Command
Allows all Layer 2 non-IP traffic to pass through the security device.
set interface vlan1 bypass-non-ip
Blocks all non-IP and non-ARP unicast traffic (default behavior).
unset interface vlan1 bypass-non-ip
Overwrites the unset interface vlan1 bypass-non-ip command when both commands appear in the configuration file.
If you previously entered the unset interface vlan1 bypass-non-ip-all command, and you now want the device to revert to its default behavior of blocking only the non-IP and non-ARP unicast traffic, you first enter the set interface vlan1 bypass-non-ip command to allow all non-IP and non-ARP traffic, including multicast, unicast, and broadcast traffic to pass through the device. Then you enter the unset interface vlan1 bypass-non-ip command to block only the non-IP, non-ARP unicast traffic. unset interface vlan1 bypass-non-ip-all
Allows a device to pass IPsec traffic without attempting to terminate it, use the command. The device then allows the IPsec traffic to pass through to other VPN termination points.
Index
Symbols
3DES encryption...116 4in6 tunneling basic setup...111 definition...111 6in4 tunneling...107 basic setup...115over IPv4 WAN...115
6over4 tunneling addresses, handling...96 definition...95 manual tunneling...96 types...95 when to use...95 6to4 addresses...9, 104 hosts...103 relay routers...100 routers...99 tunneling...95, 99 tunneling, description...99
A
Access Concentrator (AC)...49addresses autoconfiguration...11 link-local...12 MAC...13, 20, 28 splitting...47 addresses, handling 4in6 tunneling...111 6to4 tunneling...100
destination address translation...83
DIP, from IPv4 to IPv6...83
DIP, from IPv6 to IPv4...82
IPv4 hosts to a single IPv6 host...108
IPv6 hosts to multiple IPv4 hosts...85
manual tunneling...96
authentication...107, 111, 133
C
CLI...28, 30 configuration examples access lists and route maps...63DNS server information, requesting...46
manual tunneling...96
PPPoE instance, configuring...49
prefixes, delegating ...38, 40 static route redistribution...63
customer premises equipment (CPE)...39, 129
D
destination gateway...96Device-Unique Identification (DUID)...36
DHCPv6 client and server...35
delegated prefixes...38
purposes...35
TLA and SLA...36
Diffie-Hellman groups...116
dissimilar IP stacks...83, 84 Domain Name System (DNS) DHCP client host...46
DHCPv6 search list...35
domain lookups...47
IPv4 or IPv6 addresses...45
partial domain names...35
proxy...47
refresh...45
search list...46
servers...127
servers, tunneling to...47
Domain Name System (DNS) addresses splitting...47, 48 translating...91
dual-stack architecture...53
networks, dissimilar...53
routing tables...53
WAN backbones, dissimilar...53
Duplicate Address Detection (DAD) function...30
Retry Count...30
E
encapsulation...107, 112
encryption...107, 111
endpoint host state mode
Base Reachable Time...29
Duplicate Address Detection (DAD)...30
Probe Forever state...29
Probe Time...29
Reachable Time...29
Retransmission Time...30
stale mode...29
G
global unicast addresses...99, 116H
hashing, Secure Hashing Algorithm (SHA)...116host mode...49
I
Identity Association Prefix Delegation Identification (IAPD-ID)...36, 39 interfaces DHCPv6...35dual routing tables...53
ND...27
NDP...28
NUD...28
PPPoE...49
Interior Gateway Protocol (IGP)...54
Internet Service Providers...35, 47, 95 IPsec Access Session (IAS)...129
IPv4 addresses, mapped...81 WAN...107 IPv4 to IPv6 host mapping...90 network mapping...88 IPv4/IPv6 boundaries...81, 88 IPv6 addresses, SLA...36 addresses, TLA...36 backbone...111 networks, island...107
IPv6 to IPv4 host mapping...86
IPv6/IPv4 boundaries...82, 87
L
link-local addresses...12M
MAC addresses...13, 20, 28 manual 6over4 tunneling...95manual tunneling...96
mapped IP (MIP)...81, 82, 83 IPv4 hosts to a single IPv6 host...90
IPv4 hosts to multiple IPv6 hosts...88
IPv6 hosts to a single IPv4 host...86
IPv6 hosts to multiple IPv4 hosts...84
IPv6-to-IPv4 network mapping...84
MIP from IPv6 to IPv4...83
mapping host, IPv4 to IPv6...90
host, IPv6 to IPv4...86
network, IPv4 to IPv6...88
Maximum Transmission Unit (MTU)...12
modes host...49 router...55 stale...29
N
NAT-PT...81NAT-PT, IPsec, when to use...107
native hosts...100
Neighbor Advertisement (NA)...29
Neighbor Cache table...13, 14, 16, 24, 28 Neighbor Cache table, neighbor entry categories...14
Neighbor Discovery (ND)...27
Accept Incoming RAs...20
age of neighbor entry...13
bypassing MAC session-caching...28
definition...13
enabling...28
Neighbor Cache table...13, 28 neighbor reachability state...13
neighbor reachability status...29
packets currently queued for transmission...13
reachability status...27
Neighbor Discovery (ND), displaying...30
Neighbor Discovery Parameter (NDP)...21, 28 Neighbor Solicitation (NS)...14, 30 setting...29
Neighbor Unreachability Detection (NUD)...14
Neighbor Cache table...14, 24
Neighbor Unreachability Detection (NUD), Neighbor Cache table...14, 24
Network Address Translation-Port Translation
DIP addresses, translating...83
DIP, from IPv6 to IPv4...82
dynamic IP (DIP)...81
IPv4 hosts to a single IPv6 host...90
IPv4 hosts to multiple IPv6 hosts...88
IPv6 hosts to a single IPv4 host...86
IPv6 hosts to multiple IPv4 hosts...84
MIP from IPv4 to IPv6...83
NAT-PT...81
outgoing service requests...81, 84 source address translation...82
when to use...81
Network Address Translation-Port Translation (NAT-PT)...81
next-hop gateway...29
P
Point-to-Point Protocol (PPP)...49Point-to-Point Protocol over Ethernet (PPPoE)...49
PPPoE...49
PPPoE - Point-to-Point Protocol over Ethernet...49
prefix lists...12 probe...29 protocols IGP...54 PPP...49 PPPoE...49
R
RA...12 RADIUSv6...127 reachability states...14reachability states, transitions...16
remote termination point...100, 103 request packets, outgoing from IPv6 to IPv4...83
Retransmission Time...30
RIP configuration...56
flooding, protecting against...62
global parameters...58
instances, creating in VR...56
interface parameters...62
interfaces, enabling on...57
neighbors, filtering...60 RIP routes default, rejecting...59 redistributing...61 RIP, viewing database...67 neighbor information...69 protocol details...68 RIPng...53, 54 interface cost metric...63
metric calculation...63
offset metric...63
route metric...63
route redistribution...54
Router Advertisement (RA)...12
router mode...55 Router Solicitation (RS)...12 routers upstream...38 virtual...53 RSA authentication...116
S
service requests, outgoing...84, 86 Site-Local Aggregator (SLA)...36, 39 source address translation...82state transitions endpoint host...16
next-hop gateway router...16
static entry...18
tunnel gateway...17
stateless address autoconfiguration...11
T
Top-Level Aggregator (TLA)...36tunnel termination points...99
U
upstream routers...38V
virtual routers...53virtual routers, RIP...56
W
WebUI...30WebUI, on sample client, downstream router...40
WINS server...127