H3C S9500 Series Routing Switches

Command Manual Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: T2-08194S-20081225-C-1.24 Product Version: S9500-CMW310-R1648

Copyright 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice Technical Support The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied. customer_service@h3c.com http://www.h3c.com

About This Manual Organization Command Manual is organized as follows: Part 00 Feature List and Command Index 01 Access Volume 02 IP Services Volume 03 IP Routing Volume 04 IP Multicast Volume 05 MPLS VPN Volume Contents includes Feature List and Command Index. includes Ethernet Port, POS Port Configuration, Link Aggregation Configuration, Port Isolation Configuration, VLAN, MAC Address Table Management, GVRP, QinQ, Port Loopback Detection, DLDP, Ethernet OAM, Smart Link and Monitor Link, MSTP, BPDU Tunnel, HVRP, RRPP and RPR. includes ARP, IP Address, VRRP, DHCP, DNS, UDP Helper, NAT, IP Performance and URPF. includes Static Route, RIP, OSPF, ISIS, BGP, Routing Policy, Route Capacity Configuration and Recursive Routing. includes Common Multicast Configuration, IGMP Snooping Configuration, IGMP Configuration, PIM, Multicast VLAN, MSDP and MBGP. includes MPLS, MPLS VLL, MPLS VPLS, MPLS L3VPN and MPLS OAM. 06 QoS ACL Volume includes QoS and ACL. 07 Security Volume includes Protocol Port Security, 802.1x, AAA RADIUS HWTACACS, Password Control, SSH, IDS Linkage, Portal, VBAS and Traffic Accounting.

Part 08 System Volume Contents includes Command Line Interface, Login and User Interface, FTP and TFTP, HA, NQA, NetStream, NTP, RMON, SNMP, Packet Statistics Accounting, Device Management, Configuration File Management, File System Management, Cluster Management, System Maintenance and Debugging, Information Center, PoE, Clock Module, ACSEI Server, and OAP Module. Conventions The manual uses the following conventions: I. Command conventions Convention Boldface italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> The keywords of a command line are in Boldface. Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by vertical bars. One is selected. Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected. Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected. Optional alternative items are grouped in square brackets and separated by vertical bars. Many or none can be selected. The argument(s) before the ampersand (&) sign can be entered 1 to n times. # A line starting with the # sign is comments.

II. GUI conventions Convention < > [ ] / Button names are inside angle brackets. For example, click <OK>. Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New User] window. Multi-level menus are separated by forward slashes. For example, [File/Create/Folder]. III. Symbols Convention Warning Caution Note Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means a complementary description. Related Documentation In addition to this manual, each documentation set includes the following: Manual H3C S9500 Series Routing Switches Installation Manual H3C S9500 Series Routing Switches Operation Manual It introduces the installation procedure, commissioning, maintenance and monitoring of the S9500 series routing switches. It includes Product Overview, Access Volume, IP Service Volume, IP Routing Volume, IP Multicast Volume, MPLS VPN Volume, QoS ACL Volume, Security Volume, System Volume and Acronyms. Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at this URL: http://www.h3c.com. The following are the columns from which you can obtain different categories of product documentation: [Products & Solutions]: Provides information about products and technologies.

[Technical Support & Document > Technical Documents]: Provides several categories of product documentation, such as installation and operation. [Technical Support & Document > Product Support > Software]: Provides the documentation released with the software version. Documentation Feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.

Command Manual IP Multicast Volume Organization Manual Version T2-08194S-20081225-C-1.24 Product Version S9500-CMW310-R1648 Organization The IP Multicast Volume is organized as follows: Features (command manual) Multicast Common IGMP Snooping IGMP PIM Multicast VLAN MSDP MBGP Introduces the commands for multicast common configuration. Introduces the commands for IGMP snooping configuration. Introduces the commands for IGMP configuration. Introduces the commands for PIM configuration. Introduces the commands for multicast VLAN configuration. Introduces the commands for MSDP configuration. Introduces the commands for MBGP configuration.

Command Manual Common Multicast Configuration Table of Contents Table of Contents Chapter 1 Common Multicast Configuration... 1-1 1.1 Common Multicast Configuration... 1-1 1.1.1 broadcast-suppression... 1-1 1.1.2 debugging multicast forwarding... 1-2 1.1.3 debugging multicast kernel-routing... 1-3 1.1.4 debugging multicast status-forwarding... 1-3 1.1.5 display mpm forwarding-table... 1-4 1.1.6 display mpm group... 1-5 1.1.7 display multicast forwarding-table... 1-6 1.1.8 display multicast routing-table... 1-8 1.1.9 multicast route-limit... 1-9 1.1.10 multicast routing-enable... 1-10 1.1.11 multicast-suppression... 1-11 1.1.12 reset multicast forwarding-table... 1-12 1.1.13 reset multicast routing-table... 1-13 i

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Chapter 1 Common Multicast Configuration 1.1 Common Multicast Configuration 1.1.1 broadcast-suppression broadcast-suppression { ratio bandwidth bandwidth } undo broadcast-suppression Ethernet port view ratio: Maximum wire speed ratio in percents of the broadcast traffic allowed on the port. The value range is 1 to 100, and the default value is 50. The smaller the ratio is, the smaller the broadcast traffic is allowed to pass. bandwidth: Broadcast suppression bandwidth in Mbps on the port. The value ranges from 1 to the maximum value of port bandwidth. Use the broadcast-suppression command to set the broadcast suppression ratio or broadcast suppression bandwidth. Use the undo broadcast-suppression command to restore the default setting. The default broadcast suppression ratio is 50%. You can use the broadcast-suppression command repeatedly. The effective broadcast suppression ratio is the one last updated. 1-1

