Dasan V5808 - MLD State Limit; MLD Snooping Debug

User Manual UMN:CLI
V5808
479
mrouter IFNAME
Global
globally.
IFNAME: VLAN interface name
10.2.4 MLD State Limit
You can use MLD State Limit feature to limit the number of MLD states that can be joined
to a router on a per-interface or global level. The MLD group limits feature provides
protection against DoS (denial of service) attacks caused by MLD packets. Membership
reports exceeding the configured limits are not entered into the MLD cache and traffic for
the excess membership reports is not forwarded.
To limit the number of MLD state globally, use the following command.
Command
Mode
Description
ipv6 mld limit <1-2097152>
[except WORD]
Global
Limits the number of MLD membership reports globally.
1-2097152: the number of MLD states allowed on a
router. (Default: 0 )
WORD: IPv6 access list name
no ipv6 mld limit
Disables the globally configured MLD state limit.
If you want to exclude certain groups or channels from being counted against the MLD
limit so that they can be joined to an interface, use except option.
To limit the number of MLD state on an interface, use the following command.
Command
Mode
Description
ipv6 mld limit <1-2097152>
[ except WORD ]
Interface
Limits the number of MLD membership reports on an
interface.
1-2097152: the number of MLD states allowed on an
interface (default:0)
WORD: IPv6 access list name
no ipv6 mld limit
Disables the configured MLD state limit per interface.
10.2.5 MLD Snooping Debug
To enable the debugging of all MLD or a specific feature of the MLD, use the following
command.
Command
Mode
Description
debug mld snooping {all |
decode | encode | fsm | tib |
events}
Enable
Enables MLD snooping debugging.
i