Configuring IPsec
Discarding RIPng Packets
RIPng uses the well known address of ff02::9 to advertise routes. The following example shows how
IPsec can be configured to drop all RIPng packets.
Switch A
Link Local: fe80::100
Switch A
-> ipsec policy DISCARD_UDPout source fe80::100 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::200 destination ff02::9 protocol udp
in discard
Switch B
-> ipsec policy DISCARD_UDPout source fe80::200 destination ff02::9 protocol udp
out discard
-> ipsec policy DISCARD_UDPin source fe80::100 destination ff02::9 protocol udp
in discard
OmniSwitch AOS Release 8 Network Configuration Guide
Link Local: fe80::200
Discarding RIPng Packets
December 2017
Additional Examples
Switch B
page 18-22