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Caution: You cannot enable both broadcast suppression and multicast suppression simultaneously on the same card. Namely, once you have enabled broadcast suppression on some ports of a card, you cannot enable multicast suppression on the other ports of the card, and vice versa. If multicast suppression is enabled, broadcast packets are also suppressed at the same time, while broadcast suppression does not work on multicast suppression. Related commands: multicast-suppression. # Set the broadcast suppression ratio to 40%. System : return to User with Ctrl+Z. [H3C] interface ethernet 2/1/1 [H3C-Ethernet2/1/1] broadcast-suppression 40 # Set the broadcast suppression bandwidth to 40 Mbps. [H3C-Ethernet2/1/1] broadcast-suppression bandwidth 40 # Disable broadcast suppression. [H3C-Ethernet2/1/1] undo broadcast-suppression 1.1.2 debugging multicast forwarding debugging multicast forwarding undo debugging multicast forwarding User view None Use the debugging multicast forwarding command to enable the multicast packet forwarding debugging function. Use the undo debugging multicast forwarding command to disable the debugging function. 1-2

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration By default, the debugging function is disabled. # Enable the multicast packet forwarding debugging function. <H3C> debugging multicast forwarding 1.1.3 debugging multicast kernel-routing debugging multicast kernel-routing undo debugging multicast kernel-routing User view None Use the debugging multicast kernel-routing command to enable the multicast kernel routing debugging function. Use the undo debugging multicast kernel-routing command to disable the debugging function. By default, the multicast kernel routing debugging function is disabled. # Enable the multicast kernel routing debugging function. <H3C> debugging multicast kernel-routing 1.1.4 debugging multicast status-forwarding debugging multicast status-forwarding undo debugging multicast status-forwarding User view None 1-3

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Use the debugging multicast status-forwarding command to enable the multicast forwarding status debugging function. Use the undo debugging multicast status-forwarding command to disable the debugging function. By default, the multicast forwarding status debugging function is disabled. # Enable the multicast forwarding status debugging function. <H3C> debugging multicast status-forwarding 1.1.5 display mpm forwarding-table display mpm forwarding-table [ group-address source-address ] Any view group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255. source-address: IP address of the multicast source. Use the display mpm forwarding-table command to view the multicast forwarding table entries with port numbers. When a group address or a source address is specified, this command shows only the matched (S, G) entry; otherwise, this command shows all entries. Related commands: display multicast forwarding-table. # the multicast forwarding table entries with port numbers. <H3C> display mpm forwarding-table Multicast Forwarding Cache Table Total 1 entry (entries) 00001. (10.11.113.110, 226.1.1.1) in-vlan Vlan1 2 out-vlan(s): 1-4

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Vlan20 Ethernet5/1/33 Vlan10 Ethernet5/1/31 Total 1 entry(entries) Listed Table 1-1 on the fields of the display mpm forwarding-table command Field Multicast Forwarding Cache Table Total 1 entry (entries) Multicast forwarding cache table Total number of entries 00001 Sequence number of entries (10.11.113.110, 226.1.1.1) (s,g), namely (source address, group address) in-vlan Vlan1 The in-vlan of the multicast forwarding table is VLAN 1 2 out-vlan(s): The multicast forwarding table has two out-vlans Vlan20 Ethernet5/1/33 Vlan10 Ethernet5/1/31 Total 1 entry(entries) Listed The first out-vlan is VLAN 20, of which the egress port is Ethernet 5/1/33 The second out-vlan is VLAN 10, of which the egress port is Ethernet5/1/31 Totally one (S, G) entry is listed. 1.1.6 display mpm group display mpm group [ vlan vlan-id [ ip-address ] ] Any view vlan vlan-id: Specifies the VLAN the desired multicast group information resides in. If no VLAN ID is provided, the command displays the information of the multicast groups in all the VLANs. ip-address: IP address of the desired multicast group. 1-5

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Use the display mpm group command to display the information about the IP multicast groups or MAC multicast groups in a specified VLAN or all VLANs. # Display the information of multicast groups in VLAN 10. <H3C> display mpm group vlan 10 Total 1 IP Group(s). Total 1 MAC Group(s). Vlan(id):10. Total 1 IP Group(s). Total 1 MAC Group(s). Router port(s): IP group(s):the following ip group(s) match to one mac group. IP group address:230.45.45.1 Host port(s):ethernet4/1/1 MAC group(s): MAC group address:0100-5e2d-2d01 Host port(s):ethernet4/1/1 Table 1-2 on the fields of the display mpm group command Field Vlan(id) Router port(s) IP group(s) IP group address Host port(s) MAC group(s) MAC group address Host port(s) ID of the specified VLAN Router port IP multicast group IP address of the IP multicast group Host port of the IP multicast group MAC multicast group Address of the MAC multicast group Member port(s) of the MAC multicast group 1.1.7 display multicast forwarding-table display multicast forwarding-table [ group-address [ mask { mask mask-length } ] source-address [ mask { mask mask-length } ] incoming-interface { interface-type interface-number null null-interface-number register} ] * 1-6

