Default Ipv6 Acl Configuration; Interaction With Other Features And Switches; Creating Ipv6 Acls; Applying An Ipv6 Acl To An Interface - Cisco ME 3400 Software Configuration Manual
Ethernet access switch
Hide thumbs
Also See for ME 3400:
- Command reference manual (950 pages) ,
- Hardware installation manual (88 pages) ,
- Getting started manual (33 pages)
Table of Contents
Advertisement
Chapter 37
Configuring IPv6 ACLs
IPv6 ACL Limitations
With IPv4, you can configure standard and extended numbered IP ACLs, named IP ACLs, and MAC
ACLs. IPv6 supports only named ACLs.
The switch supports most Cisco IOS-supported IPv6 ACLs with some exceptions:
•
•
•
•
•
•
•
•
Configuring IPv6 ACLs
Before configuring IPv6 ACLs, you must select one of the dual IPv4 and IPv6 SDM templates.
To filter IPv6 traffic, you perform these steps:
Create an IPv6 ACL, and enter IPv6 access list configuration mode.
Step 1
Configure the IPv6 ACL to block (deny) or pass (permit) traffic.
Step 2
Apply the IPv6 ACL to an interface. For router ACLs, you must also configure an IPv6 address on the
Step 3
Layer 3 interface on which the ACL is applied.
•
•
•
•
Default IPv6 ACL Configuration
There are no IPv6 ACLs configured or applied.
OL-9639-07
The switch does not support matching on these keywords: flowlabel, routing header, and
undetermined-transport.
The switch does not support reflexive ACLs (the reflect keyword).
This release supports only port ACLs and router ACLs for IPv6; it does not support VLAN ACLs
(VLAN maps).
The switch does not apply MAC-based ACLs on IPv6 frames.
You cannot apply IPv6 port ACLs to Layer 2 EtherChannels.
The switch does not support output port ACLs.
When configuring an ACL, there is no restriction on keywords entered in the ACL, regardless of
whether or not they are supported on the platform. When you apply the ACL to an interface that
requires hardware forwarding (physical ports or SVIs), the switch determines whether or not the
ACL can be supported on the interface. If not, the ACL attachment is rejected.
If an ACL is applied to an interface and you attempt to add an access control entry (ACE) with an
unsupported keyword, the switch does not allow the ACE to be added to the attached ACL.
Default IPv6 ACL Configuration, page 37-3
Interaction with Other Features and Switches, page 37-4
Creating IPv6 ACLs, page 37-4
Applying an IPv6 ACL to an Interface, page 37-7
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
Configuring IPv6 ACLs
37-3
- Quick Links:
- Performance Features
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
