Login
Contents x
Setting Up an IPv6 Filter Configuration Job
  • 21 Jun 2024
  • 7 Minutes to read
  • Contributors
  • Print
  • PDF
Contents

Setting Up an IPv6 Filter Configuration Job

  • Updated on 21 Jun 2024
  • 7 Minutes to read
  • Contributors
  • Print
  • PDF
Article summary

IPv6 filters can be used to loop back traffic or set up a traffic policy based on specific characteristics such as IPv6Header settings, ICMP settings and VLAN settings.

IPv6 filters are useful for configuring jobs applied to the Skylight sensor: control.

To set up an IPv6 filter configuration job

  1. Access the page Commission ▶ Jobs.

  2. Set all common configuration job settings, as described in "Creating Configuration Jobs in GUI Mode" and in "Creating Configuration Jobs Using Data Sets".

  3. Select IPv6 Filter in the left pane. The IPv6 filter tab is displayed.
    Setting Up an IPv6 Filter Configuration Job_1.PNG

  4. Complete all fields of the IPv6 Filter tab as required. For more information on specific parameters, see the table after this procedure.

  5. Use the Add PLUS BUTTON.png button or Duplicate DUPLICATE BUTTON.png button to add IPv6 filters as required.

Note: When duplicating a row, always select the row to duplicate before clicking the Duplicate DUPLICATE BUTTON.png button.

  1. Click Apply, then click Close.

  2. Click the Refresh REFRESH BUTTON.png button to refresh the user interface.

IPv6 filter tab (Commission ▶ Jobs)
Filter General

ParameterDescription
NameA unique name used to identify the filter.

IPv6 Settings

headerheader
SourceUse this checkbox to enable or disable use of the IPv6 source address and prefix in the filter.
IPv6 sourceThe base IP address and prefix (CIDR value) of the source. These two values are combined to specify the source of packets.

▶To set the base IP address of the source:

You can set the base IP address in two ways:

(A) Enter a value in the IPv6 source field.

or

(B) Select the IP address of a managed element:

  • Double-click in the IPv6 source field.
  • Select the ellipsis (...) button.
  • Select the managed element in the list that pops up.
  • Click OK to confirm your selection and close the popup.
▶To set a subnet as the source:

Set the IP address and accept the default prefix value (64).

▶To set a single IP address as the source:

Set the IPv6 address and set the source prefix to 128.

Source prefixThe base IP address and prefix (CIDR value) of the source. These two values are combined to specify the source of packets.

▶To set the base IP address of the source:

You can set the base IP address in two ways:

(A) Enter a value in the IPv6 source field.

or

(B) Select the IP address of a managed element:

  • Double-click in the IPv6 source field.
  • Select the ellipsis (...) button.
  • Select the managed element in the list that pops up.
  • Click OK to confirm your selection and close the popup.
▶To set a subnet as the source:

Set the IP address and accept the default prefix value (64).

▶To set a single IP address as the source:

Set the IPv6 address and set the source prefix to 128.

DestinationUse this checkbox to enable or disable the IPv6 destination address and prefix in the filter.
IPv6 destinationThe base IP address and prefix (CIDR value) of the destination. These two values are combined to specify the destination of packets.

▶To set the base IP address of the destination:

You can set the base IP address in two ways:

(A) Enter a value in the IPv6 destination field.

or

(B) Select the IP address of a managed element:

  • Double-click in the IPv6 destination field.
  • Select the ellipsis (...) button.
  • Select the managed element in the list that pops up.
  • Click OK to confirm your selection and close the popup.
▶To set a subnet as the destination:

Set the IP address and accept the default prefix value (64).

▶To set a single IP address as the source:

Set the IPv6 address and set the destination prefix to 128.

Destination prefixThe base IP address and prefix (CIDR value) of the destination. These two values are combined to specify the destination of packets.

▶To set the base IP address of the destination:

You can set the base IP address in two ways:

(A) Enter a value in the IPv6 destination field.

or

(B) Select the IP address of a managed element:

  • Double-click in the IPv6 destination field.
  • Select the ellipsis (...) button.
  • Select the managed element in the list that pops up.
  • Click OK to confirm your selection and close the popup.
▶To set a subnet as the destination:

Set the IP address and accept the default prefix value (64).

▶To set a single IP address as the source:

Set the IPv6 address and set the destination prefix to 128.

Ethernet Header Settings

ParameterDestination
Hop Limit / TTLUse this checkbox to enable or disable the use of TTL (Time-To-Live).
Hop Limit / TTLTTL value.
VLAN stack sizeDouble-click in this field to change the value.

Allows you to filter based on the number of VLAN tags in the packet.

Next headerCheck this checkbox if you want to filter on a specific protocol in the next header. See the Protocol field below.
ProtocolDouble-click in this field to specify a protocol.

Either select a protocol from the drop-down list or enter a port number (decimal value) manually.