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Any view group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255. source-address: Unicast IP address of the multicast source. incoming-interface: Incoming interface of the multicast forwarding table entry. interface-type interface-number: Interface type and interface number. null: Incoming-interface is null. null-interface-number: The only null interface number is 0. register: Registered interface of PIM-SM. Use the display multicast forwarding-table command to view the information of multicast forwarding table. Related commands: display multicast routing-table # the multicast forwarding table information. <H3C> display multicast forwarding-table Multicast Forwarding Cache Table Total 2 entries 00001. (4.4.4.4, 224.2.254.84), iif Vlan-interface1, 0 oifs Matched 240 pkts, Wrong If 0 pkts Forwarded 232 pkts 00002. (4.4.4.4, 224.2.149.17), iif Vlan-interface1, 1 oifs List of outgoing interface: 01: Vlan-interface2 Matched 236 pkts, Wrong If 0 pkts Forwarded 233 pkts Matched 2 entries Table 1-3 on fields of the display multicast forwarding-table command Field Multicast Forwarding Cache Table Total 2 entries Multicast forwarding cache table Total number of entries 00002 Sequence number of entries 1-7

Command Manual Common Multicast Configuration Field Chapter 1 Common Multicast Configuration (4.4.4.4, 224.2.149.17) (s,g), source IP address and multicast group iif Vlan-interface1, 1 oifs List of outgoing interface: 01: Vlan-interface2 Matched 236 pkts, Wrong If 0 pkts Forwarded 233 pkts Matched 2 entries Multicast forwarding cache table has an incoming interface VLAN-interface 1 and one outgoing interface The list of outgoing interfaces has only one outgoing interface Vlan-interface 2 236 matched packets; 0 matched packets means wrong; 233 forwarded packets Two matched entries 1.1.8 display multicast routing-table display multicast routing-table [ group-address [ mask { mask mask-length } ] source-address [ mask { mask mask-length } ] incoming-interface { interface-type vlan-interface register } ]* Any view group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from 224.0.0.0 to 239.255.255.255. source-address: Unicast IP address of the multicast source. incoming-interface: Incoming interface of the multicast route entry. vlan-interface interface-number: VLAN interface number. register: Register interface of PIM-SM. Use the display multicast routing-table command to view the information of IP multicast routing table. Related commands: display multicast forwarding-table. # the route entry information in the multicast routing table. <H3C> display multicast routing-table 1-8

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Multicast Routing Table Total 3 entries (4.4.4.4, 224.2.149.17) Uptime: 00:15:16, Timeout in 272 sec Upstream interface: Vlan-interface1(4.4.4.6) Downstream interface list: Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP (4.4.4.4, 224.2.254.84) Uptime: 00:15:16, Timeout in 272 sec Upstream interface: Vlan-interface1(4.4.4.6) Downstream interface list: NULL (4.4.4.4, 239.255.2.2) Uptime: 00:02:57, Timeout in 123 sec Upstream interface: Vlan-interface1(4.4.4.6) Downstream interface list: NULL Matched 3 entries Table 1-4 on the fields of the display multicast routing-table command Field Multicast Routing Table Total 3 entries Multicast routing table Three entries in total (4.4.4.4, 224.2.149.17) (s, g) entry Uptime: 00:15:16, Timeout in 272 sec Upstream interface: Vlan-interface1(4.4.4.6) Downstream interface list: Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP Matched 3 entries Multicast routing table lasts 15 16 and times out in 272 seconds. Upstream interface vlan-interface 1 (its IP address is 4.4.4.6). Downstream interface list: has an interface Vlan-interface 2 (its IP address is 2.2.2.4). The downstream interface is configured with IGMP groups. Three entries in total meeting the requirement 1.1.9 multicast route-limit multicast route-limit limit 1-9

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration undo multicast route-limit System view limit: Capacity threshold for a multicast routing table. Use the multicast route-limit command to set the capacity threshold for a multicast routing table. Routers will discard the newly added (S, G) entries whenever the chosen threshold is exceeded. Use the undo multicast route-limit command to restore the capacity threshold to the default value. By default, the capacity threshold for a multicast routing table is 512. # Set the capacity threshold for a multicast routing table to 128. System : return to User with Ctrl+Z. [H3C] multicast route-limit 128 # Set the capacity threshold for a multicast routing table to 1000. The current capacity is 512, and the interface card in slot 5 does not support this new threshold setting. System : return to User with Ctrl+Z. [H3C] multicast route-limit 1000 Slot 5 does not support the limit, configuration failed. 1.1.10 multicast routing-enable multicast routing-enable undo multicast routing-enable System view None 1-10

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Use the multicast routing-enable command to enable multicast routing. Use the undo multicast routing-enable command to disable multicast routing. By default, multicast routing is disabled. Related commands: pim dm, pim sm. # Enable multicast routing. System : return to User with Ctrl+Z. [H3C] multicast routing-enable 1.1.11 multicast-suppression multicast-suppression { ratio bandwidth bandwidth } undo multicast-suppression Ethernet port view ratio: Maximum wire speed ratio in percents of the multicast traffic allowed on the port. The value range is 1 to 100, and the default value is 50. The smaller the ratio is, the smaller the multicast traffic is allowed to pass. bandwidth: Multicast suppression bandwidth in Mbps on the port. The value ranges from 1 to the maximum value of port bandwidth. Use the multicast-suppression command to set the multicast suppression ratio or multicast suppression bandwidth. Use the undo multicast-suppression command to disable the multicast suppression function. The default multicast suppression ratio is 100%. You can use the multicast-suppression command repeatedly. The effective multicast suppression ratio value is the one last updated. 1-11

