ADTRAN AOS Version R10.1.0 Command Reference Manual page 1199

Command Reference Guide
ipv6 firewall check header-order
Use the ipv6 firewall check header-order command to enable the dropping of Internet Protocol version 6
(IPv6) packets that have extension headers in an order different than the recommendations proposed in the
Systems and Network Analysis Center (SNAC) document Firewall Design Considerations for IPv6. Use
the no form of this command to disable the feature and allow the processing of IPv6 packets with
extension headers according to RFC 2460. Variations of this command include:
ipv6 firewall check header-order
ipv6 firewall vrf <name> check header-order
The AOS IPv6 firewall must be enabled (using the command
for the stateful inspection firewall to be activated.
Syntax Description
vrf <name>
Default Values
By default, this feature is enabled.
Command History
Release 18.1
Usage Examples
The following example specifies that IPv6 packets with out-of-order headers are dropped on the default
VRF:
(config)#ipv6 firewall check header-order
60000CRG0-35E
Optional. Specifies a VPN routing and forwarding (VRF) instance to
configure. If no VRF is specified, the default VRF is configured.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
ipv6 firewall on page 1193)
1199