add filter publicprefix= / internalprefix= / action=]exempt|block Adds IPsec DoS Protection IPv6 filter configuration. Parameters: ...

 add filter
       [[publicprefix=][/]]
       [[internalprefix=][/]]
       [action=]exempt|block

 Adds IPsec DoS Protection IPv6 filter configuration.

 Parameters:

 Tag              Value
 publicprefix   - Public host IPv6 address or subnet (optional). If not specified,
                  the filter will match all public IPv6 addresses.

 internalprefix - Internal host IPv6 address or subnet (optional). If not specified,
                  the filter will match all internal IPv6 addresses.

 action         - Action to take for any traffic that matches the filter.
                     exempt: Don't require matching traffic to be IPsec protected.
                     block:  Block matching traffic.

 Examples:

    add filter publicprefix=3ffe:401d:1f00::/64 action=block