Name: Cisco Catalyst 3750-E
Brand: Cisco
Rating: 4 (1 reviews)

To Next Page

To Previous Page

36-2

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

OL-9775-08

Chapter 36 Configuring IPv6 ACLs

Understanding IPv6 ACLs

• IPv6 port ACLs are supported on inbound traffic on Layer 2 interfaces only. IPv6 port ACLs are

applied to all IPv6 packets entering the interface.

A switch running the IP base feature set supports only input router IPv6 ACLs. It does not support port

CLs or output IPv6 router ACLs.

Note If you configure unsupported IPv6 ACLs, an error message appears and the configuration does not take

affect.

The switch does not support VLAN ACLs (VLAN maps) for IPv6 traffic.

Note For more information about ACL support on the switch, see Chapter 35, “Configuring Network Security

with ACLs.”

You can apply both IPv4 and IPv6 ACLs to an interface. As with IPv4 ACLs, IPv6 port ACLs take

precedence over router ACLs:

• When an input router ACL and input port ACL exist in an SVI, packets received on ports to which

a port ACL is applied are filtered by the port ACL. Routed IP packets received on other ports are

filtered by the router ACL. Other packets are not filtered.

• When an output router ACL and input port ACL exist in an SVI, packets received on the ports to

which a port ACL is applied are filtered by the port ACL. Outgoing routed IPv6 packets are filtered

by the router ACL. Other packets are not filtered.

Note If any port ACL (IPv4, IPv6, or MAC) is applied to an interface, that port ACL is used to filter packets,

and any router ACLs attached to the SVI of the port VLAN are ignored.

These sections describe some characteristics of IPv6 ACLs on the switch:

• Supported ACL Features, page 36-2

• IPv6 ACL Limitations, page 36-3

• IPv6 ACLs and Switch Stacks, page 36-3

Supported ACL Features

IPv6 ACLs on the switch have these characteristics:

• Fragmented frames (the fragments keyword as in IPv4) are supported.

• The same statistics supported in IPv4 are supported for IPv6 ACLs.

• If the switch runs out of hardware space, packets associated with the ACL are forwarded to the CPU,

and the ACLs are applied in software.

• Routed or bridged packets with hop-by-hop options have IPv6 ACLs applied in software.

• Logging is supported for router ACLs, but not for port ACLs.

• The switch supports IPv6 address-matching for a full range of prefix-lengths.

Other manuals for Cisco Catalyst 3750-E

Questions and Answers:

Need help?

Do you have a question about the Cisco Catalyst 3750-E and is the answer not in the manual?

General