Defining Ipv6-Acls; Operand And Port Options For An Ipv4-Acl - Cisco MDS 9000 Series Configuration Manual

Defining IPv6-ACLs

Step 2
switch(config)# ip access-list restrict_mgmt permit ip 10.67.16.0 0.0.0.255 any
Defines an entry in an IPv4-ACL named restrict_mgmt allowing all addresses in the 10.67.16.0/24 subnet.
Step 3 switch(config)# ip access-list restrict_mgmt permit icmp any any eq 8
Adds an entry to an IPv4-ACL named restrict_mgmt to allow any device to ping the MDS (icmp type 8).
Step 4 switch(config)# ip access-list restrict_mgmt deny ip any any
Explicitly blocks all other access to an access-list named restrict_mgmt.
Defining IPv6-ACLs
To define an IPv6-ACL that restricts management access, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# ip access-list RestrictMgmt
switch(config-ipv6-acl)#
Configures an IPv6-ACL called RestrictMgmt and enters IPv6-ACL configuration submode.
Step 3
switch(config)# permit ipv6 2001:0DB8:800:200C::/64 any
Defines an entry allowing all addresses in the 2001:0DB8:800:200C::/64 prefix.
Step 4 switch(config)# permit icmp any any eq 8
Adds an entry to allow any device to ping the MDS (ICMP type 8).
Step 5
switch(config)# deny ipv6 any any
Explicitly blocks all other IPv6 access.

Operand and port options for an IPv4-ACL

To use the operand and port options for an IPv4-ACL, follow these steps:
Procedure
Step 1
switch# configure terminal
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
106
Configuring IPv4 and IPv6 Access Control Lists