Enterasys C3G124-24 - Ipv6 Access-Group

ipv6 access-group Configuring Access Control Lists
Enterasys C3 Configuration Guide 34-13
Example
This example shows how to apply access list 1 for all inbound frames on the VLAN 1 interface.
Through the definition of access list 1, only frames with a source address on the 192.5.34.0/24
network will be routed. All the frames with other source addresses received on the VLAN 1
interface are dropped:
C3(su)->router(Config)#access-list 1 permit 192.5.34.0 0.0.0.255
C3(su)->router(Config)#interface vlan 1
C3(su)->router(Config-if(Vlan 1))#ip access-group 1 in
ipv6 access-group
Use this command to apply IPv6 access control lists to inbound or outbound frames on an
interface when operating in router mode. The no form of this command removes the specified
access list.
Syntax
ipv6 access-group acl-name [in | out] [sequence sequence]
no ipv6 access-group acl-name [in | out]
Parameters
Defaults
If direction is not specified, the direction will be inbound.
If the sequence is not specified, the access control list will be applied in the order in which it was
associated with the interface.
Mode
Interface configuration: C3(su)->router(Config-if(Vlan <vlan_id>))#
Usage
This command applies IPv6 access control lists. Standard, extended, and MAC-based access
control lists are applied with the ip access-group command (page 34-12). ACLs must be applied
per routing interface. An access list can be applied to inbound or outbound traffic.
Access lists can be applied to routed VLANs which incorporate LAGs.
Example
This example creates an IPv6 access control list and applies it to VLAN 1.
C3(su)->router(Config)#access-list ipv6 ipv6list1 deny icmpv6 2001:db08:10::1/64
any flow-label 11111
C3(su)->router(Config)#interface vlan 1
C3(su)->router(Config-if(Vlan 1))#ipv6 access-group ipv6list1 in
acl-name Specifies the name of the IPv6 access list to be applied to the interface.
in | out (Optional) Specifies the direction of the packets (inbound or outbound) to
which the access control list will be applied.
Note: The out parameter is not currently supported by the firmware.
sequence sequence (Optional) Specifies the order in which this access control list is applied
relative to other ACLs that may already be associated with the interface.