Configuring Access Control Lists ip access-group
34-12
Usage
In order to create an IPv6 access control list, the switch must be put into access list “ipv6mode”
with the access-list ipv6mode command (page 34-2).
The no form of this command removes the defined access list or entry.
IPv6 access lists are applied to VLAN interfaces by using the
ipv6 access-group command (page
34-13) and to ports with the access-list interface command (page 34-14).
Example
This example creates an IPv6 access control list.
C3(su)->router(Config)#access-list ipv6 ipv6list1 deny icmpv6 2001:db08:10::1/64
any flow-label 11111
ip access-group
Use this command to apply standard, extended, and MAC access control lists to inbound or
outbound frames on an interface when operating in router mode. The no form of this command
removes the specified access list.
Syntax
ip access-group {acl-number | acl-name} [in | out] [sequence sequence]
no ip access-group {acl-number | acl-name} [in | out]
Parameters
Defaults
If a direction is not specified, the direction will be inbound.
If the sequence is not specified, the access control list will be applied in the order in which it was
associated with the interface.
Mode
Interface configuration: C3(su)->router(Config-if(Vlan <vlan_id>))#
Usage
This command applies standard, extended, and MAC-based access control lists. IPv6 access
control lists are applied with the ipv6 access-group command (page 34-13). ACLs must be applied
per routing interface. An access list can be applied to inbound or outbound traffic.
Access lists can be applied to routed VLANs which incorporate LAGs.
acl-number | acl-
name
Specifies the name or number of the access list to be applied to the
interface. MAC-based access control lists are identified by name. Standard
and extended access control lists are identifed by a decimal number from 1
to 199.
in | out (Optional) Specifies the direction of the packets (inbound or outbound) to
which the access control list will be applied.
Note: The out parameter is not currently supported by the firmware.
sequence sequence (Optional) Specifies the order in which this access control list is applied
relative to other ACLs that may already be associated with the interface.
To Next Page
Loading...
Need help?
General