Table of Contents
Advertisement
Description
This command enables IPv6 flowspec filtering on a network IP interface. Filtering is based on all of
the IPv6 flowspec routes that have been received and accepted by the base router BGP instance.
Ingress IPv6 traffic on an interface can be filtered by both a user-defined IPv4 filter and flowspec.
Evaluation proceeds in this order:
1.user-defined IPv6 filter entries
2.flowspec-derived filter entries
3.user-defined IPv6 filter default-action
The no form of the command removes IPv6 flowspec filtering from the network IP interface.
Default
No network interfaces have IPv6 flowspec enabled.
filter
Syntax
filter ip ip-filter-id
filter ipv6 ipv6-filter-id
no filter [ip ip-filter-ip] [ipv6 ipv6-filter-id]
Context
config>router>if>ingress
config>router>if>egress
Description
This command associates an IP filter policy with an IP interface.
Filter policies control packet forwarding and dropping based on IP match criteria.
The ip-filter-id must have been pre-configured before this filter command is executed. If the filter ID
does not exist, an error occurs.
Only one filter ID can be specified.
The no form of the command removes the filter policy association with the IP interface.
Default
No filter is specified.
Parameters
ip ip-filter-id — The filter name acts as the ID for the IP filter policy expressed as a decimal integer.
ipv6 ipv6-filter-id — The filter name acts as the ID for the IPv6 filter policy expressed as a decimal
7750 SR OS Router Configuration Guide
The filter policy must already exist within the config>filter>ip context.
Values
1 — 16384
integer. The filter policy must already exist within the config>filter>ipv6 context.
Values
1— 65535
IP Router Configuration
Page 185
Advertisement
Table of Contents