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration Caution: You cannot enable both broadcast suppression and multicast suppression simultaneously on the same card. Namely, once you have enabled broadcast suppression on some ports of a card, you cannot enable multicast suppression on the other ports of the card, and vice versa. Although the commands are based on ports, the mutual exclusion between these two commands is based on cards. If multicast suppression is enabled, broadcast packets are also suppressed at the same time, while broadcast suppression does not work on multicast packets. No distinction is made between known multicast packets and unknown multicast packets in multicast suppression. Related commands: broadcast-suppression. # Set the multicast suppression ratio to 40%. System : return to User with Ctrl+Z. [H3C] interface ethernet 2/1/1 [H3C-Ethernet2/1/1] multicast-suppression 40 # Set the multicast suppression bandwidth to 40 Mbps. [H3C-Ethernet2/1/1] multicast-suppression bandwidth 40 # Disable multicast suppression. [H3C-Ethernet2/1/1] undo multicast-suppression 1.1.12 reset multicast forwarding-table reset multicast forwarding-table [ statistics ] { all { group-address [ mask { group-mask group-mask-length } ] source-address [ mask { source-mask source-mask-length } ] incoming-interface { null null-interface-number interface-type interface-number } }* } User view statistics: If it is selected, the system clears the statistic information of MFC forwarding entries. Otherwise, the system clears MFC forwarding entries. 1-12

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration all: All MFC forward entries. group-address: Multicast group address. group-mask: Mask of multicast group address group-mask-length: Mask length of multicast group address. source-address: Source address. source-mask: Mask of source address. source-mask-length: Mask length of source address. incoming-interface: Specifies incoming interface for the multicast forwarding entry. null: Incoming-interface is null. null-interface-number: The only number is 0. interface-type interface-number: Interface type and interface number. Use the reset multicast forwarding-table command to clear MFC forwarding entries or the statistic information of MFC forwarding entries. There is no requirement on the order of source address and group address in the command, as long as they both are valid addresses. The system prompts error information if you type in an invalid address. Related commands: reset pim routing-table, reset multicast routing-table, display multicast forwarding-table. # Clear the forwarding entry with the multicast group address of 225.5.4.3 from the MFC forwarding table. <H3C> reset multicast forwarding-table 225.5.4.3 # Clear statistic information of the forwarding entry with the multicast group address of 225.5.4.3 from the MFC forwarding table. <H3C> reset multicast forwarding-table statistics 225.5.4.3 1.1.13 reset multicast routing-table reset multicast routing-table { all { group-address [ mask { group-mask group-mask-length } ] source-address [ mask { source-mask source-mask-length } ] incoming-interface vlan-interface interface-number } * } User view 1-13

Command Manual Common Multicast Configuration Chapter 1 Common Multicast Configuration all: All route entries in the core multicast routing table. group-address: Multicast group address. group-mask: Mask of multicast group address group-mask-length: Mask length of multicast group address. source-address: Source address. source-mask: Mask of source address. source-mask-length: Mask length of source address. incoming-interface: Specifies incoming interface for the multicast forwarding entry. vlan-interface interface-number: VLAN interface number. Use the reset multicast routing-table command to clear route entries from the core multicast routing table, as well as MFC forwarding entries. There is no requirement on the order of source address and group address in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses. Related commands: reset pim routing-table, reset multicast forwarding-table and display multicast forwarding-table. # Clear the route entry with the group address of 225.5.4.3 from the core multicast routing table. <H3C> reset multicast routing-table 225.5.4.3 1-14

Command Manual IGMP Snooping Configuration Table of Contents Table of Contents Chapter 1 IGMP Snooping Configuration... 1-1 1.1 IGMP Snooping Configuration... 1-1 1.1.1 debugging igmp-snooping... 1-1 1.1.2 display igmp-snooping configuration... 1-2 1.1.3 display igmp-snooping group... 1-3 1.1.4 display igmp-snooping statistics... 1-4 1.1.5 igmp-snooping... 1-5 1.1.6 igmp-snooping 10ge-non-flooding enable slot... 1-6 1.1.7 igmp-snooping fast-leave... 1-7 1.1.8 igmp-snooping group-policy... 1-9 1.1.9 igmp-snooping host-aging-time... 1-10 1.1.10 igmp-snooping host-port vlan... 1-11 1.1.11 igmp-snooping max-response-time... 1-11 1.1.12 igmp-snooping nonflooding-enable... 1-12 1.1.13 igmp-snooping router-aging-time... 1-13 1.1.14 reset igmp-snooping statistics... 1-13 1.2 Multicast Static Routing Port Configuration... 1-14 1.2.1 multicast static-router-port... 1-14 1.3 IGMP Snooping Load Balancing Configuration... 1-15 1.3.1 display igmp-snooping configuration... 1-15 1.3.2 Igmp-snooping non-flooding entry-age-time... 1-16 1.4 IGMP Snooping Querier Configuration... 1-17 1.4.1 display igmp-snooping configuration vlan... 1-17 1.4.2 igmp-snooping general-query source-ip... 1-18 1.4.3 igmp-snooping leave-aggregation... 1-19 1.4.4 igmp-snooping max-response-time... 1-19 1.4.5 igmp-snooping querier... 1-20 1.4.6 igmp-snooping query-interval... 1-21 1.4.7 igmp-snooping report-aggregation... 1-22 1.5 Multicast Forwarding on Demand Configuration... 1-23 1.5.1 multicast forward according-to-need... 1-23 i

