PLANET XGS3-24042 - Manual (Page 478)

49-22
First, globally enable the destination control, since destination control needs to avoid the unauthorized users
from receiving multicast data, once it is enabled globally, the switch will stop broadcasting received multicast
data, so if a switch has enabled destination control, users should not connect two or more other Layer three
switches within the same VLAN where it locates. The following is the configuration command:
Command Explanation
Global Configuration Mode
multicast destination-control(necessary)
Globally enable IPV4 and IPv6
destination control, the no operation of
this command will globally disable
destination control. All of the other
configuration can only take effect after
globally enabled.
The next is configuring destination control rules, which are similar to that of source control, but using ACL
number from 9000 to 10099 instead.
Command Explanation
Global Configuration Mode
[no] ipv6 access-list <9000-10099>
{deny|permit} {{<source/M>}|{host-source
<source-host-ip>}|any-source}
{{<destination/M>}|{host-destination
<destination-host-ip>}|any-destination}
Used to configure destination control
rules, these rules can only take effect
when applied to specified source IP,
VLAN-MAC or port. The no operation
of this rule will delete the specified
rule.
The last step is to configure the rules to the specified source IP, source VLAN MAC or the specified port. What
should be paid attention to is that only when the MLD-SNOOPING is enabled, these rules can be globally
used, or, only rules of source IP can be used in MLD protocol. The following is the configuration command:
Command Explanation
Port Mode
[no] ipv6 multicast destination-control
access-group <9000-10099>
Used to configure the destination control
rule to a port, the no operation of this
command will cancel the configuration.
Global Configuration Mode
[no] ipv6 multicast destination-control
<1-4094> <macaddr> access-group
<9000-10099>
Used to configure the destination control
rules to the specified VLAN-MAC, the no
operation of this command will cancel
the configuration.
[no] ipv6 multicast destination-control
<IPADDRESS/M> access-group
<9000-100999>
Used to configure the destination control
rules to the specified source IPv6
address/MASK, the no operation of this
command will cancel the configuration.