Chapter 10
| Access Control Lists
IPv6 ACLs
– 403 –
Example
Console#show ip access-list standard
IP standard access-list david:
permit host 10.1.1.21
permit 168.92.0.0 255.255.15.0
Console#
Related Commands
permit, deny (398)
ip access-group (Interface Configuration) (401)
IPv6 ACLs
The commands in this section configure ACLs based on IPv6 addresses, DSCP traffic
class, or next header type. To configure IPv6 ACLs, first create an access list
containing the required permit or deny rules, and then bind the access list to one or
more ports.
access-list ipv6 This command adds an IP access list and enters configuration mode for standard or
extended IPv6 ACLs. Use the no form to remove the specified ACL.
Syntax
[no] access-list ipv6 {standard | extended} acl-name
standard – Specifies an ACL that filters packets based on the source IP
address.
extended – Specifies an ACL that filters packets based on the destination IP
address, and other more specific criteria.
acl-name – Name of the ACL. (Maximum length: 32 characters)
Table 69: IPv6 ACL Commands
Command Function Mode
access-list ipv6 Creates an IPv6 ACL and enters configuration mode for
standard or extended IPv6 ACLs
GC
ipv6 access-group Binds an IPv6 ACL to all ports for ingress traffic GC
permit, deny Filters packets matching a specified source IPv6 address IPv6- STD-ACL
permit, deny Filters packets meeting the specified criteria, including
source or destination IPv6 address, DSCP traffic class, or
next header type
IPv6- EXT-ACL
ipv6 access-group Binds an IPv6 ACL to a port IC
show ipv6 access-group Shows port assignments for IPv6 ACLs PE
show ipv6 access-list Displays the rules for configured IPv6 ACLs PE
To Next Page
Loading...
Need help?
General