PurposeCommand or Action
Identify a Layer 2 interface (for port ACLs) or Layer 3 interface
(for router ACLs) on which to apply an access list, and enter
interface configuration mode.
interface interface-id
Step 2
If applying a router ACL, this changes the interface from Layer 2
mode (the default) to Layer 3 mode.
no switchport
Step 3
Configure an IPv6 address on a Layer 3 interface (for router ACLs).
ipv6 address pv6-address
Step 4
Apply the access list to incoming or outgoing traffic on the interface.
ipv6 traffic-filter access-list-name {in |
out}
Step 5
Return to privileged EXEC mode.end
Step 6
Verify the access list configuration.show running-config
Step 7
(Optional) Save your entries in the configuration file.copy running-config startup-config
Step 8
Use the no ipv6 traffic-filter access-list-name interface configuration command to remove an access list
from an interface.
This example shows how to apply the access list Cisco to outbound traffic on a Layer 3 interface:
Switch(config)# interface gigabitethernet 1/0/3
Switch(config-if)# no switchport
Switch(config-if)# ipv6 address 2001::/64 eui-64
Switch(config-if)# ipv6 traffic-filter CISCO out
Monitoring IPv6 ACLs
You can display information about all configured access lists, all IPv6 access lists, or a specific access list by
using one or more of the privileged EXEC commands shown in the table below:
PurposeCommand
Displays all access lists configured on the switch.show access-lists
Displays all configured IPv6 access lists or the access
list specified by name.
show ipv6 access-list [access-list-name]
This is an example of the output from the show access-lists privileged EXEC command. The output shows
all access lists that are configured on the switch or switch stack.
Switch # show access-lists
Extended IP access list hello
10 permit ip any any
IPv6 access list ipv6
permit ipv6 any any sequence 10
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
162 OL-29434-01
Configuring IPv6 ACLs
Monitoring IPv6 ACLs
To Next Page
Loading...
