Filter
Top Products
Common Configuration Tasks
Page 318 7750 SR OS Router Configuration Guide
IPv6 Filter Entry
Within an IPv6 filter policy, configure filter entries which contain criteria against which ingress,
egress, or network traffic is matched. The action specified in the entry determine how the packets
are handled, either dropped or forwarded.
• Enter an IPv6 filter entry ID. The system does not dynamically assign a value.
• Assign an action, either drop or forward.
• Specify matching criteria.
Use the following CLI syntax to create an IPv6 filter entry:
CLI Syntax: config>filter# ipv6-filter ipv6-filter-id
entry entry-id time-range time-range-name
action [drop|forward]
description description-string
log log-id
match [next-header next-header]
dscp dscp-name
dst-ip ipv6-address/prefix-length
dst-port {lt|gt|eq} dst-port-number
dst-port range start end
icmp-code icmp-code
icmp-type icmp-type
src-ip ipv6-address/prefix-length
src-port {lt|gt|eq} src-port-number
src-port range start end
tcp-ack {true|false}
tcp-syn {true|false}
The following displays the configuration command usage to create an IPv6 filter entry:
Example:config>filter# ipv6-filter 11
config>filter>ipv6-filter# entry 1 create
config>filter>ipv6-filter>entry# match
config>filter>ipv6-filter>entry>match# dst-ip 11::12/128
config>filter>ipv6-filter>entry>match# src-ip 13::14/128
config>filter>ipv6-filter>entry>match$ exit
config>filter>ipv6-filter>entry# action drop
config>filter>ipv6-filter>entry# exit