allow-ipv6-extension-header (IDS MS-MPC)
Syntax
allow-ipv6-extension-header {
ah;
any;
dstopts;
esp;
fragment;
hop-by-hop;
mobility;
routing;
}
Hierarchy Level
[edit services ids rule rule-name term term-name then]
Description
Specify the type of IPv6 extension headers that the IDS rule permits in a packet. If the packet includes an extension header that is not configured, the packet is blocked. If the packet includes configured extension headers that are incorrect, the packet is dropped. This IDS rule can only be assigned to a service set on an MS-MPC.
Default
If you do not include the allow-ipv6-extension-header statement, packets with any type of extension header are blocked.
Options
| ah | Allow Authentication Header extension header. |
| any | Allow all IPv6 extension headers. |
| dstopts | Allow Destination Options extension header. |
| esp | Allow Encapsulating Security Payload extension header. |
| fragment | Allow Fragment Header extension header. |
| hop-by-hop | Allow Hop-by-Hop Option extension header. |
| mobility | Allow Mobility Header extension header. |
| routing | Allow Routing Header extension header. |
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 17.1.