Cisco Catalyst 4500 Series Administration Guide

54-17
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 54 Configuring Network Security with ACLs
Applying IPv6 ACLs to Layer 2 and 3 Interface
.To create a named IPv6 ACLs, perform this task:
The following example shows how to create and display an IPv6 access list named v6test, denying only
one IPv6 traffic with one particular source and destination address, but permitting all other types of IPv6
traffic:
Switch(config)# ipv6 access-list v6test
Switch(config-ipv6-acl)# deny ipv6 host 2020::10 host 2040::10
Switch(config-ipv6-acl)# permit any any
Switch(config-ipv6-acl)# end
Switch# show ipv6 access-list
IPv6 access list v6test
deny ipv6 host 2020::10 host 2040::10 sequence 10
permit ipv6 any any sequence 20
To enable hardware statistics, enter the following commands while configuring ACEs in the access list:
Switch(config)# ipv6 access-list v6test
Switch(config-ipv6-acl)# hardware statistics
Switch(config-ipv6-acl)# end
Note Hardware statistics is disabled by default.
Applying IPv6 ACLs to Layer 2 and 3 Interface
To apply an IPv6 ACL to a Layer 3 interface, perform the following task:
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# ipv6 access-list name
Defines an IPv6 access list using a name.
To delete the IPv6 ACL, use the no form of the command. You can
also delete individual ACEs from the IPv6 access list.
Step 3
Switch(config-ipv6-acl)# {deny | permit}
{any | proto} {host ipv6-addr |
ipv6-prefix} host ipv6-addr |
ipv6-prefix}
Specifies each IPv6 ACE.
Note Repeat this step to define multiple ACEs in the ACL.
Step 4
Switch(config-ipv6-acl)#
hardware statistics
(Optional) Enables hardware statistics for the IPv6 ACL.
Step 5
Switch(config-ipv6-acl)# end
Returns to privileged EXEC mode.
Step 6
Switch# show ipv6 access-list
Display the IPv6 access list configuration.
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface interface-type
slot/interface
Specifies the interface to be configured.
Note interface-type must be a Layer 3 interface.
Step 3
Switch(config-if)# ipv6 traffic-filter
ipv6-acl {in|out}
Applies the IPv6 ACL to a Layer 3 interface.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E