Configuring IPsec on the OmniSwitch Configuring IPsec
page 27-22 OmniSwitch AOS Release 6 Network Configuration Guide September 2009
Discarding RIPng Packets
RIPng uses the well known address of ff02::9 to advertise routes. The following example shows how IPsec
can be configured to drop all RIPng packets.
Discarding RIPng Packets
Switch A
-> ipsec policy DISCARD_UDPout source fe80::100 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::200 destination ff02::9 protocol udp
in discard
Switch B
-> ipsec policy DISCARD_UDPout source fe80::200 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::100 destination ff02::9 protocol udp
in discard
Switch A
Link Local: fe80::200Link Local: fe80::100
Switch B
To Next Page
Loading...
