Alcatel-Lucent 6850-48 Guida Di Rete

Pagina di 1162
Configuring IPsec on the OmniSwitch
Configuring IPsec
page 27-22
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
Discarding RIPng Packets
RIPng uses the well known address of ff02::9 to advertise routes. The following example shows how IPsec 
can be configured to drop all RIPng packets.
Discarding RIPng Packets
Switch A
-> ipsec policy DISCARD_UDPout source fe80::100 destination ff02::9 protocol udp 
out discard 
-> ipsec policy DISCARD_UDPin source fe80::200 destination ff02::9 protocol udp 
in discard
Switch B
-> ipsec policy DISCARD_UDPout source fe80::200 destination ff02::9 protocol udp 
out discard 
-> ipsec policy DISCARD_UDPin source fe80::100 destination ff02::9 protocol udp 
in discard
Switch A 
Link Local: fe80::200
Link Local: fe80::100
Switch B