Ipv6 filter entry – Alcatel-Lucent 7750 SR OS User Manual

Page 318

Advertising
background image

Common Configuration Tasks

Page 318

7750 SR OS Router Configuration Guide

IPv6 Filter Entry

Within an IPv6 filter policy, configure filter entries which contain criteria against which ingress,
egress, or network traffic is matched. The action specified in the entry determine how the packets
are handled, either dropped or forwarded.

Enter an IPv6 filter entry ID. The system does not dynamically assign a value.

Assign an action, either drop or forward.

Specify matching criteria.

Use the following CLI syntax to create an IPv6 filter entry:

CLI Syntax:

config>filter# ipv6-filter ipv6-filter-id

entry entry-id time-range time-range-name

action [drop|forward]

description description-string

log log-id

match [next-header next-header]

dscp dscp-name

dst-ip ipv6-address/prefix-length

dst-port {lt|gt|eq} dst-port-number

dst-port range start end

icmp-code icmp-code

icmp-type icmp-type

src-ip ipv6-address/prefix-length

src-port {lt|gt|eq} src-port-number

src-port range start end

tcp-ack {true|false}

tcp-syn {true|false}

The following displays the configuration command usage to create an IPv6 filter entry:

Example

:

config>filter# ipv6-filter 11

config>filter>ipv6-filter# entry 1 create

config>filter>ipv6-filter>entry# match

config>filter>ipv6-filter>entry>match# dst-ip 11::12/128

config>filter>ipv6-filter>entry>match# src-ip 13::14/128

config>filter>ipv6-filter>entry>match$ exit

config>filter>ipv6-filter>entry# action drop

config>filter>ipv6-filter>entry# exit

Advertising