QTECH QSW-8300 Инструкция по настройке - Manual (Page 282)

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
281
be dropped by default. All the source control
configurations can only be done after globally
enabled, and only when all the configured
rules are disabled, the source control can be
disabled globally.
The next is configuring the source control rules, which adopts the same method as configuring
ACL, using ACL number from 8000 to 8099, while each rule number can configure 10 rules.
What should be paid attention to is that these rules have orders, the earliest configured rule is
at the front. Once a rule is matched, the following ones will not take effect, so the globally
enabled rules should be the last to configure. The following is the command:
Command Explanation
Global Configuration Mode
[no] ipv6 access-list <8000-8099>
{deny|permit} {{<source/M>}|{host-source
<source-host-ip>}|any-source}
{{<destination/M> }|{host-destination
<destination-host-ip>}|any-destination}
Used to configure the source control rules, the
rules can only take effect when applied to the
specified port. The no operation of this
command can delete the specified rule.
The last is to configure the rules to the specified port.
Pay attention: since the configured rules will take up entries of hardware, configuring too many
rules might cause failure if the underlying entries are full, so it is recommended that users
adopt rules as simple as possible. The following is the configuration command:
Command Explanation
Port Configuration Mode
[no] ipv6 multicast source-control
access-group <8000-8099>
Used to configure the source control rule to a port,
he no operation will cancel this configuration.
The configuration of destination control
The configuration of destination control is similar to that of source control, and also has three
steps:
First, globally enable the destination control, since destination control needs to avoid the
unauthorized users from receiving multicast data, once it is enabled globally, the switch will
stop broadcasting received multicast data, so if a switch has enabled destination control, users
should not connect two or more other Layer three switches within the same VLAN where it
locates. The following is the configuration command:
Command Explanation
Global Configuration Mode
multicast destination- Globally enable IPV4 and IPv6 destination control,