Table of Contents
Advertisement
•
control-plane—The access list is applied to ingress control plane packets.
This parameter is only available in Global Configuration mode.
•
seq-num — Order of access list relative to other access lists already
assigned to this interface and direction. (Range: 1–4294967295)
Default Configuration
No IPv6 traffic filters are configured by default.
Command Modes
Global Configuration mode, Interface Configuration (Ethernet, Port-
channel, VLAN) mode
User Guidelines
This command specified in Interface Configuration mode only affects a
single interface, whereas the Global Configuration mode setting is applied to
all interfaces. The optional control-plane keyword allows application of an
ACL on the CPU port ingress queue. Control plane packets (e.g., BPDUs) are
dropped because of the implicit deny all rule added at the end of every access
control list. To mitigate this behavior, permit rules must be added by the
operator to allow the appropriate control plane packets to ingress the CPU
(i.e., ARP, DHCP, LACP, STP BPDU, etc.). The control-plane keyword does
not filter traffic received over the out-of-band port.
Example
The following example attaches an IPv6 access control list to an interface.
console(config-if-Gi1/0/1)#ipv6 traffic-filter DELL_IP6 in
Command History
Syntax updated in the 6.4 release.
show ipv6 access-lists
Use the show ipv6 access-lists command in User Exec and Privileged Exec
mode to display an IPv6 access list and all of the rules that are defined for the
IPv6 ACL. Use the [name] parameter to identify a specific IPv6 ACL to
display.
Layer 2 Switching Commands
507
Advertisement
Table of Contents
