Alcatel-Lucent 7750 SR-OS, Руководство по настройке

Страница: 504 / 674

IP (v4/v6) Filter Entry Commands
Page 504 7750 SR OS Router Configuration Guide
fragment
Syntax IPv4:
fragment
{ true | false }
no fragment
IPv6:
fragment
{ true | false|first-only|non-first-only }
no fragment
Context config>filter>ip-filter>entry > match
config>filter>ipv6-filter>entry>match
Description This command specifies fragmented or non-fragmented IP packets as an IP filter match criterion.
Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc)
fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
This command enables match on existence of IPv6 Fragmentation Extension Header in the IPv6 filter
policy. To match first fragment of an IP fragmented packet, specify additional Layer 4 matching
criteria in a filter policy entry. The no version of this command ignores IPv6 Fragmentation
Extension Header presence/absence in a packet when evaluating match criteria of a given filter policy
entry.
The no form of the command removes the match criterion.
Default no fragment
Parameters true — Specifies to match on all fragmented IP packets. A match will occur for all packets that have
either the MF (more fragment) bit set or have the Fragment Offset field of the IP header set to a
non-zero value. For IPv6, packet matches if it contains IPv6 Fragmentation Extension Header.
false — Specifies to match on all non-fragmented IP packets. Non-fragmented IP packets are packets
that have the MF bit set to zero and have the Fragment Offset field also set to zero. For IPv6,
packet matches if it does not contain IPv6 Fragmentation Extension Header.
first-only — For IPv6: Matches if a packet is an initial fragment of the fragmented IPv6 packet.
non-first-only — For IPv6: Matches if a packet is a non-initial fragment of the fragmented IPv6
packet.
ah-ext-hdr
ah-ext-hdr { true | false }
no ah-ext-hdr
Context config>filter>ipv6-filter>entry>match
Description This command enables match on existence of AH Extension Header in the IPv6 filter policy.
The no form of this command ignores AH Extension Header presence/absence in a packet when
evaluating match criteria of a given filter policy entry.
Default
no ah-ext-hdr