Adding Ip Filters To An Existing Ipv6-Acl; Removing Ip Filters From An Existing Ipv4-Acl - Cisco MDS 9000 Series Configuration Manual
Security
Hide thumbs
Also See for MDS 9000 Series:
- Command reference manual (1464 pages) ,
- Configuration manual (344 pages) ,
- Troubleshooting manual (161 pages)
Table of Contents
Advertisement
Adding IP Filters to an Existing IPv6-ACL
Adding IP Filters to an Existing IPv6-ACL
To add entries to an existing IPv6-ACL, follow these steps:
Procedure
Step 1
switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# ipv6 access-list List2
switch(config-ipv6-acl)#
Configures an IPv6-ACL and enters IPv6-ACL configuration submode.
Step 3
switch(config-ipv6-acl)# permit ip 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq 23
Permits TCP for Telnet traffic.
Step 4
switch(config-ipv6-acl)# permit tcp 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq 143
Permits TCP for HTTP traffic.
Step 5
switch(config-ipv6-acl)# permit udp 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64
Permits UDP for all traffic.
Removing IP Filters from an Existing IPv4-ACL
To remove configured entries from an IPv4-ACL, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# no ip access-list List2 deny tcp 1.2.3.0 0.0.0.255 eq port 5 any
Removes this entry from the IPv4-ACL (List2).
Step 3
switch(config)# no ip access-list x3 deny ip any any
Removes this entry from the IPv4-ACL (x3).
Step 4
switch(config)# no ip access-list x3 permit ip any any
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
108
Configuring IPv4 and IPv6 Access Control Lists
Advertisement
Chapters
Table of Contents
