If you explicitly configure an IPv6 ACL with a deny ipv6 any any rule, the implicit permit rules can
never permit traffic. If you explicitly configure a deny ipv6 any any rule but want to permit ICMPv6
neighbor discovery messages, explicitly configure a rule for all five implicit IPv6 ACL rules.
Note
This command does not require a license.
Examples
This example shows how to enter IP access list configuration mode for an IPv6 ACL named ipv6-acl-01:
switch# configure terminal
switch(config)# ipv6 access-list ipv6-acl-01
switch(config-acl)#
Related Commands
DescriptionCommand
Configures a deny rule in an IPv6 ACL.deny (IPv6)
Applies an IPv6 ACL to an interface as a port ACL.ipv6 port traffic-filter
Applies an IPv6 ACL to an interface as a router ACL.ipv6 traffic-filter
Configures a permit rule in an IPv6 ACL.permit (IPv6)
Displays all IPv6 ACLs or a specific IPv6 ACL.show ipv6 access-lists
Enables the collection of statistics for each entry in
an ACL.
statistics per-entry
Cisco Nexus 7000 Series Security Command Reference
437
I Commands
ipv6 access-list
To Next Page
Loading...
