Configuring IPv6 Filters for Network Packet Broker
Netvisor ONE version 6.1.0 expands IPv6 filtering options for Network Packet Broker. To enable IPv6 filtering for NPB, you must first configure an IPv6 VLAN Content Aware Processing (VCAP) table. This IPv6 VCAP table is created by dividing the 512-entry VCAP table into 256 IPv4 entries and 256 IPv6 entries.
Create an IPv6 VCAP table by using the command:
CLI (network-admin@switch) > vflow-table-profile-modify profile ipv6-vcap hw-tbl switch-main enable
Note: Please reboot the system for this new profile setting to take effect
As seen from the CLI, the switch must be rebooted before the vFlow table profile modification can take effect.
After restarting the switch you can view the vFlow table profile configuration by using the command:
CLI (network-admin@switch*) > vflow-table-profile-show layout vertical
switch: switch
profile: ipv6-vcap
hw-tbl: switch-main
enable: enable
flow-capacity: 0
flow-slices-needed: 1
flow-slices-used: 0
comment: VCAP-IPv6
View the vFlow table configuration by using the command:
You can now create a vFlow to direct traffic from a source vPG to a destination vPG with IPv6 filters. For example, direct all traffic with IPv6 address 1000::1/64 from vPG-1 to vPG-10 by using the command:
CLI (network-admin@switch) > vflow-create name vpg_v6 scope local src-ip 1000::1/64 src-vpg vPG-1 dst-vpg vPG-10 table-name VCAP-IPv6-table-1-0
Note: You must specify the table name as VCAP-IPv6-table-1-0 in the vflow-create command to enable IPv6 filtering for NPB.
Use the vflow-show command to view the configuration.
CLI (network-admin@leo-norma2) > vflow-show name vpg_v6 layout vertical
switch: switch
name: vpg_v6
type: vflow
src-ip: 1000::1/ffff:ffff:ffff:ffff::
burst-sizeprecedence: autodefault
src-vpg: vPG-1
dst-vpg: vPG-10
enable: enable
table-name: VCAP-IPv6-table-1-0
To disable the IPv6 VCAP table, use the command:
CLI (network-admin@switch) > vflow-table-profile-modify profile ipv6-vcap hw-tbl switch-main no-enable
Note: Please reboot the system for this new profile setting to take effect