Alcatel-Lucent OmniSwitch 6860 Series

Configuring IPsec Additional Examples
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 18-22
Discarding RIPng Packets
RIPng uses the well known address of ff02::9 to advertise routes. The following example shows how
IPsec can be configured to drop all RIPng packets.
Discarding RIPng Packets
Switch A
-> ipsec policy DISCARD_UDPout source fe80::100 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::200 destination ff02::9 protocol udp
in discard
Switch B
-> ipsec policy DISCARD_UDPout source fe80::200 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::100 destination ff02::9 protocol udp
in discard
Switch A
Link Local: fe80::200Link Local: fe80::100
Switch B