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Note: The term "router" in this document refers to a router in a generic sense or a Layer 3 switch running an IP routing protocol. 1.1 IGMP Snooping Configuration 1.1.1 debugging igmp-snooping debugging igmp-snooping { abnormal all events forward groups packets timers } undo debugging igmp-snooping { abnormal all events forward groups packets timers } User view abnormal: Enables IGMP Snooping abnormal debugging all: Turns on all IGMP Snooping debugging switches events: Enables IGMP Snooping events debugging forward: Enables IGMP Snooping forwarding debugging groups: Enables IGMP Snooping multicast groups debugging packets: Enables IGMP Snooping packets debugging timers: Enables IGMP Snooping timers debugging Use the debugging igmp-snooping command to enable IGMP Snooping debugging. Use the undo debugging igmp-snooping to disable IGMP Snooping debugging. By default, IGMP Snooping debugging is disabled. 1-1

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration # Enable IGMP Snooping timers debugging. <H3C> debugging igmp-snooping timers IGMP snooping timers debugging switch is on. 1.1.2 display igmp-snooping configuration display igmp-snooping configuration Any view None Use the display igmp-snooping configuration command to view the IGMP Snooping configuration information. Related commands: igmp-snooping. # Display the IGMP Snooping configuration information of the switch. <H3C> display igmp-snooping configuration Enable IGMP-Snooping. Enable IGMP-Snooping. The router port timeout is 260 second(s). The max response timeout is 1 second(s). The host port timeout is 260 second(s). Enable IGMP-Snooping Non-Flooding. Table 1-1 display igmp-snooping configuration command output description Field Enable IGMP-Snooping The router port timeout The max response timeout The host port timeout Enable IGMP-Snooping Non-Flooding IGMP Snooping is enabled Aging time of the router port Maximum response time Aging time of the multicast group member IGMP Snooping non-flooding is enabled. 1-2

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration 1.1.3 display igmp-snooping group display igmp-snooping group [ vlan vlan-id [ group-address] ] Any view vlan vlan-id: Specifies the VLAN where the multicast group to be viewed is located. When the parameter is not provided, the command will display the information about all the multicast groups on the VLAN. group-address: Address of the multicast group, the information of which is to be displayed. If this argument is not provided, the command displays information of all the multicast groups in the specified VLAN. Use the display igmp-snooping group command to view the IP multicast group and MAC multicast group information of a VLAN or all the VLANs on the Ethernet switch. # Display the multicast group information of VLAN 10. <H3C> display igmp-snooping group vlan 10 Total 1 IP Group(s). Total 1 MAC Group(s). Vlan(id):10. Total 1 IP Group(s). Total 1 MAC Group(s). Router port(s): IP group(s):the following ip group(s) match to one mac group. IP group address:230.45.45.1 Host port(s):ethernet4/1/1 MAC group(s): MAC group address:0100-5e2d-2d01 Host port(s):ethernet4/1/1 Table 1-2 display igmp-snooping group command output description Field Vlan(id) Router port(s) Specified VLAN ID Router port 1-3

Command Manual IGMP Snooping Configuration IP group(s) Field IP group address Host port(s) MAC group(s) MAC group address Host port(s) IP multicast group Chapter 1 IGMP Snooping Configuration IP address of the IP multicast group Host port of the IP multicast group MAC multicast group MAC address of the MAC multicast group Host port of the MAC multicast group 1.1.4 display igmp-snooping statistics display igmp-snooping statistics Any view None Use the display igmp-snooping statistics command to view the statistics information on IGMP Snooping. Related commands: igmp-snooping. # Display statistics information about IGMP Snooping. <H3C> display igmp-snooping statistics Received IGMP general query packet(s) number:1. Received IGMP specific query packet(s) number:2. Received IGMP V1 report packet(s) number:2. Received IGMP V2 report packet(s) number:0. Received IGMP leave packet(s) number:3. Received error IGMP packet(s) number:0. Sent IGMP specific query packet(s) number:5. 1-4

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Table 1-3 display igmp-snooping statistics command output description Field Received IGMP general query packet(s) number Received IGMP specific query packet(s) number Received IGMP V1 report packet(s) number Received IGMP V2 report packet(s) number Received IGMP leave packet(s) number Received error IGMP packet(s) number Sent IGMP specific query packet(s) number Number of received IGMP general queries Number of received IGMP group-specific queries Number of received IGMPv1 reports Number of received IGMPv2 reports Number of received IGMP leave messages Number of received error IGMP messages Number of sent IGMP group-specific queries 1.1.5 igmp-snooping igmp-snooping { enable disable } System view, VLAN view enable: Enables IGMP Snooping. disable: Disables IGMP Snooping; Use the igmp-snooping enable command to enable IGMP Snooping globally or in a VLAN. Use the igmp-snooping disable command to disable IGMP Snooping. By default, the switch disables IGMP Snooping. 1-5

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Caution: When configuring IGMP Snooping, first enable global IGMP Snooping in system view, and then enable IGMP Snooping in VLAN view. Otherwise the IGMP Snooping function will not take effect. If the VLAN VPN is enabled on a port, the IGMP Snooping feature cannot be enabled on the VLAN for the port or the IGMP feature cannot be enabled on the corresponding VLAN interface. If IGMP Snooping feature is enabled in a VLAN, or IGMP is enabled on the VLAN interface, you cannot add the member port on which VLAN VPN is enabled into the VLAN. Isolate-user-VLAN supports the IGMP-Snooping function. After IGMP-Snooping is enabled under isolate-user-vlan, all secondary VLANs are IGMP-Snooping enabled. In a secondary VLAN, IGMP packets will be directly converted and processed in isolate-user-vlan, namely all the multicast services are implemented within isolate-user-vlan. Ports in secondary VLANs cannot be used as source addresses of multicast. If the undo igmp-snooping command is executed in system view, all IGMP Snooping configurations previously made are removed. # Enable IGMP Snooping in system view. System : return to User with Ctrl+Z. [H3C] igmp-snooping enable # Enable IGMP Snooping on VLAN 10 System : return to User with Ctrl+Z. [H3C] vlan 10 [H3C-vlan10] igmp-snooping enable 1.1.6 igmp-snooping 10ge-non-flooding enable slot igmp-snooping 10ge-non-flooding enable slot slot-num undo igmp-snooping 10ge-non-flooding enable slot slot-num 1-6

