HP VPN Firewall Appliances Network Management Configuration Guide

920
[FirewallB-GigabitEthernet0/2] pim ipv6 dm
[FirewallB-GigabitEthernet0/2] quit
3. Configure an IPv6 multicast group filter on Firewall A, so that the hosts connected to
GigabitEthernet 0/1 can join IPv6 multicast group FF1E::101 only.
[FirewallA] acl ipv6 number 2001
[FirewallA-acl6-basic-2001] rule permit source ff1e::101 128
[FirewallA-acl6-basic-2001] quit
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] mld group-policy 2001
[FirewallA-GigabitEthernet0/1] quit
Verifying the configuration
# Display MLD information on GigabitEthernet 0/1 of Firewall B.
[FirewallB] display mld interface gigabitethernet 0/1
GigabitEthernet0/1(FE80::200:5EFF:FE66:5100):
MLD is enabled
Current MLD version is 1
Value of query interval for MLD(in seconds): 125
Value of other querier present interval for MLD(in seconds): 255
Value of maximum query response time for MLD(in seconds): 10
Querier for MLD: FE80::200:5EFF:FE66:5100 (this router)
Total 1 MLD Group reported
MLD SSM mapping configuration example
Network requirements
As shown in Figure 412, the IPv6 PIM-SM domain applies both the ASM model and SSM model for IPv6
multicast delivery. GigabitEthernet 0/3 on the firewall serves as the C-BSR and C-RP. The SSM group
range is FF3E::/64.
MLDv2 runs on the firewall's GigabitEthernet 0/1. The receiver host runs MLDv1, and does not support
MLDv2. Therefore, the Receiver host cannot specify expected multicast sources in its membership reports.
Source 1, Source 2, and Source 3 send IPv6 multicast packets to multicast groups in the IPv6 SSM group
range. You can configure the MLD SSM mapping feature on the firewall so that the receiver host will
receive IPv6 multicast data from Source 1 and Source 3 only.