Adding Ip Filters To An Existing Ipv4-Acl Or Ipv6-Acl; Removing Ip Filters From An Existing Ipv4-Acl Or Ipv6-Acl - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 35 Configuring IPv4 and IPv6 Access Control Lists
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To use the operand and port options for an IPv6-ACL, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ip access-list List2 deny tcp
2001:0DB8:800:200C::/64 eq port 5 any

Adding IP Filters to an Existing IPv4-ACL or IPv6-ACL

After you create an IPv4-ACL or an IPv6-ACL, you can add subsequent IP filters at the end of the
IPv4-ACL or the IPv6-ACL. You cannot insert filters in the middle of an IPv4-ACL or an IPv6-ACL.
Each configured entry is automatically added to the end of a IPv4-ACL or a IPv6-ACL.
To add entries to an existing IPv4-ACL, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ip access-list List1 permit tcp
10.1.1.2 0.0.0.0 172.16.1.1 0.0.0.0 eq port telnet
Step 3
switch(config)# ip access-list List1 permit tcp
10.1.1.2 0.0.0.0 172.16.1.1 0.0.0.0 eq port http
Step 4
switch(config)# ip access-list List1 permit udp
10.1.1.2 0.0.0.0 172.16.1.1 0.0.0.0
To add entries to an existing IPv6-ACL, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# ipv6 access-list List2
switch(config-ipv6-acl)#
Step 3
switch(config-ipv6-acl)# permit ip
2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq
23
Step 4
switch(config-ipv6-acl)# permit tcp
2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64 eq
143
Step 5
switch(config-ipv6-acl)# permit udp
2001:0DB8:800:200C::/64 2001:0DB8:800:2010::/64

Removing IP Filters from an Existing IPv4-ACL or IPv6-ACL

To remove configured entries from an IPv4-ACL, follow these steps:
Command
Step 1
switch# config t
OL-18084-01, Cisco MDS NX-OS Release 4.x
Configuring IPv4-ACLs or IPv6-ACLs
Purpose
Enters configuration mode.
Denies TCP traffic from
2001:0DB8:800:200C::/64 through source
port 5 to any destination.
Purpose
Enters configuration mode.
Permits TCP for Telnet traffic.
Permits TCP for HTTP traffic.
Permits UDP for all traffic.
Purpose
Enters configuration mode.
Configures an IPv6-ACL and enters
IPv6-ACL configuration submode.
Permits TCP for Telnet traffic.
Permits TCP for HTTP traffic.
Permits UDP for all traffic.
Purpose
Enters configuration mode.
Cisco MDS 9000 Family CLI Configuration Guide
35-7