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration System view slot-num: Slot number of the interface board. Use the igmp-snooping 10ge-non-flooding enable slot command to suppress the ports on the specified interface board from flooding unknown multicast packets at Layer 2. Use the undo igmp-snooping 10ge-non-flooding enable slot command to remove the configuration. By default, a port floods unknown multicast traffic at Layer 2. Note: Currently, this command is not supported. # Suppress the interface board at Slot 5 from flooding unknown multicast traffic at Layer 2. System : return to User with Ctrl+Z. [H3C] igmp-snooping 10ge-non-flooding enable slot 5 1.1.7 igmp-snooping fast-leave igmp-snooping fast-leave [ vlan { vlan-id [ to vlan-id ] }&<1-10> ] undo igmp-snooping fast-leave [ vlan { vlan-id [ to vlan-id ] } &<1-10> ] System view, Ethernet port view vlan { vlan-id [ to vlan-id ] }&<1-10>: Specifies any VLAN or VLAN scope for port you want to enable/disable the IGMP Snooping fast leave feature on. The vlan-id argument ranges from 1 to 4094. 1-7

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Use the igmp-snooping fast-leave command to enable IGMP Snooping fast leave. Use the undo igmp-snooping fast-leave command to disable IGMP Snooping fast leave. You can optionally specify multiple VLANs in the igmp-snooping fast-leave command, through which you can enable IGMP Snooping fast leave in the corresponding VLANs. If you do not specify any VLAN, IGMP Snooping fast leave is enabled in all VLANs. Note: Fast leaves that are configured in system view and Ethernet port view operate separately. Fast leave works on all ports of the specified VLANs if you configure it in system view. However, it only works on the current port (e.g., a port operates as a trunk of multiple VLANs) in the specified VLANs if you configure it in Ethernet port view. Caution: Fast leave configured for a port takes effect only when the VLAN it belongs to is IGMP Snooping-enabled. Fast leave does not work if the corresponding specified VLANs do not exist, the port does not belongs to any of the specified VLANs, or the VLANs do not have IGMP Snooping enabled. A newly configured IGMP Snooping clears all existing fast leave configurations. The igmp-snooping fast-leave command is useless if you do not enable IGMP Snooping globally. (You can enable IGMP Snooping globally by executing the igmp-snooping enable command in system view.) When you configure IGMP Snooping fast leave on aggregation ports, the configuration takes effect only on primary aggregation ports. If you add an IGMP V1 host of the same multicast group to the port, the switch does not remove the port when the port receives an IGMP Leave packet of the multicast group even you enable IGMP Snooping fast leave for the port. Fast leave is disabled by default. Related commands: igmp-snooping. 1-8

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration # Enable IGMP Snooping fast leave on Ethernet2/1/1 for VLAN 5, VLAN 7, VLAN 8, VLAN 30 through VLAN 40, and VLAN 50. System : return to User with Ctrl+Z. [H3C] interface Ethernet2/1/1 [H3C-Ethernet2/1/1] igmp-snooping fast-leave vlan 5 7 to 8 30 to 40 50 # Enable IGMP Snooping fast leave for all Ethernet ports except those in VLAN 5. System : return to User with Ctrl+Z. [H3C] igmp-snooping fast-leave [H3C] undo igmp-snooping fast-leave vlan 5 1.1.8 igmp-snooping group-policy igmp-snooping group-policy acl-number undo igmp-snooping group-policy VLAN view acl-number: Number of basic ACL, in the range of 2,000 to 2,999. Use the igmp-snooping group-policy command to configure the filtering rule of multicast groups on a specified VLAN so as to control the access to IP multicast groups. You can configure only one ACL rule for each VLAN, and the new configured rule will replace the old one. Use the undo igmp-snooping group-policy command to remove the configuration. By default, no filtering rule is set in a VLAN. In this case, a host can join any multicast group. If an ACL is configured in a VLAN to filter multicast groups, hosts can join only those multicast groups that are permitted to join. # Create ACL2001 and configure the rule for basic ACL, using the source IP address as the destination multicast address. 1-9

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration System : return to User with Ctrl+Z. [H3C]acl number 2001 [H3C-acl-basic-2001]rule 0 permit source 224.1.1.1 0 [H3C-acl-basic-2001]quit # Create VLAN 2. System : return to User with Ctrl+Z. [H3C] vlan 2 # Configure the filtering rule of multicast groups in VLAN 2. [H3C-vlan2] igmp-snooping group-policy 2001 1.1.9 igmp-snooping host-aging-time igmp-snooping host-aging-time seconds undo igmp-snooping host-aging-time System view seconds: Port aging time for the multicast group member, ranging from 200 to 1000 seconds. By default, it is 260 seconds. Use the igmp-snooping host-aging-time command to configure the port aging time of the multicast group members. Use the undo igmp-snooping host-aging-time command to restore the default value. This command is used to set the aging time of the multicast group member so that the refresh frequency can be controlled. When the group members change frequently, the aging time should be comparatively short, and vice versa. Related commands: igmp-snooping. # Set the aging time to 300 seconds. System : return to User with Ctrl+Z. [H3C] igmp-snooping host-aging-time 300 1-10