Common protocols:

  • TCP (6): Used by HTTP, FTP, Telnet and SMTP.
  • UDP (17): Used by DNS, SNMP and RIP.
  • ICMP (1): Used by Ping.
Available protocols [protocol name (port number)]:
  • ICMP (1)
  • IGMP (2)
  • IP (4)
  • TCP (6)
  • EGP (8)
  • IGP (9)
  • UDP (17)
  • IPv6 (41)
  • SDRP (42)
  • IPv6-Route (43)
  • IPv6-Frag (44)
  • IDRP (45)
  • RSVP (46)
  • GRE (47)
  • MHRP (48)
  • ESP (50)
  • AH (51)
  • MOBILE (55)
  • SKIP (57)
  • EIGRP (88)
  • OSPFIG (89)
  • IPComp (108)
  • VRRP (112)
  • Custom
CustomThe port number expected by the custom protocol.

Note: This parameter is valid only if the Protocol parameter is set to Custom.

VLAN and VLAN-in-VLAN Settings

ParameterDestination
EthertypeThe VLAN Ethernet Type may be one of the following:
  • C-VLAN: Customer VLAN (typically the inner tag).
  • S-VLAN: Service VLAN (typically the outer tag).
  • T-VLAN: Tunnel VLAN (either the inner or outer tag).
  • Any: Choose this option so filters will allow frames with C-VLAN, S-VLAN or T-VLAN tags through.
CFI/DEIThe Canonical Format Indicator (CFI) or the Drop Eligibility Indicator (DEI). This value should always be set to zero for connections to Ethernet switches.

CFI is used to ensure compatibility between Ethernet type networks and Token Ring type networks. If a frame received at an Ethernet port has a CFI set to 1, the frame should not be forwarded as-is to an untagged port.

In the context of bandwidth regulation, DEI can be used to carry the frame color. When set to 0, the frame is green; when set to 1, the frame is yellow.

Priority ConditionDouble-click in this field to select an operator to be used with the Priority Min or Priority Max field.

VLAN priority allows provisioning CoS prioritization using the standard 802.1Q priority tag. Interpreting the priorities is based on the carrier's equipment and administrative policies. The valid operator types are:

  • Greater than
  • Less than
  • Equal to
  • Range (inclusive range)
***Note: *You can set only one VLAN (VLAN or VLAN-in- VLAN) to a range; the other must be set to Equal to. For instance, if you select a range for the second VLAN (VLAN-in-VLAN), you must select Equal to for the first VLAN (VLAN).
Priority minThe minimum priority value.

Acceptable values: 0 to 7.

Priority maxThe maximum priority value.

Acceptable values: 0 to 7.

Operatorcell
ID initialThe VLAN ID minimum value.

Acceptable values: 0 to 4,095.

ID lastNote: This field is not currently supported.

DSCP/IP Precedence

ParameterDescription
TypeThe DSCP/IP type may be one of the following:
  • DSCP
  • IP Precedence
ConditionThe DSCP/IP precedence operator. The valid operator types are:
  • Greater than
  • Less than
  • Equal to
  • Range (inclusive range)
ID initialThe DSCP/IP precedence minimum value.

DSCP range: 0 to 63

IP precedence range: 0 to 7

ID lastThe DSCP/IP precedence maximum value.

DSCP range: 0 to 63

IP precedence range: 0 to 7

ICMP Settings

ParameterDescription
ICMP type (checkbox and field)Enables the use of ICMP. You must specify the ICMP message type to be matched by this filter.

Note: These settings are only valid when the Protocol parameter is set to ICMP (1).

Some well-known ICMP types are:

  • Echo Reply (0)
  • Destination Unreachable (3)
  • Redirect (5)
  • Echo (8)
  • Time Exceeded (11)
Other ICMP Codes: See www.iana.org/
ICMP code (checkbox and field)Enables the use of the ICMP code.

If you check the checkbox, you must enter a value in ICMP code field.

UDP/TCP Port Settings

ParameterDescription
Source port (checkbox and field)Enables the use of the UDP/TCP source port. The source port used to match this rule.

Note: This setting is only valid when the Protocol field (in the Ethernet header settings tab) is set to TCP (6) or UDP (17).

Destination port (checkbox and field)Enables the use of the UDP/TCP destination port. The destination port used to match this rule.

Note: This setting is only valid when the Protocol field (in the Ethernet header settings tab) is set to TCP (6) or UDP (17).

© 2024 Cisco and/or its affiliates. All rights reserved.
 
For more information about trademarks, please visit: Cisco trademarks
For more information about legal terms, please visit: Cisco legal terms
For legal information about Accedian Skylight products, please visit: Accedian legal terms and tradmarks


Was this article helpful?
What's Next
© 2024 Cisco Privacy Statement Cookies Legal
Change password!
Changing your password will log you out immediately. Use the new password to log back in.
Change profile
Success!
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
Logout