Filtering data packets at a network gateway working as a service-based policy (sblp) enforcement point

摘要

A method of filtering data packets at a network gateway is disdosed. The data packets have a header including a destination address and an extension header, and the method includes selectively blocking ones of the data packets where neither the destination address nor the extension header matches a predetermined criterion.