Table of Contents
Advertisement
Configuring ACL
The following example shows how to create IPv6 ACL 1600 and configure Rule 1 to deny
packets with source IPv6 address CDCD:910A:2222:5498:8475:1111:3900:2020:
Switch#configure
Switch(config)#access-list create 1600
Switch(config)#access-list ipv6 1600 rule 1 deny logging disable sip
CDCD:910A:2222:5498:8475:1111:3900:2020 sip-mask ffff:ffff:ffff:ffff
Switch(config)#show access-list 1600
IPv6 access list 1600 name: ACL_1600
rule 1 deny logging disable sip cdcd:910a:2222:5498:8475:1111:3900:2020 sip-mask ffff:ff
ff:ffff:ffff
Switch(config)#end
Switch#copy running-config startup-config
Resequencing Rules
You can resequence the rules by providing a Start Rule ID and Step value.
Step 1
configure
Enter global configuration mode.
Step 2
access-list resequence acl-id-or-name start start-rule-id step rule-id-step-value
Resequence the rules of the specific ACL.
acl-id-or-name
start-rule-id
rule-id-step-value
Step 3
end
Return to privileged EXEC mode.
Step 4
copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to resequence the rules of MAC ACL 100: set the start
rule ID as 1 and the step value as 10:
Switch#configure
Switch(config)#access-list resequence 100 start 1 step 10
Switch(config)#show access-list 100
MAC access list 100 name: "ACL_100"
rule 1 deny logging disable smac aa:bb:cc:dd:ee:ff smask ff:ff:ff:ff:ff:ff
: Enter the ID or name of the ACL.
: Enter the start rule ID.
: Enter the Step value.
ACL Configuration
Configuration Guide
600
Advertisement
Table of Contents
