After IPv6 is enabled on a device, the device does not permit IPv6 packets whose first fragment carries an incomplete header by default. To use IPv6 packets whose first fragment carries an incomplete header in special scenarios, configure the device to permit such IPv6 packets.
Prerequisites
Before configuring a device to permit IPv6 packets whose first fragment carries an incomplete header, enable IPv6.
Procedure
- Run system-view
The system view is displayed.
- Configure the device to permit IPv6 packets whose first fragment carries an incomplete header in the system or interface view.
- To configure the device to permit IPv6 packets whose first fragment carries an incomplete header in the system view, run the ipv6 security permit incomplete-first-fragment command.
- To configure the device to permit IPv6 packets whose first fragment carries an incomplete header in the interface view, perform the following steps:
- Run the interface interface-type interface-number command to enter the interface view.
- Run the ipv6 security permit incomplete-first-fragment command to configure the device to permit IPv6 packets whose first fragment carries an incomplete header on the interface.
- Run commit
The configuration is committed.