Configuring Ipv6 Cpu Filters - Nokia 7302 Basics, Management And Oam Manual

"FD 100/320Gbps NT and FX NT IHub System
Basics, Management and OAM Guide"
The following displays an IP CPU filter configuration example:
A:ALA-49>configure>system>security>cpu>ip-filter# info
----------------------------------------------
----------------------------------------------
A:ALA-49>configure>sys>sec>cpm>ip-filter#
4.2.1.2
The node has traffic management and queuing hardware dedicated to protecting the
control plane. CPU filters can be created on this hardware. These filters can be used
to drop or accept packets for traffic directed to the control processors.
CPU filters control all traffic going in to the CPU, including routing protocols.
They apply to packets from all ports. The packet filtering is on the hardware using no
resources on the main CPU.
Use the following CLI command to configure a CPU filter:
configure>system>security
The following displays an IPv6 CPU filter configuration example:
A:ALA-49>configure>system>security>cpu>ipv6-filter# info
----------------------------------------------
Issue: 10
entry 10 create
action drop
description "CPU-Filter 10.4.101.2 #101"
exit
entry 20 create
no action
description "CPU-Filter 10.4.101.2 #201"
exit
no shutdown

Configuring IPv6 CPU Filters

cpu-filter
default-action {accept | drop}
ipv6-filter
entry entry-id
action {accept | drop}
description description-string
match [next-header next-header]
dscp dscp-name
dst-ip {ipv6-address/prefix-length}
dst-port [tcp/udp port-number] [mask]
icmp-code icmp-code
icmp-type icmp-type
router router-name
service service-id
src-ip {ipv6-address/prefix-length}
src-port src-port-number [mask]
tcp-ack {true|false}
tcp-syn {true|false}
renum old-entry-id new-entry-id
[no] shutdown
3HH-11982-AAAA-TQZZA
Security
45