Security
96
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
next-header
Syntax [no] next-header next-header
Context config>system>security>management-access-filter>ipv6-filter>entry
Description This command specifies the next header to match as a management access filter match
criterion.
This command applies to IPv6 filters only.
Parameters next-header — protocol-number or protocol-name
protocol-number — the IPv6 next header to match, expressed as a protocol number in
decimal, hexadecimal, or binary. This parameter is similar to the protocol parameter
used in IPv4 filter match criteria. See Table 6 for the protocol IDs and descriptions for
the IP protocols.
Values [0 to 255]D
[0x0 to 0xFF]H
[0b0 to 0b11111111]B
protocol-name — the IPv6 next header to match, expressed as a protocol name. This
parameter is similar to the protocol parameter used in IPv4 filter match criteria. See
Table 6 for the protocol IDs and descriptions for the IP protocols.
Values none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, ipv6-route,
ipv6-frag, idrp, rsvp, gre, ipv6-icmp, ipv6-no-nxt, ipv6-opts, iso-ip,
eigrp, ospf-igp, ether-ip, encap, pnni, pim, vrrp, l2tp, stp, ptp, isis,
crtp, crudp, sctp, mpls-in-ip, * - udp/tcp wildcard
protocol
Syntax [no] protocol protocol-id
Context config>system>security>management-access-filter>ip-filter>entry
Description This command configures an IP protocol type to be used as a management access filter
match criterion.
The protocol type is identified by its respective protocol number. Well-known protocol
numbers include ICMP (1), TCP (6), and UDP (17).
This command applies to IPv4 filters only.
The no form of the command removes the protocol from the match criteria.
Default n/a
Parameters protocol-id — protocol-number or protocol-name
To Next Page
Loading...
