Alcatel-Lucent 7750 SR-OS Configuration Manual page 504

IP (v4/v6) Filter Entry Commands
fragment
Syntax IPv4:
fragment {true|false}
no fragment
IPv6:
fragment {true|false|first-only|non-first-only}
no fragment
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command specifies fragmented or non-fragmented IP packets as an IP filter match criterion.
Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc)
fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
This command enables match on existence of IPv6 Fragmentation Extension Header in the IPv6 filter
policy. To match first fragment of an IP fragmented packet, specify additional Layer 4 matching
criteria in a filter policy entry. The no version of this command ignores IPv6 Fragmentation
Extension Header presence/absence in a packet when evaluating match criteria of a given filter policy
entry.
The no form of the command removes the match criterion.
Default no fragment
Parameters
true — Specifies to match on all fragmented IP packets. A match will occur for all packets that have
false — Specifies to match on all non-fragmented IP packets. Non-fragmented IP packets are packets
first-only — For IPv6: Matches if a packet is an initial fragment of the fragmented IPv6 packet.
non-first-only — For IPv6: Matches if a packet is a non-initial fragment of the fragmented IPv6
ah-ext-hdr
ah-ext-hdr {true|false }
no ah-ext-hdr
Context config>filter>ipv6-filter>entry>match
Description
This command enables match on existence of AH Extension Header in the IPv6 filter policy.
The no form of this command ignores AH Extension Header presence/absence in a packet when
evaluating match criteria of a given filter policy entry.
Default
no ah-ext-hdr
Page 504
either the MF (more fragment) bit set or have the Fragment Offset field of the IP header set to a
non-zero value. For IPv6, packet matches if it contains IPv6 Fragmentation Extension Header.
that have the MF bit set to zero and have the Fragment Offset field also set to zero. For IPv6,
packet matches if it does not contain IPv6 Fragmentation Extension Header.
packet.
7750 SR OS Router Configuration Guide