C
HAPTER
29
| Access Control Lists
IPv6 ACLs
– 759 –
ipv6 access-group This command binds a port to an IPv6 ACL. Use the no form to remove the
port.
SYNTAX
ipv6 access-group acl-name in [time-range time-range-name]
no ipv6 access-group acl-name in
acl-name – Name of the ACL. (Maximum length: 16 characters)
in – Indicates that this list applies to ingress packets.
time-range-name - Name of the time range.
(Range: 1-30 characters)
DEFAULT SETTING
None
COMMAND MODE
Interface Configuration (Ethernet)
COMMAND USAGE
◆ A port can only be bound to one ACL.
◆ If a port is already bound to an ACL and you bind it to a different ACL,
the switch will replace the old binding with the new one.
◆ IPv6 ACLs can only be applied to ingress packets.
EXAMPLE
Console(config)#interface ethernet 1/2
Console(config-if)#ipv6 access-group standard david in
Console(config-if)#
RELATED COMMANDS
show ipv6 access-list (758)
Time Range (625)
show ipv6 access-
group
This command shows the ports assigned to IPv6 ACLs.
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show ipv6 access-group
Interface ethernet 1/2
IPv6 access-list david in
Console#
To Next Page
Loading...
