Technical Documentation

Filtering Unwanted MLD Reports at the MLD Interface Level

The group-policy statement enables you to filter unwanted IGMP reports at the interface level. When this statement is enabled on a router running MLD version 1 (MLDv1), after the router receives an MLD report, the router compares the group against the specified group policy and performs the action configured in that policy (for example, rejects the report if the policy matches the defined address or network). When this statement is enabled on a router running MLD version 2 (MLDv2), after the router receives an MLD report, the router compares the group against the specified group policy and performs the action configured in that policy (for example, rejects the report if the policy matches the defined address or network).

You define the policy to match only MLD group addresses (for MLDv1) by using the policy's route-filter statement to match the group address. You define the policy to match MLD (source, group) addresses (for MLDv2) by using the policy's route-filter statement to match the group address and the policy's source-address-filter statement to match the source address. For additional information about how to configure policies, see the Junos Policy Framework Configuration Guide.

To enable MLD report filtering for an interface, include the group-policy statement:

group-policy [ policy-names ];

You can include this statement at the following hierarchy levels:

  • [edit protocols mld interface interface-name]
  • [edit logical-systems logical-system-name protocols mld interface interface-name]

Example: MLD Report Filtering

Configure MLD report filtering on the interface where you prefer not to receive specific group or (source, group) reports:

[edit]protocols {mld {interface ge-1/1/1.0 {group-policy reject_policy;}}}

Configure either an MLDv1 or MLDv2 policy:

policy-options { #MLDv1 policypolicy-statement reject_policy {from {route-filter fec0:1:1:4::/64 exact;}then reject;}policy-statement reject_policy { #MLDv2 policyfrom {route-filter fec0:1:1:4::/64 exact;source-address-filter fe80::2e0:81ff:fe05:1a8d/32 orlonger;}then reject;}}

Related Topics


Published: 2010-07-19

Help
|
My Account
|
Log Out