Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

Configuring IPv6 ACLs
Default IPv6 ACL Configuration
There are no IPv6 ACLs configured or applied.
Interaction with Other Features and Switches
• If an IPv6 router ACL is configured to deny a packet, the packet is not routed. A copy of the packet is
• If a bridged frame is to be dropped due to a port ACL, the frame is not bridged.
• You can create both IPv4 and IPv6 ACLs on a switch or switch stack, and you can apply both IPv4 and
• You cannot use MAC ACLs to filter IPv6 frames. MAC ACLs can only filter non-IP frames.
• If the hardware memory is full, for any additional configured ACLs, packets are dropped to the CPU,
Creating IPv6 ACL
Follow these steps to create an IPv6 ACL:
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

202
sent to the Internet Control Message Protocol (ICMP) queue to generate an ICMP unreachable message
for the frame.
IPv6 ACLs to the same interface. Each ACL must have a unique name; an error message appears if you
try to use a name that is already configured.
You use different commands to create IPv4 and IPv6 ACLs and to attach IPv4 or IPv6 ACLs to the same
Layer 2 or Layer 3 interface. If you use the wrong command to attach an ACL (for example, an IPv4
command to attach an IPv6 ACL), you receive an error message.
and the ACLs are applied in software. When the hardware is full a message is printed to the console
indicating the ACL has been unloaded and the packets will be dropped on the interface.
Only packets of the same type as the ACL that could not be added (ipv4, ipv6, MAC)
Note
will be dropped on the interface.
Purpose
Enables privileged EXEC mode. Enter your password if
prompted.
Enters the global configuration mode.