Reference Guide

402 | netexthdr Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
netexthdr
netexthdr <alias-name>
eh <eh-type> deny | permit
Description
This command allows you to edit the packet filter options in the extension header (EH).
Syntax
Usage Guidelines
ArubaOS firewall is enhanced to process the IPv6 extension header (EH) to enable IPv6 packet filtering. You can
filter the incoming IPv6 packets based on the EH type. You can edit the packet filter options in the default EH,
using this command. By default, the default EH alias permits all EH types.
Example
The following command denies the IPv6 packets matching the specified extended header type in the default EH:
(host) (config) #netexthdr default
(host) (config-exthdr) #eh authentication deny
Related Commands
(host) #show netexthdr <alias-name>
Command History
Command Information
Parameter Description Default
<alias-name> Specify the EH alias name.
default
eh <eh-
type>
Specify one of the following EH types:
 <0-255>: Matches the IPv6 next header type
 authentication: Matches the IPv6 authentication header
 dest-option: Matches the IPv6 destination-option header
 esp: Matches the IPv6 encapsulation security payload header
 fragment: Matches the IPv6 fragment header
 hop-by-hop: Matches the IPv6 hop-by-hop header
 mobility: Matches the IPv6 mobility header
 routing: Matches the IPv6 routing header
—
deny Denies the IPv6 packets matching the specified extended header type.
—
permit Permits the IPv6 packets matching the specified extended header type.
NOTE: By default, all the EH types are supported in the default EH.
—
Release Modification
ArubaOS 6.1 Command introduced
Platforms Licensing Command Mode
All platforms Base operating system. Config mode on master controllers