Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config firewall ipv6-eh-filter

Configure IPv6 extension header filter.

config firewall ipv6-eh-filter

Description: Configure IPv6 extension header filter.

set hop-opt [enable|disable]

set dest-opt [enable|disable]

set hdopt-type {integer}

set routing [enable|disable]

set routing-type {integer}

set fragment [enable|disable]

set auth [enable|disable]

set no-next [enable|disable]

end

config firewall ipv6-eh-filter

Parameter name

Description

Type

Size

hop-opt

Enable/disable blocking packets with the Hop-by-Hop Options header (default = disable).

option

-

 

Option

Description

enable

Enable blocking packets with the Hop-by-Hop Options header.

disable

Disable blocking packets with the Hop-by-Hop Options header.

dest-opt

Enable/disable blocking packets with Destination Options headers (default = disable).

option

-

 

Option

Description

enable

Enable blocking packets with Destination Options headers.

disable

Disable blocking packets with Destination Options headers.

hdopt-type

Block specific Hop-by-Hop and/or Destination Option types (max. 7 types, each between 0 and 255, default = 0).

integer

Minimum value: 0 Maximum value: 255

routing

Enable/disable blocking packets with Routing headers (default = enable).

option

-

 

Option

Description

enable

Block packets with Routing headers.

disable

Allow packets with Routing headers.

routing-type

Block specific Routing header types (max. 7 types, each between 0 and 255, default = 0).

integer

Minimum value: 0 Maximum value: 255

fragment

Enable/disable blocking packets with the Fragment header (default = disable).

option

-

 

Option

Description

enable

Block packets with the Fragment header.

disable

Allow packets with the Fragment header.

auth

Enable/disable blocking packets with the Authentication header (default = disable).

option

-

 

Option

Description

enable

Block packets with the Authentication header.

disable

Allow packets with the Authentication header.

no-next

Enable/disable blocking packets with the No Next header (default = disable)

option

-

 

Option

Description

enable

Block packets with the No Next header.

disable

Allow packets with the No Next header.

config firewall ipv6-eh-filter

Configure IPv6 extension header filter.

config firewall ipv6-eh-filter

Description: Configure IPv6 extension header filter.

set hop-opt [enable|disable]

set dest-opt [enable|disable]

set hdopt-type {integer}

set routing [enable|disable]

set routing-type {integer}

set fragment [enable|disable]

set auth [enable|disable]

set no-next [enable|disable]

end

config firewall ipv6-eh-filter

Parameter name

Description

Type

Size

hop-opt

Enable/disable blocking packets with the Hop-by-Hop Options header (default = disable).

option

-

 

Option

Description

enable

Enable blocking packets with the Hop-by-Hop Options header.

disable

Disable blocking packets with the Hop-by-Hop Options header.

dest-opt

Enable/disable blocking packets with Destination Options headers (default = disable).

option

-

 

Option

Description

enable

Enable blocking packets with Destination Options headers.

disable

Disable blocking packets with Destination Options headers.

hdopt-type

Block specific Hop-by-Hop and/or Destination Option types (max. 7 types, each between 0 and 255, default = 0).

integer

Minimum value: 0 Maximum value: 255

routing

Enable/disable blocking packets with Routing headers (default = enable).

option

-

 

Option

Description

enable

Block packets with Routing headers.

disable

Allow packets with Routing headers.

routing-type

Block specific Routing header types (max. 7 types, each between 0 and 255, default = 0).

integer

Minimum value: 0 Maximum value: 255

fragment

Enable/disable blocking packets with the Fragment header (default = disable).

option

-

 

Option

Description

enable

Block packets with the Fragment header.

disable

Allow packets with the Fragment header.

auth

Enable/disable blocking packets with the Authentication header (default = disable).

option

-

 

Option

Description

enable

Block packets with the Authentication header.

disable

Allow packets with the Authentication header.

no-next

Enable/disable blocking packets with the No Next header (default = disable)

option

-

 

Option

Description

enable

Block packets with the No Next header.

disable

Allow packets with the No Next header.