config firewall ipv6-eh-filter
Configure IPv6 extension header filter.
config firewall ipv6-eh-filter
Description: Configure IPv6 extension header filter.
set auth [enable|disable]
set dest-opt [enable|disable]
set fragment [enable|disable]
set hdopt-type {integer}
set hop-opt [enable|disable]
set no-next [enable|disable]
set routing [enable|disable]
set routing-type {integer}
end
config firewall ipv6-eh-filter
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
auth |
Enable/disable blocking packets with the Authentication header. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
dest-opt |
Enable/disable blocking packets with Destination Options headers. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
fragment |
Enable/disable blocking packets with the Fragment header. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
hdopt-type |
Block specific Hop-by-Hop and/or Destination Option types (max. 7 types, each between 0 and 255). |
integer |
Minimum value: 0 Maximum value: 255 |
|
||||||
|
hop-opt |
Enable/disable blocking packets with the Hop-by-Hop Options header. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
no-next |
Enable/disable blocking packets with the No Next header |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
routing |
Enable/disable blocking packets with Routing headers. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
routing-type |
Block specific Routing header types. |
integer |
Minimum value: 0 Maximum value: 255 |
0 |
||||||