Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

allow-ipv6-extension-header (IDS MS-MPC)

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
allow-ipv6-extension-header {
    ah;
    any;
    dstopts;
    esp;
    fragment;
    hop-by-hop;
    mobility;
    routing;
}

Hierarchy Level

content_copy zoom_out_map
[edit services ids rule rule-name term term-name then]

Description

Specify the type of IPv6 extension headers that the IDS rule permits in a packet. If the packet includes an extension header that is not configured, the packet is blocked. If the packet includes configured extension headers that are incorrect, the packet is dropped. This IDS rule can only be assigned to a service set on an MS-MPC.

Default

If you do not include the allow-ipv6-extension-header statement, packets with any type of extension header are blocked.

Options

ah

Allow Authentication Header extension header.

any

Allow all IPv6 extension headers.

dstopts

Allow Destination Options extension header.

esp

Allow Encapsulating Security Payload extension header.

fragment

Allow Fragment Header extension header.

hop-by-hop

Allow Hop-by-Hop Option extension header.

mobility

Allow Mobility Header extension header.

routing

Allow Routing Header extension header.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 17.1.

footer-navigation