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration 1.1.10 igmp-snooping host-port vlan igmp-snooping host-port vlan { all vlan-id } undo igmp-snooping host-port vlan { all vlan-id } Ethernet port view all: Specifies all VLANs. vlan-id: Specifies the ID of a VLAN in the range of 1 to 4094. Use the igmp-snooping host-port vlan command to enable the host port function on the port. Use the undo igmp-snooping host-port vlan command to disable the function on the port. By default, the host port function is disabled. # Enable the host port function on Ethernet 5/1/1 for all VLANs. System : return to User with Ctrl+Z. [H3C] interface ethernet 5/1/1 [H3C-Ethernet5/1/1] igmp-snooping host-port vlan all 1.1.11 igmp-snooping max-response-time igmp-snooping max-response-time seconds undo igmp-snooping max-response-time System view seconds: Maximum response time for a query, ranging from 1 to 25 seconds. By default, it is 1 second. 1-11

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Use the igmp-snooping max-response-time command to configure the maximum response time for a query. Use the undo igmp-snooping max-response-time command to restore the default value. The set maximum response time decides the time limit for the switch to respond to IGMP Snooping query packets. Related commands: igmp-snooping, igmp-snooping router-aging-time. # Set the maximum response time for the IGMP Snooping packet to 15s. System : return to User with Ctrl+Z. [H3C] igmp-snooping max-response-time 15 1.1.12 igmp-snooping nonflooding-enable igmp-snooping nonflooding-enable undo igmp-snooping nonflooding-enable System view None Use the igmp-snooping nonflooding-enable command to suppress flooding of unknown multicast data packets within their respective VLANs. Use the undo igmp-snooping nonflooding-enable command to restore the default. Note that if IGMP Snooping is not enabled on the VLAN (nor Layer 3 multicast), unknown multicast packets are flooded within their respective VLANs no matter whether this function is enabled or not. To suppress flooding of unknown multicast data packets within their respective VLANs, you need to enable IGMP Snooping in the VLANs and enable igmp-snooping nonflooding-enable globally. By default, unknown multicast data packets are flooded within their respective VLANs. 1-12

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration # Enable the device to suppress flooding of unknown multicast packets within their respective VLANs. System : return to User with Ctrl+Z. [H3C] igmp-snooping nonflooding-enable 1.1.13 igmp-snooping router-aging-time igmp-snooping router-aging-time seconds undo igmp-snooping router-aging-time System view seconds: Router port aging time, ranging from 1 to 1000 measured in seconds; By default, it is 260. Use the igmp-snooping router-aging-time command to configure the router port aging time of IGMP Snooping. Use the undo igmp-snooping router-aging-time command to restore the default value. The port here refers to the Ethernet switch port connected to the multicast router. The Layer-2 Ethernet switch receives general query packets from the router via this port. The timer should be set to about 3.5 times of the general query period of the router. Related commands: igmp-snooping, igmp-snooping max-response-time. # Set the aging time of the IGMP Snooping router port to 500 seconds. System : return to User with Ctrl+Z. [H3C] igmp-snooping router-aging-time 500 1.1.14 reset igmp-snooping statistics reset igmp-snooping statistics 1-13

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration User view None Use the reset igmp-snooping statistics command to reset the IGMP Snooping statistic information. Related commands: igmp-snooping. # Clear IGMP Snooping statistic information. <H3C> reset igmp-snooping statistics 1.2 Multicast Static Routing Port Configuration 1.2.1 multicast static-router-port In VLAN view: multicast static-router-port port-number undo multicast static-router-port port-number In Ethernet port view: multicast static-router-port vlan vlan-id undo multicast static-router-port vlan vlan-id VLAN view, Ethernet port view port-number: Port number of the port to be configured as a static routing port. Provide this argument in the format of interface-type interface-number, where the interface-type argument can only be Ethernet port type. vlan-id: ID of the VLAN where the port belongs. Use the multicast static-router-port command to configure a port in a VLAN as a static routing port, through which IGMP packets can be transparently transmitted, so as to meet the requirements of specific networks. 1-14

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Use the undo multicast static-router-port command to remove static routing port configuration. By default, no static routing port is configured. # Configure GigabitEthernet 5/1/1 in VLAN 10 to be a static routing port. System : return to User with Ctrl+Z. [H3C] vlan 10 [H3C-vlan10] multicast static-router-port GigabitEthernet 5/1/1 1.3 IGMP Snooping Load Balancing Configuration 1.3.1 display igmp-snooping configuration display igmp-snooping configuration Any view None Use the display igmp-snooping configuration command to view the configuration information related to IGMP Snooping. # Display the IGMP Snooping configuration information. <H3C> display igmp-snooping configuration Enable IGMP-Snooping. The router port timeout is 260 second(s). The max response timeout is 1 second(s). The host port timeout is 260 second(s). Enable IGMP-Snooping Non-Flooding. The IGMP-Snooping Non-Flooding entry age time is 16:36:59. 1-15

