CHAPTER
38-1
Catalyst 3750 Switch Software Configuration Guide
OL-8550-02
38
Configuring IPv6 ACLs
When the advanced IP services image is installed on the Catalyst 3750 switch, you can filter IP version 6
(IPv6) traffic by creating IPv6 access control lists (ACLs) and applying them to interfaces similarly to
the way that you create and apply IP version 4(IPv4) named ACLs. Beginning with Cisco IOS Release
12.2(35)SE, you can also create and apply input router ACLs to filter Layer 3 management traffic when
the IP services or IP base image is installed. This chapter includes information about configuring IPv6
ACLs on the switch. Unless otherwise noted, the term switch refers to a standalone switch and to a switch
stack.
Note To use IPv6, you must configure the dual IPv4 and IPv6 Switch Database Management (SDM) template
on the switch. You select the template by entering the sdm prefer dual-ipv4-and-ipv6 {default | vlan}
[desktop] global configuration command.
For related information, see these chapters:
• For more information about SDM templates, see Chapter 8, “Configuring SDM Templates.”
• For information about IPv6 on the switch, seeChapter 36, “Configuring IPv6 Unicast Routing.”.
• For information about ACLs on the switch, see Chapter 32, “Configuring Network Security with
ACLs.”.
Note For complete syntax and usage information for the commands used in this chapter, see the command
reference for this release or the Cisco IOS documentation referenced in the procedures.
This chapter contains these sections:
• Understanding IPv6 ACLs, page 38-1
• Configuring IPv6 ACLs, page 38-4
• Displaying IPv6 ACLs, page 38-8
Understanding IPv6 ACLs
A switch stack running the advanced IP services image supports two types of IPv6 ACLs:
• IPv6 router ACLs are supported on outbound or inbound traffic on Layer 3 interfaces, which can be
routed ports, switch virtual interfaces (SVIs), or Layer 3 EtherChannels. IPv6 router ACLs apply
only to IPv6 packets that are routed.
To Next Page
Loading...
Need help?
General
