config firewall ipv6-eh-filter
Configure IPv6 extension header filter.
config firewall ipv6-eh-filter
Description: Configure IPv6 extension header filter.
set hop-opt [enable|disable]
set dest-opt [enable|disable]
set hdopt-type {integer}
set routing [enable|disable]
set routing-type {integer}
set fragment [enable|disable]
set auth [enable|disable]
set no-next [enable|disable]
end
config firewall ipv6-eh-filter
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
hop-opt |
Enable/disable blocking packets with the Hop-by-Hop Options header (default = disable). |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
dest-opt |
Enable/disable blocking packets with Destination Options headers (default = disable). |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
hdopt-type |
Block specific Hop-by-Hop and/or Destination Option types (max. 7 types, each between 0 and 255). |
integer |
Minimum value: 0 Maximum value: 255 |
|
||||||
|
routing |
Enable/disable blocking packets with Routing headers (default = enable). |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
routing-type |
Block specific Routing header types (max. 7 types, each between 0 and 255, default = 0). |
integer |
Minimum value: 0 Maximum value: 255 |
0 |
||||||
|
fragment |
Enable/disable blocking packets with the Fragment header (default = disable). |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
auth |
Enable/disable blocking packets with the Authentication header (default = disable). |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
no-next |
Enable/disable blocking packets with the No Next header (default = disable) |
option |
- |
disable |
||||||
|
|
|
|||||||||