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration Table 1-4 display igmp-snooping configuration command output description Field Enable IGMP-Snooping The router port timeout max response timeout host port timeout Enable IGMP-Snooping Non-Flooding IGMP-Snooping Non-Flooding entry age time IGMP Snooping is enabled. Aging time of the router port Maximum response time in query messages Aging time of member ports Unknown-multicast flooding suppression is enabled. Aging time of IGMP Snooping non-flooding entries 1.3.2 Igmp-snooping non-flooding entry-age-time igmp-snooping non-flooding entry-age-time hh:mm:ss undo igmp-snooping non-flooding entry-age-time System view hh:mm:ss: Point of time at which IGMP Snooping non-flooding entries age out every day. Use the igmp-snooping non-flooding entry-age-time command to configure the aging time of IGMP Snooping non-flooding entries. Use the undo igmp-snooping non-flooding entry-age-time command to restore the default. By default, the aging time is 3:00:00. Related commands: display igmp-snooping configuration. # Set the aging time of IGMP Snooping non-flooding entries to 16:36:59. System : return to User with Ctrl+Z. [H3C] igmp-snooping non-flooding entry-age-time 16:36:59 1-16

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration 1.4 IGMP Snooping Querier Configuration 1.4.1 display igmp-snooping configuration vlan display igmp-snooping configuration [ vlan vlan-id ] Any view vlan vlan-id: Displays the IGMP Snooping configuration information in the specified VLAN. Use the display igmp-snooping configuration command to view IGMP Snooping configuration information. Related commands: igmp-snooping. # Display the global IGMP Snooping configuration information on the switch. <H3C> display igmp-snooping configuration Enable IGMP-Snooping. The router port timeout is 260 second(s). The max response timeout is 1 second(s). The host port timeout is 260 second(s). Enable IGMP-Snooping Non-Flooding. The IGMP-Snooping Non-Flooding entry age time is 03:00:00. Enable IGMP-Snooping report-aggregation The output information shows that IGMP Snooping is enabled; the aging time of router ports is 260 seconds; the max response time of group-specific query messages is 1 second; the aging time of member ports is 260 seconds; IGMP Snooping non-flooding is enabled; and IGMP report transparent transmission suppression is enabled. # Display the IGMP Snooping configuration information in VLAN 66. <H3C> display igmp-snooping configuration vlan 66 Enable IGMP-Snooping. IGMP-snooping querier is enabled. IGMP-snooping general query interval is 60 second(s). IGMP-snooping max-response-time in general query is 10 second(s). IGMP-snooping source address in general query is 0.0.0.0. 1-17

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration 1.4.2 igmp-snooping general-query source-ip igmp-snooping general-query source-ip { current-interface ip-address } undo igmp-snooping general-query source-ip VLAN view current-interface: Configures the source IP address to be carried in the IGMP queries sent by the device to be the primary IP address of the current VLAN interface. ip-address: Specified an IP address as the source IP address to be carried in the IGMP queries sent by the device. Use the igmp-snooping general-query source-ip current-interface command to configure the querier to use the primary IP address of the current VLAN interface as the source IP address. If no VLAN interface is available or the VLAN interface has no primary IP address, 0.0.0.0 will be used. Use the igmp-snooping general-query source-ip ip-address command to specify an IP address as the source IP address of IGMP queries.. Use the undo igmp-snooping general-query source-ip command to restore the source IP address of IGMP queries to the default. By default, the source IP address is 0.0.0.0. # Enable IGMP Snooping globally. System : return to User with Ctrl+Z. [H3C] igmp-snooping enable Enable IGMP-Snooping ok. # Create VLAN 2. [H3C] vlan 2 # Enable IGMP Snooping in VLAN 2. [H3C-vlan2] igmp-snooping enable # Set the source IP address of IGMP queries to 100.100.100.100 in VLAN 2. [H3C-vlan2] igmp-snooping general-query source-ip 100.100.100.100 1-18

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration 1.4.3 igmp-snooping leave-aggregation igmp-snooping leave-aggregation undo igmp-snooping leave-aggregation System view None Use the igmp-snooping leave-aggregation command to enable the function of suppressing transparent relaying of IGMP leave messages. Use the undo igmp-snooping leave-aggregation command to disable the function of suppressing transparent relaying of IGMP leave messages. By default, this function is disabled. Before enabling the function of suppressing transparent relaying of IGMP leave messages, you must enable IGMP Snooping globally. Related commands: igmp-snooping. # Enable the function of suppressing transparent relaying of IGMP leave messages. System : return to User with Ctrl+Z. [H3C] igmp-snooping enable Enable IGMP-Snooping ok. [H3C] igmp-snooping leave-aggregation 1.4.4 igmp-snooping max-response-time igmp-snooping max-response-time max-response-time undo igmp-snooping max-response-time VLAN view 1-19

Command Manual IGMP Snooping Configuration Chapter 1 IGMP Snooping Configuration max-response-time: Maximum response time of query messages, ranging from 1 to 25, in seconds. Use the igmp-snooping max-response-time command to configure the maximum response time of IGMP queries in the VLAN. Use the undo igmp-snooping max-response-time command to restore the maximum response time of IGMP queries to the default value. By default, the maximum response time of IGMP queries is 10 seconds. # Enable IGMP Snooping globally. System : return to User with Ctrl+Z. [H3C] igmp-snooping enable Enable IGMP-Snooping ok. # Create VLAN 2. [H3C] vlan 2 # Enable IGMP Snooping in VLAN 2. [H3C-vlan2] igmp-snooping enable # Set the maximum response time of IGMP queries to 20 seconds in VLAN 2. [H3C-vlan2] igmp-snooping max-response-time 20 1.4.5 igmp-snooping querier igmp-snooping querier undo igmp-snooping querier VLAN view None Use the igmp-snooping querier command to enable the IGMP Snooping querier in the current VLAN. 1-20