CHAPTER
37-1
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
37
Configuring IPv6 ACLs
This chapter includes information about configuring IPv6 ACLs on the switch. You can filter IP
version 6 (IPv6) traffic by creating IPv6 access control lists (ACLs) and applying them to interfaces
similarly to the way that you create and apply IP version 4(IPv4) named ACLs. You can also create and
apply input router ACLs to filter Layer 3 management traffic.
Note To use IPv6, you must configure the dual IPv4 and IPv6 Switch Database Management (SDM) template
on the switch. You select the template by entering the sdm prefer {default | dual-ipv4-and-ipv6 global
configuration command.
For related information, see these chapters:
• For more information about SDM templates, see Chapter 8, “Configuring SDM Templates.”
• For information about IPv6 on the switch, see Chapter 7, “Managing Switch Stacks.”
• For information about ACLs on the switch, see Chapter 37, “Configuring IPv6 ACLs.”
Note For complete syntax and usage information for the commands used in this chapter, see the command
reference for this release or the Cisco IOS documentation referenced in the procedures.
This chapter contains these sections:
• Understanding IPv6 ACLs, page 37-1
• Configuring IPv6 ACLs, page 37-3
• Displaying IPv6 ACLs, page 37-8
Understanding IPv6 ACLs
A switch image supports two types of IPv6 ACLs:
• IPv6 router ACLs
–
Supported on outbound or inbound traffic on Layer 3 interfaces, which can be routed ports,
switch virtual interfaces (SVIs), or Layer 3 EtherChannels.
–
Applied to only IPv6 packets that are routed.