firewall : ipv6-eh-filter
 
ipv6-eh-filter
Use this command to configure IPv6 routing header packet filtering.
Syntax
config firewall ipv6-eh-filter
set hop-opt {enable | disable}
set dest-opt {enable | disable}
set hdopt-type <type_int_list>
set routing {enable | disable}
set routing-type <type_int_list>
set fragment {enable | disable}
set auth {enable | disable}
set no-next {enable | disable}
end
Variable 
Description 
Default 
hop-opt {enable | disable}
Enable to block packets with Hop-by-Hop Options header.
disable
dest-opt {enable | disable}
Enable to block packets with Destination Options header.
disable
hdopt-type <type_int_list>
Enable to block specific Hop-by-Hop and/or Destination Option types. Types are integers, separate type values with spaces.
0
routing {enable | disable}
Enable to block packets with Routing header.
enable
routing-type <type_int_list>
Enable to block specific Routing header types (maximum 7 types, each between 0 and 255). Types are integers, separate type values with spaces.
0
fragment {enable | disable}
Enable to block packets with Fragment header.
disable
auth {enable | disable}
Enable to block packets with Authentication header.
disable
no-next {enable | disable}
Enable to block packets with No Next header.
disable