set mld input-filter

Use this command to create an input filter to apply to the VLAN.

Syntax

set mld input-filter filter-id rule-id start-ip ip-address end-ip ip-address protocol-action {deny | allow} flow-action {drop | flood | allow}

Parameters

filter-id The ID of the filter. You can create up to 16 MLD input filters. Each filter must have a unique ID. Possible values are 1–16.
rule-id The ID of a rule associated with the input filter. The rule ID sets the order in which multiple rules check incoming packets. You can create up to eight rules for each input filter. Each rule must have a unique ID. Possible values are 1–8.
start-ip ip-address The starting IP address of the rule‘s IP address range
end-ip ip-address The ending IP address of the rule‘s IP address range
protocol-action The response to protocols in packets that match a rule‘s IP address range:
  • deny — Deny packets matching this rule
  • allow — Allow packets matching this rule
flow-action The response to flows in packets that match a rule‘s IP address range:
  • drop — Drop packets matching this rule
  • flood — Flood packets matching this rule
  • allow — Allow packets matching this rule

Defaults

None.

Mode

All command modes.

Usage

MLD will check all incoming packets received from the range of IP addresses specified in the filter‘s rules. The protocol action and flow action occur when an incoming packet matches an IP address range. If an incoming packet matches a rule‘s address range, the other rules in the filter are not checked.

To activate the filter, you must assign the filter to a VLAN and enable the filter. For more information, see set mld config.

Example

This example shows how to create a filter that will block all multicast flows received by 2001:11ac:fd34:3333:0:0:0:3.

System(su)->set mld input-filter 1 1 start-ip 2001:11ac:fd34:3333:0:0:0:3 end-ip 2001:11ac:fd34:3333:0:0:0:3 protocol-action allow flow-action drop