Cisco IE 4000 Software Configuration Guide

788
Configuring IPv6 ACLs
Configuration Example
Configuration Example
The following example:
 Creates an IPv6 ACL named CISCO.
 Defines one deny entry that denies all packets that have a destination TCP port number greater than 5000 and a
second deny entry that denies packets that have a source UDP port number less than 5000. The second deny entry
also logs all matches to the console.
 Defines a permit entry to permit all ICMP packets and another permit entry that allows all other traffic. The second
permit entry is necessary because an implicit deny-all condition is at the end of each IPv6 access list.
 Applies the access list CISCO to outbound traffic on a Layer 3 interface.
Switch(config)# ipv6 access-list CISCO
Switch(config-ipv6-acl)# deny tcp any any gt 5000
Switch config-ipv6-acl)# deny ::/0 lt 5000 ::/0 log
Switch(config-ipv6-acl)# permit icmp any any
Switch(config-ipv6-acl)# permit any any
Switch(config-ipv6-acl)# exit
Switch(config)# interface gigabitethernet 0/3
Switch(config-if)# no switchport
Switch(config-if)# ipv6 address 2001::/64 eui-64
Switch(config-if)# ipv6 traffic-filter CISCO out
Command Purpose
show access-lists Display all access lists configured on the switch.
show ipv6 access-list [access-list-name] Display all configured IPv6 access list or the access list specified by
name.

Cisco IE 4000 Specifications

General

Product Type	Switch
Form Factor	DIN Rail Mountable
MAC Address Table Size	8000
Jumbo Frame Support	9216 bytes
Operating Temperature	-40°C to 70°C
Mean Time Between Failures (MTBF)	Over 500, 000 hours
Memory	256 MB DRAM
Mounting	DIN Rail, Wall
Certifications	EN 50121-4
Ports	8 x 10/100Base-TX Ethernet Ports