Access Control
IPv6-Based ACLs
NOTE
STEP 1
STEP 2
STEP 3
STEP 4
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3
ACLs are also used as the building elements of flow definitions for per-flow QoS
handling (see
QoS Advanced
Defining an IPv6-based ACL
To define an IPv6-based ACL:
Click Access Control > IPv6-Based ACL.
This window contains the list of defined ACLs and their contents
Click Add.
Enter the name of a new ACL in the ACL Name field. The names are
case-sensitive.
Click Apply. The IPv6-based ACL is saved to the Running Configuration file.
Adding Rules (ACEs) for an IPv6-Based ACL
Click Access Control > IPv6-Based ACE.
This window contains the ACE (rules) for a specified ACL (group of rules).
Select an ACL, and click Go. All currently-defined IP ACEs for the selected ACL are
displayed.
Click Add.
Enter the parameters.
•
ACL Name—Displays the name of the ACL to which an ACE is being added.
•
Priority—Enter the priority. ACEs with higher priority are processed first.
•
Action—Select the action assigned to the packet matching the ACE. The
options are as follows:
-
Permit—Forward packets that meet the ACE criteria.
-
Deny—Drop packets that meet the ACE criteria.
-
Shutdown—Drop packets that meet the ACE criteria, and disable the
port to which the packets were addressed. Ports are reactivated from the
Port Management page.
Mode).
24
470