Chapter 24
Configuring IP Version 6
Configuring IPv6 Traffic Filtering
To enable IPv6 traffic filtering, you must perform the following steps:
1.
2.
3.
Creating and Configuring the IPv6 ACL
SUMMARY STEPS
1.
2.
3.
4.
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
OL-2226-23
Create an IPv6 ACL
Configure the IPv6 ACL to pass or block traffic
Apply the IPv6 ACL to an interface
enable
configure terminal
ipv6 access-list access-list-name
permit protocol {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [dest-option-type [doh-number | doh-type]] [dscp value] [flow-label
value] [fragments] [log] [log-input] [mobility] [mobility-type [mh-number | mh-type]] [reflect
name [timeout value]] [routing] [routing-type routing-number] [sequence value] [time-range
name]
or
deny protocol {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [dest-option-type [doh-number | doh-type]] [dscp value] [flow-label
value] [fragments] [log] [log-input] [mobility] [mobility-type [mh-number | mh-type]] [routing]
[routing-type routing-number] [sequence value] [time-range name] [undetermined-transport]
Purpose
Enables privileged EXEC mode.
Enter your password if prompted.
•
Enters global configuration mode.
Cisco 10000 Series Router Software Configuration Guide
IPv6 Extended ACLs
24-5