Default ipv6 acl configuration, Interaction with other features and switches, Creating ipv6 acls – Dell POWEREDGE M1000E User Manual

Page 782

Advertising
background image

35-4

Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide

OL-13270-03

Chapter 35 Configuring IPv6 ACLs

Configuring IPv6 ACLs

Step 3

Apply the IPv6 ACL to an interface. For router ACLs, you must also configure an IPv6 address on the
Layer 3 interface to which the ACL is applied.

These sections describe how to configure and apply IPv6 ACLs:

Default IPv6 ACL Configuration, page 35-4

Interaction with Other Features and Switches, page 35-4

Creating IPv6 ACLs, page 35-4

Applying an IPv6 ACL to an Interface, page 35-7

Default IPv6 ACL Configuration

No IPv6 ACLs are configured or applied.

Interaction with Other Features and Switches

Configuring IPv6 ACLs causes these interactions with other features or switch characteristics:

If an IPv6 router ACL is configured to deny a packet, the packet is not routed. A copy of the packet
is sent to the Internet Control Message Protocol (ICMP) queue to generate an ICMP unreachable
message for the frame.

If a bridged frame is to be dropped due to a port ACL, the frame is not bridged.

You can create both IPv4 and IPv6 ACLs on a switch or switch stack, and you can apply both IPv4
and IPv6 ACLs to the same interface. Each ACL must have a unique name; an error message appears
if you try to use a name that is already configured.

You use different commands to create IPv4 and IPv6 ACLs and to attach them to the same Layer 2
or Layer 3 interface. If you use the wrong command to attach an ACL (for example, an IPv4
command to attach an IPv6 ACL), you receive an error message.

You cannot use MAC ACLs to filter IPv6 frames. MAC ACLs can filter only non-IP frames.

If the hardware memory is full, any additional configured ACLs packets are forwarded to the CPU,
and the ACLs are applied in software.

Creating IPv6 ACLs

Beginning in privileged EXEC mode, follow these steps to create an IPv6 ACL:

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

ipv6 access-list access-list-name

Define an IPv6 access list using a name, and enter IPv6 access-list
configuration mode.

Advertising