Programmable Internetworking & Communication Operating System Docs ... Click Spaces -> Space Directory to see docs for all releases ...
Page tree
Skip to end of metadata
Go to start of metadata

The set firewall filter copp sequence from source-address-ipv6 command configures a firewall filter rule based on the source IPv6 address for traffic classification.


Command Syntax

set firewall filter copp sequence <number> from source-address-ipv6 <ipv6-address>


Parameter

Parameter

Description

sequence <number>

Specifies filter sequence number. The value is an integer that ranges from 0 to 9999.

The 15 integers 10, 20, 30, 40, 50, 60, 70, 80, 90, 100, 110, 120, 130, 140, 150 are not allowed to be used for sequence numbers in user-defined CoPP firewall filter rules.

source-address-ipv6 <ipv6-address>

Specifies source IPv6, it could be a specific IPv6 address or an IPv6 subnet. The value is a 32-digit hexadecimal number, in the format X:X:X:X:X:X:X:X, an X contains 4 hexadecimal numbers. For example, aa00:1002::1, 2001::1/128.

 

Usage Guidelines

You can run the set firewall filter copp sequence from source-address-ipv6 command to configure a firewall filter rule based on the source IPv6 address for traffic classification so that the device processes packets matching the same firewall filter rule in the same manner.

 

Example

•  Configure a firewall filter rule based on the source IPv6 address of 2001:a100::1/32.

admin@XorPlus# set firewall filter copp sequence 51 from source-address-ipv6 2001:a100::1/32
admin@XorPlus# commit
  • No labels