Ipv6 Filter Entry - Alcatel-Lucent 7750 SR OS Configuration Manual

Common Configuration Tasks

IPv6 Filter Entry

Within an IPv6 filter policy, configure filter entries which contain criteria against which ingress,
egress, or network traffic is matched. The action specified in the entry determine how the packets
are handled, either dropped or forwarded.
•
•
•
Use the following CLI syntax to create an IPv6 filter entry:
CLI Syntax: config>filter# ipv6-filter ipv6-filter-id
The following displays the configuration command usage to create an IPv6 filter entry:
Example
Page 318
Enter an IPv6 filter entry ID. The system does not dynamically assign a value.
Assign an action, either drop or forward.
Specify matching criteria.
entry entry-id time-range time-range-name
action [drop|forward]
description description-string
log log-id
match [next-header next-header]
dscp dscp-name
dst-ip ipv6-address/prefix-length
dst-port {lt|gt|eq} dst-port-number
dst-port range start end
icmp-code icmp-code
icmp-type icmp-type
src-ip ipv6-address/prefix-length
src-port {lt|gt|eq} src-port-number
src-port range start end
tcp-ack {true|false}
tcp-syn {true|false}
:
config>filter# ipv6-filter 11
config>filter>ipv6-filter# entry 1 create
config>filter>ipv6-filter>entry# match
config>filter>ipv6-filter>entry>match# dst-ip 11::12/128
config>filter>ipv6-filter>entry>match# src-ip 13::14/128
config>filter>ipv6-filter>entry>match$ exit
config>filter>ipv6-filter>entry# action drop
config>filter>ipv6-filter>entry# exit
7750 SR OS Router Configuration Guide