Ipv6 Access-List - Cisco Nexus 7000 Series Command Reference Manual

ipv6 access-list

ipv6 access-list
To create an IPv6 access control list (ACL) or to enter IP access list configuration mode for a specific ACL,
use the ipv6 access-list command. To remove an IPv6 ACL, use the no form of this command.
ipv6 access-list access-list-name
no ipv6 access-list access-list-name
Syntax Description
access-list-name
Command Default
No IPv6 ACLs are defined by default.
Command Modes
Global configuration
Command History
Release
4.1(2)
Usage Guidelines
Use IPv6 ACLs to filter IPv6 traffic.
When you use the ipv6 access-list command, the device enters IPv6 access list configuration mode, where
you can use the IPv6 deny and permit commands to configure rules for the ACL. If the ACL specified does
not exist, the device creates it when you enter this command.
Use the ipv6 traffic-filter command to apply the ACL to an interface as a router ACL. Use the ipv6 port
traffic-filter command to apply the ACL to an interface as a port ACL.
Every IPv6 ACL has the following implicit rules as its last rules:
permit icmp any any nd-na
permit icmp any any nd-ns
permit icmp any any router-advertisement
permit icmp any any router-solicitation
deny ipv6 any any
Unless you configured an IPv6 ACL with a rule that denies ICMPv6 neighbor discovery messages, the first
four rules ensure that the device permits neighbor discovery advertisement and solicitation messages. The
fifth rule ensures that the device denies unmatched IPv6 traffic.
Use the statistics per-entry command to configure the device to record statistics for each rule in an IPv6
ACL. The device does not record statistics for implicit rules. To record statistics for packets that would match
implicit rules, you must explicitly configure an identical rule for each implicit rule.
Cisco Nexus 7000 Series Security Command Reference
436
Name of the IPv6 ACL. Names cannot contain a space
or quotation mark.
Modification
This command was introduced.
I Commands