Displays the operative list of rules for IPv6, regardless of where they came from. Rules that came from the user's configuration are numbered with sequence numbers matching the ones they have in the configuration.
Note
You cannot operate directly on the unnumbered rules from the CLI.
Syntax
show ipv6 filter [all] [configured]
Parameters
[all]
Displays all IP filters.
[configured]
Displays the current set of rules in configuration. The rules should match the numbered rules listed by "show ip filter" (assuming IP filtering is enabled).
Example
The following example shows ipv6 filter rules.
hostname (config) # show ipv6 filter
Packet filtering for IPv6: enabled
Apply filters to bridges: no
All active IPv6 filtering rules:
Chain 'INPUT' # Target Proto Source Destination Other 1 ACCEPT all : : / 0 : : / 0 inb ether+ ACCEPT all : : / 0 : : / 0 inb lo ACCEPT all : : / 0 : : / 0 inb tun0, state RELATED,ESTABLISHED ACCEPT tcp : : / 0 : : / 0 inb tun0, dpt 22, state NEW ACCEPT tcp : : / 0 : : / 0 inb tun0, dpt 443, state NEW ACCEPT udp : : / 0 : : / 0 inb tun0, dpt 161 ACCEPT icmpv6 : : / 0 : : / 0 inb tun0 DROP all : : / 0 : : / 0 inb tun0 Policy: DROP Chain 'OUTPUT' # Target Proto Source Destination Other 1 ACCEPT all : : / 0 : : / 0 outb ether+ ACCEPT all : : / 0 : : / 0 outb lo ACCEPT all : : / 0 : : / 0 outb tun0, state RELATED,ESTABLISHED ACCEPT tcp : : / 0 : : / 0 outb tun0, dpt 443, state NEW ACCEPT udp : : / 0 : : / 0 outb tun0, dpt 162 ACCEPT icmpv6udp : : / 0 : : / 0 outb tun0 DROP all : : / 0 : : / 0 outb tun0 Policy: DROP Chain 'FORWARD' No rules. Policy: DROP
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Release 7.5.0
Central Management System: Release 7.5.0.