Configuring Ipv6 Acls - Cisco Catalyst 2960-X Security Configuration Manual

Configuring IPv6 ACLs

permit udp any eq 547 any eq 546 sequence 80
permit udp any eq 546 any eq 547 sequence 90
deny ipv6 any any sequence 100
Configuring IPv6 ACLs
To filter IPv6 traffic, you perform these steps:
SUMMARY STEPS
1. enable
2. configure terminal
3. {ipv6 access-list list-name
4. {deny | permit} protocol {source-ipv6-prefix/|prefix-length|any| host source-ipv6-address} [ operator [
port-number ]] { destination-ipv6-prefix/ prefix-length | any | host destination-ipv6-address} [operator
[port-number]][dscp value] [fragments] [log] [log-input] [routing] [sequence value] [time-range name]
5. {deny | permit} tcp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6- prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [ack] [dscp value] [established] [fin] [log] [log-input] [neq {port | protocol}] [psh]
[range {port | protocol}] [rst] [routing] [sequence value] [syn] [time-range name] [urg]
6. {deny | permit} udp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [dscp value] [log] [log-input] [neq {port | protocol}] [range {port | protocol}] [routing]
[sequence value] [time-range name]]
7. {deny | permit} icmp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address} [operator
[port-number]] [icmp-type [icmp-code] | icmp-message] [dscp value] [log] [log-input] [routing] [sequence
value] [time-range name]
8. end
9. show ipv6 access-list
10. show running-config
11. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Switch> enable
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
200
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Configuring IPv6 ACLs
OL-29048-01