System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 101
ipv6-filter
Syntax ipv6-filter
Context config>system>security>cpm-filter
Description This command enables the context to configure IPv6 CPM filter parameters.
entry
Syntax entry entry-id [create]
no entry entry-id
Context config>system>security>cpm-filter>ip-filter
config>system>security>cpm-filter>ipv6-filter
Description This command specifies a particular CPM filter match entry. Every CPM filter must have at
least one filter match entry. A filter entry with no match criteria set will match every packet,
and the entry action will be taken.
The create keyword must be used with every new entry configured. Once the entry has been
created, you can navigate to the entry context without using the create keyword.
All IPv4 filter entries can specify one or more matching criteria. There are no range-based
restrictions on any IPv4 filter entries.
For IPv6 filters, the combined number of fields for all entries in a filter must not exceed 16
fields (or 256 bits), where a field contains the bit representation of the matching criteria.
Parameters entry-id — identifies a CPM filter entry as configured on this system.
Values 1 to 64
action
Syntax action {accept | drop}
no action
Context config>system>security>cpm-filter>ip-filter>entry
config>system>security>cpm-filter>ipv6-filter>entry
Description This command specifies the action to take for packets that match this filter entry.
Default drop
Parameters accept — packets matching the entry criteria will be forwarded
drop — packets matching the entry criteria will be dropped
To Next Page
Loading...
