command:
Command
Explanation
Global Configuration Mode
multicast destination-control(necessary)
Globally enable IPV4 and IPv6
destination control, the no operation of
this command will globally disable
destination control. All of the other
configuration can only take effect after
globally enabled.
The next is configuring destination control rules, which are similar to that of source control, but using ACL
number from 9000 to 10099 instead.
Command
Explanation
Global Configuration Mode
[no] ipv6 access-list <9000-10099>
{deny|permit} {{<source/M>}|{host-source
<source-host-ip>}|any-source}
{{<destination/M>}|{host-destination
<destination-host-ip>}|any-destination}
Used to configure destination control
rules, these rules can only take effect
when applied to specified source IP,
VLAN-MAC or port. The no operation
of this rule will delete the specified
rule.
The last step is to configure the rules to the specified source IP, source VLAN MAC or the specified port. What
should be paid attention to is that only when the MLD-SNOOPING is enabled, these rules can be globally
used, or, only rules of source IP can be used in MLD protocol. The following is the configuration command: