Dell PowerConnect W-7200 Series Reference Manual page 450

netexthdr
netexthdr <alias-name>
eh <eh-type> deny | permit
Description
This command allows you to edit the packet filter options in the extension header (EH).
Syntax
Parameter
<alias-name>
eh <eh-
type>
deny
permit
Usage Guidelines
ArubaOS firewall is enhanced to process the IPv6 extension header (EH) to enable IPv6 packet filtering. You can
filter the incoming IPv6 packets based on the EH type. You can edit the packet filter options in the default EH,
using this command. By default, the default EH alias permits all EH types.
Example
The following command denies the IPv6 packets matching the specified extended header type in the default EH:
(host) (config) #netexthdr default
(host) (config-exthdr) #eh authentication deny
Related Commands
(host) #show netexthdr <alias-name>
Command History
Release
ArubaOS 6.1
450 | netexthdr
Description
Specify the EH alias name.
Specify one of the following EH types:
<0-255>: Matches the IPv6 next header type
l
authentication: Matches the IPv6 authentication header
l
dest-option: Matches the IPv6 destination-option header
l
esp: Matches the IPv6 encapsulation security payload header
l
fragment: Matches the IPv6 fragment header
l
hop-by-hop: Matches the IPv6 hop-by-hop header
l
mobility: Matches the IPv6 mobility header
l
routing: Matches the IPv6 routing header
l
Denies the IPv6 packets matching the specified extended header type.
Permits the IPv6 packets matching the specified extended header type.
NOTE: By default, all the EH types are supported in the default EH.
Modification
Command introduced
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Default
default
—
—
—