Cisco Catalyst 4500 Series Software Configuration Guide

62-49
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 62 Configuring Network Security with ACLs
Configuring RA Guard
Verifying IPv6 OG ACLs
Enter the show ipv6 access-list [access-list-name] command, to display the contents of the named
access list or object group ACL (or for all access lists and object group ACLs if no name is entered). For
example:
Switch# show ipv6 access-list example-ipv6-acl
IPv6 access list og-acl
permit object-group mySG object-group myOG any sequence 10
Switch# show ipv6 access-list example-ipv6-acl expanded
IPv6 access list og-acl
permit tcp host 2001::1 any eq www sequence 10
permit udp host 2001::1 any eq xdmcp sequence 10
permit esp host 2001::1 any sequence 10
permit hbh host 2001::1 any sequence 10
permit tcp host 2002::1 any eq www sequence 10
permit udp host 2002::1 any eq xdmcp sequence 10
permit esp host 2002::1 any sequence 10
permit hbh host 2002::1 any sequence 10
permit tcp host 2003::1 any eq www sequence 10
permit udp host 2003::1 any eq xdmcp sequence 10
permit esp host 2003::1 any sequence 10
permit hbh host 2003::1 any sequence 10
permit tcp host 2001::255 any eq www sequence 10
permit udp host 2001::255 any eq xdmcp sequence 10
permit esp host 2001::255 any sequence 10
permit hbh host 2001::255 any sequence 10
permit tcp 2002::1/64 any eq www sequence 10
permit udp 2002::1/64 any eq xdmcp sequence 10
permit esp 2002::1/64 any sequence 10
permit hbh 2002::1/64 any sequence 10
Configuring RA Guard
This section includes these topics:
• Introduction, page 62-50
• Deployment, page 62-50
• Configuring RA Guard, page 62-51
• Examples, page 62-51
• Usage Guidelines, page 62-52
Step 3
ipv6 traffic-filter access-list-name {in | out}
Example:
Switch(config-if)# ipv6 traffic-filter
example-ipv6-acl in
Applies the ACL to the interface and specifies whether to
filter inbound or outbound packets.
Step 4
end
Example:
Device(config-ext-nacl)# end
Exits interface configuration mode and returns to
privileged EXEC mode.
Command or Action Purpose

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E