Cisco CATALYST 2960 User Manual

37-4
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
Chapter 37 Configuring IPv6 ACLs
Configuring IPv6 ACLs
Default IPv6 ACL Configuration
There are no IPv6 ACLs configured or applied.
Interaction with Other Features
Configuring IPv6 ACLs has these interactions with other features or switch characteristics:
• If an IPv6 router ACL is configured to deny a packet, the packet is dropped. A copy of the packet is
sent to the Internet Control Message Protocol (ICMP) queue to generate an ICMP unreachable
message for the frame.
• If a bridged frame is to be dropped due to a port ACL, the frame is not bridged.
• You can create both IPv4 and IPv6 ACLs on a , and you can apply both IPv4 and IPv6 ACLs to the
same interface. Each ACL must have a unique name; an error message appears if you try to use a
name that is already configured.
You use different commands to create IPv4 and IPv6 ACLs and to attach IPv4 or IPv6 ACLs to the
same Layer 2 or Layer 3 interface. If you use the wrong command to attach an ACL (for example,
an IPv4 command to attach an IPv6 ACL), you receive an error message.
• You cannot use MAC ACLs to filter IPv6 frames. MAC ACLs can only filter non-IP frames.
• If the TCAM is full, for any additional configured ACLs, packets are forwarded to the CPU, and the
ACLs are applied in software.
Creating IPv6 ACLs
Beginning in privileged EXEC mode, follow these steps to create an IPv6 ACL:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
ipv6 access-list access-list-name Define an IPv6 access list name, and enter IPv6 access-list configuration mode.

Cisco CATALYST 2960 Specifications

General

Manageable	Yes
Stacking	No
Model	Catalyst 2960 Series Switches
Power over Ethernet (PoE)	Available on some models (IEEE 802.3af)
VLANs	255 active VLANs
Features	QoS
Operating Temperature	32 to 113°F (0 to 45°C)
Relative Humidity	10% to 85% non-condensing
Power Consumption	Varies by model (30W to 400W)