Table of Contents
Advertisement
Command Reference Guide
ipv6 firewall filtering-behavior
Use the ipv6 firewall filtering-behavior command to modify the filtering behavior of the Internet
Protocol version 6 (IPv6) firewall. Modifying the filtering behavior settings for a particular port and
protocol allow for application-level gateway (ALG)-like behavior in certain applications without requiring
parsing of the Layer 5 packet contents used by these applications. By modifying IPv6 firewall filtering
behavior, you can enable firewall traversal for applications by adding one or more configuration options if
no ALG is available for the application (such as with Trivial File Transfer Protocol (TFTP)). Use the no
form of this command to return the firewall filtering behavior to the default value. Variations of this
command include:
ipv6 firewall filtering-behavior [tcp <port> | udp <port>] address-dependent
ipv6 firewall filtering-behavior [tcp <port> | udp <port>] address-port-dependent
ipv6 firewall filtering-behavior [tcp <port> | udp <port>] endpoint-independent
ipv6 firewall vrf <name> filtering-behavior [tcp <port> | udp <port>] address-dependent
ipv6 firewall vrf <name> filtering-behavior [tcp <port> | udp <port>] address-port-dependent
ipv6 firewall vrf <name> filtering-behavior [tcp <port> | udp <port>] endpoint-independent
Syntax Description
tcp <port>
udp <port>
address-dependent
address-port-dependent
endpoint-independent
vrf <name>
Default Values
By default, most ports are filtered by traditional firewall filtering (address-port-dependent). By default,
UDP port 69, the TFTP port, uses address-dependent filtering.
Command History
Release R10.1.0
60000CRG0-35E
Specifies a Transmission Control Protocol (TCP) port for which the IPv6
firewall filtering behavior is changed. Valid range is 0 to 65535. The port
corresponds to the destination port of the firewall policy session, which is
the destination port of the internal traffic.
Specifies a User Datagram Protocol (UDP) port for which the IPv6 firewall
filtering behavior is changed. Valid range is 0 to 65535. The port
corresponds to the destination port of the firewall policy session, which is
the destination port of the internal traffic.
Specifies that address-dependent filtering is used for traffic initiated using
the specified destination port.
Specifies that address- and port-dependent filtering is used for traffic
initiated using the specified destination port. This is the default firewall
filtering behavior for most ports.
Specifies that endpoint-independent filtering is used for traffic initiated using
the specified destination port.
Optional. Specifies a nondefault (named) Virtual Routing and Forwarding
(VRF) instance on which to apply the filtering behavior. If no VRF instance is
specified, the action is performed on the default VRF instance.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
1206
Advertisement
Table of Contents
