PurposeCommand or Action
Filters incoming and outgoing IPv6 traffic on an interface.
ipv6 traffic-filter access-list-name {in | out}
Example:
Device(config-if)# ipv6 traffic-filter list1
in
Step 6
Exits interface configuration mode and enters privileged
EXEC mode.
end
Example:
Device(config-if)# end
Step 7
Configuring IPv6 ACL Extensions for Hop by Hop Filtering
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
ipv6 access-list access-list-name
4.
permit protocol {source-ipv6-prefix/prefix-length | any | host source-ipv6-address | auth} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address | auth} [operator
[port-number]] [dest-option-type [header-number | header-type]] [dscp value] [flow-label value]
[fragments] [hbh] [log] [log-input] [mobility] [mobility-type [mh-number | mh-type]] [reflect name
[timeout value]] [routing] [routing-type routing-number] [sequence value] [time-range name]
5.
deny protocol {source-ipv6-prefix/prefix-length | any | host source-ipv6-address | auth} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address | auth}
[operator [port-number]] [dest-option-type [header-number | header-type]] [dscp value] [flow-label
value] [fragments] [hbh] [log] [log-input] [mobility] [mobility-type [mh-number | mh-type]] [routing]
[routing-type routing-number] [sequence value] [time-range name] [undetermined-transport]
6.
end
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
Example:
Device> enable
•
Enter your password if prompted.
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 2
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1229
How to Configure IPv6 ACLs