permit udp any eq 547 any eq 546 sequence 80
permit udp any eq 546 any eq 547 sequence 90
deny ipv6 any any sequence 100
Configuring IPv6 ACLs
To filter IPv6 traffic, you perform these steps:
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
{ipv6 access-list list-name
4.
{deny | permit} protocol {source-ipv6-prefix/|prefix-length|any| host source-ipv6-address} [ operator [
port-number ]] { destination-ipv6-prefix/ prefix-length | any | host destination-ipv6-address} [operator
[port-number]][dscp value] [fragments] [log] [log-input] [routing] [sequence value] [time-range name]
5.
{deny | permit} tcp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6- prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [ack] [dscp value] [established] [fin] [log] [log-input] [neq {port | protocol}] [psh]
[range {port | protocol}] [rst] [routing] [sequence value] [syn] [time-range name] [urg]
6.
{deny | permit} udp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [dscp value] [log] [log-input] [neq {port | protocol}] [range {port | protocol}] [routing]
[sequence value] [time-range name]]
7.
{deny | permit} icmp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [icmp-type [icmp-code] | icmp-message] [dscp value] [log] [log-input] [routing] [sequence
value] [time-range name]
8.
end
9.
show ipv6 access-list
10.
show running-config
11.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password if prompted.enable
Step 1
Example:
Switch> enable
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
200 OL-29048-01
Configuring IPv6 ACLs
Configuring IPv6 ACLs
To Next Page
Loading...
Need help?
General