Motorola WiNG 5.6 Reference Manual page 628

8 - 14 WiNG 5.6 Access Point System Reference Guide
25. Use the Event
disabled using the
Event
Enable
Action
Log Level
26. The following
Duplicate Options
IPv6 MAC Conflict
IPv6 MAC Routing
Conflict
Option Strict Padding
Option End Point
Identification
Option Network
Service Access Point
Option Router Alert
Routing Heading Type
One
Routing Heading Type
Two
Strict Extension Header
Check
Strict Home Address
Option Check
Unknown Options
table to enable individual IPv6 unique events. IPv6 events can be individually enabled or collectively enabled/
Enable All Events and
The Event column lists the name of each IPv6 specific event subject to logging.
Checking Enable sets the firewall policy to filter the associated IPv6 event based on the
selection in the Action column.
If a filter is enabled, chose an action from the drop-down menu to determine how the firewall treats
the associated IPv6 event.
Log and Drop - An entry for the associated IPv6 event is added to the log and then the packets
are dropped.
Log Only - An entry for the associated IPv6 event is added to the log. No further action is
taken.
Drop Only - The packet is dropped. No further action is taken.
To enable logging to the system log, check the box in the Log Level column. Then select a
standard Syslog level from the Log Level drop-down menu.
Events can be filtered on behalf of the firewall:
Select to enable duplicate options handling in hop-by-hop and destination option extension
headers. This configuration excludes HAO (Home Address Option) handling.
Select to enable checking for conflicts between IPv6 addresses and MAC addresses.
Select to enable checking for IPv6 routing table (next-hop IPv6 address, MAC address)
conflicts.
Select to enable strict checks for validating Pad1 and PadN options.
Select to enable end point identification. This option is not enabled by default.
Select to enable Network Service Access Point option. This option is not enabled by
default.
Select to enable router alert option. This option is not enabled by default.
Select to enable checking for routing type one (1) in the Routing Type field of the Routing
extension header for IPv6 packets. Routing Header 1 is used for NIMROD a project of
DARPA. This option is not enabled by default.
Select to enable checking for routing type two (2) in the Routing Type field of the Routing
extension header for IPv6 packets. Routing Header 2 is used for Mobile IPv6 where it can
hold the home address of the mobile node. This option is not enabled by default.
Select to enable check for out of order and number of occurrences of extension headers in
an IPv6 packet. The option is enabled by default.
Select to enable strict check for placement of home address option in the Destination
option extension header. This option is enabled by default.
Select to enable configuring unknown options handling in hop-by-hop and destination
option extension headers.
Disable All Events buttons.