Adding Ip Filters To An Existing Ipv6-Acl; Removing Ip Filters From An Existing Ipv4-Acl - Cisco MDS 9000 Series Configuration Manual

Adding IP Filters to an Existing IPv6-ACL

Adding IP Filters to an Existing IPv6-ACL
To add entries to an existing IPv6-ACL, follow these steps:
Procedure
Step 1 switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# ipv6 access-list List2
switch(config-ipv6-acl)#
Configures an IPv6-ACL and enters IPv6-ACL configuration submode.
Step 3 switch(config-ipv6-acl)# permit ip 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq 23
Permits TCP for Telnet traffic.
Step 4
switch(config-ipv6-acl)# permit tcp 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq 143
Permits TCP for HTTP traffic.
Step 5 switch(config-ipv6-acl)# permit udp 2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64
Permits UDP for all traffic.

Removing IP Filters from an Existing IPv4-ACL

To remove configured entries from an IPv4-ACL, follow these steps:
Procedure
Step 1 switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# no ip access-list List2 deny tcp 1.2.3.0 0.0.0.255 eq port 5 any
Removes this entry from the IPv4-ACL (List2).
Step 3 switch(config)# no ip access-list x3 deny ip any any
Removes this entry from the IPv4-ACL (x3).
Step 4 switch(config)# no ip access-list x3 permit ip any any
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
108
Configuring IPv4 and IPv6 Access Control Lists