Table of Contents
Advertisement
ipv6-filter
Syntax
ipv6-filter
Context
config>system>security>cpm-filter
Description
This command enables the context to configure IPv6 CPM filter parameters.
entry
Syntax
entry entry-id [create]
no entry entry-id
Context
config>system>security>cpm-filter>ip-filter
config>system>security>cpm-filter>ipv6-filter
Description
This command specifies a particular CPM filter match entry. Every CPM filter must have at least one
filter match entry. A filter entry with no match criteria set will match every packet, and the entry action
will be taken.
The create keyword must be used with every new entry configured. Once the entry has been created,
you can navigate to the entry context without using the create keyword.
All IPv4 filter entries can specify one or more matching criteria. There are no range-based restrictions
on any IPv4 filter entries.
For IPv6 filters, the combined number of fields for all entries in a filter must not exceed 16 fields (or
256 bits), where a field contains the bit representation of the matching criteria.
Parameters
entry-id — identifies a CPM filter entry as configured on this system.
action
Syntax
action {accept | drop}
no action
Context
config>system>security>cpm-filter>ip-filter>entry
config>system>security>cpm-filter>ipv6-filter>entry
Description
This command specifies the action to take for packets that match this filter entry.
Default
drop
Parameters
accept — packets matching the entry criteria will be forwarded
drop — packets matching the entry criteria will be dropped
7705 SAR OS System Management Guide
Values
1 to 64
Security
91
Advertisement
Table of Contents
