Ipv6-Based Acls - Cisco SF500-24 Administration Manual

Access Control

IPv6-Based ACLs

STEP 5
IPv6-Based ACLs
NOTE
STEP 1
Cisco 500 Series Stackable Managed Switch Administration Guide
- Select from list—Select message type by name.
- ICMP Type to Match—Number of message type to be used for filtering
purposes.
• ICMP Code—The ICMP messages can have a code field that indicates how
to handle the message. Select one of the following options to configure
whether to filter on this code:
- Any—Accept all codes.
- User defined—Enter an ICMP code for filtering purposes.
• IGMP—If the ACL is based on IGMP, select the IGMP message type to be
used for filtering purposes. Either select the message type by name or enter
the message type number:
- Any—All message types are accepted.
- Select from list—Select message type by name.
- IGMP Type to match—Number of message type that will be used for
filtering purposes.
Click Apply. The IPv4-based ACE is written to the Running Configuration file.
IPv6-Based ACL
The
check pure IPv6-based traffic. IPv6 ACLs do not check IPv6-over-IPv4 or ARP
packets.
ACLs are also used as the building elements of flow definitions for per-flow QoS
handling (see QoS Advanced Mode).
Defining an IPv6-based ACL
To define an IPv6-based ACL:
Click Access Control > IPv6-Based ACL. The IPv6-Based ACL page is
displayed.
This window displays the list of defined ACLs and their contents
page displays and enables the creation of IPv6 ACLs, which
20
370