Interaction With Other Features And Switches; Creating Ipv6 Acls - Cisco ME 3400 Software Configuration Manual

Configuring IPv6 ACLs

Interaction with Other Features and Switches

Configuring IPv6 ACLs has these interactions with other features or switch characteristics:
•
•
•
•
•

Creating IPv6 ACLs

Beginning in privileged EXEC mode, follow these steps to create an IPv6 ACL:
Command
Step 1
configure terminal
Step 2
ipv6 access-list access-list-name
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
37-4
If an IPv6 router ACL is configured to deny a packet, the packet is not routed. A copy of the packet
is sent to the Internet Control Message Protocol (ICMP) queue to generate an ICMP unreachable
message for the frame.
If a bridged frame is to be dropped due to a port ACL, the frame is not bridged.
You can create both IPv4 and IPv6 ACLs on a switch, and you can apply both IPv4 and IPv6 ACLs
to the same interface. Each ACL must have a unique name; an error message appears if you try to
use a name that is already configured.
You use different commands to create IPv4 and IPv6 ACLs and to attach IPv4 or IPv6 ACLs to the
same Layer 2 or Layer 3 interface. If you use the wrong command to attach an ACL (for example,
an IPv4 command to attach an IPv6 ACL), you receive an error message.
You cannot use MAC ACLs to filter IPv6 frames. MAC ACLs can only filter non-IP frames.
If the hardware memory is full, for any additional configured ACLs, packets are forwarded to the
CPU, and the ACLs are applied in software.
Purpose
Enter global configuration mode.
Define an IPv6 access list using a name, and enter IPv6 access-list
configuration mode.
Chapter 37 Configuring IPv6 ACLs
OL-9639-07