Gigabit Ethernet Ipv6-Acl Guidelines - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Gigabit Ethernet IPv6-ACL Guidelines

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To configure a IPv6 static route using Device Manager, follow these steps:
Choose IP > Routing.
Step 1
You see the IP Routing Configuration dialog box.
Click Create.
Step 2
You see the Create IP Route dialog box.
Step 3 Set the Dest field to the IPv6 destination address.
Step 4 Set the Mask field to the IPv6 subnet mask.
Set the Gateway field to the IPv6 default gateway.
Step 5
Optionally, set the Metric field to the desired route metric.
Step 6
Select the interface from the Interface drop-down menu.
Step 7
Click Create to save these changes or click Close to discard any unsaved changes.
Step 8
Gigabit Ethernet IPv6-ACL Guidelines
If IPv6-ACLs are already configured in a Gigabit Ethernet interface, you cannot add this interface to a
Tip
Ethernet PortChannel group. See
information on configuring IPv6-ACLs.
Follow these guidelines when configuring IPv6-ACLs for Gigabit Ethernet interfaces:
•
•
•
See
IPv6-ACLs to an interface.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
54-14
Only use Transmission Control Protocol (TCP) or Internet Control Message Protocol (ICMP).
Other protocols such as User Datagram Protocol (UDP) and HTTP are not supported in
Note
Gigabit Ethernet interfaces. Applying an ACL that contains rules for these protocols to a
Gigabit Ethernet interface is allowed but those rules have no effect.
Apply IPv6-ACLs to the interface before you enable an interface. This ensures that the filters are in
place before traffic starts flowing.
Be aware of the following conditions:
– If you use the log-deny option, a maximum of 50 messages are logged per second.
– The established option is ignored when you apply IPv6-ACLs containing this option to Gigabit
Ethernet interfaces.
– If an IPv6-ACL rule applies to a preexisting TCP connection, that rule is ignored. For example,
if there is an existing TCP connection between A and B and an IPv6-ACL that specifies
dropping all packets whose source is A and destination is B is subsequently applied, it will have
no effect.
Chapter 42, "Configuring IPv4 and IPv6 Access Control Lists"
Chapter 54
Chapter 42, "Configuring IPv4 and IPv6 Access Control Lists"
Configuring IPv6 for Gigabit Ethernet Interfaces
for information on applying
OL-17256-03, Cisco MDS NX-OS Release 4.x
for