Network ingress IPv6 match criteria

IPv6 match criteria classification is supported in the ingress section of a network QoS policy.

The classification only applies to the outer IPv6 header of non-tunneled traffic; consequently, the use of an ipv6-criteria statement in a network QoS policy is ignored for received traffic when the network QoS policy is applied on the ingress network IP interface in the following cases:

• mesh SDPs in VPLS services

• spoke SDPs in VPLS and Xpipe services

• spoke SDPs under an IP interface in an IES or VPRN service

• spoke SDPs in a VPRN service

• bindings created automatically by the auto-bind-tunnel command in a VPRN service

• IPv6 over IPv4 tunnels

• VXLAN bindings (egress VTEP, VNI)

Attempting to apply a network QoS policy containing an IPv6 criteria statement to any object except a network IP interface results in an error.

The following is an example configuration:

  configure
     qos
        network 10 name ‟10” create
            ingress
                ipv6-criteria
                    entry 10 create
                        match
                            dst-ip 2001:db8:1000::1/128
                        exit
                        action fc "ef" profile in
                    exit
                exit
            exit
        exit
     exit