143
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter I Commands
ipv6 traffic-filter
ipv6 traffic-filter
To apply an IPv6 access control list (ACL) to an interface, use the ipv6 traffic-filter command. To
remove an IPv6 ACL from an interface, use the no form of this command.
ipv6 traffic-filter access-list-name in
no ipv6 traffic-filter access-list-name in
Syntax Description
Command Default None
Command Modes Interface configuration mode
Virtual Ethernet interface configuration mode
Command History
Usage Guidelines By default, no IPv6 ACLs are applied to an interface.
You can use the ipv6 traffic-filter command to apply an IPv6 ACL to the following interface types:
• Ethernet interfaces
• EtherChannel interfaces
• Virtual Ethernet interface
• VLAN interfaces
Note You must enable VLAN interfaces globally before you can configure a VLAN interface. For more
information, see the feature interface-vlan command.
The switch applies ACLs to inbound traffic only. The switch checks inbound packets against the rules in
the ACL. If the first matching rule permits the packet, the switch continues to process the packet. If the
first matching rule denies the packet, the switch drops the packet and returns an ICMP host-unreachable
message.
If you delete the specified ACL from the device without removing the ACL from an interface, the deleted
ACL does not affect traffic on the interface.
access-list-name Name of the IPv6 ACL, which can be up to 64 alphanumeric, case-sensitive
characters.
in Specifies that the device applies the ACL to inbound traffic.
Release Modification
5.2(1)N1(1) This command was introduced.
To Next Page
Loading...
