Configuring Ipv6 Default And Static Routes; Configuring Ipv6 Access Lists - Cisco 7604 Configuration Manual

Chapter 10 Configuring IPv6

Configuring IPv6 Default and Static Routes

IPv6 unicast routing is always enabled. FWSM routes IPv6 traffic between interfaces as long as the
interfaces are enabled for IPv6 and the IPv6 access lists allow the traffic. You can add a default route
and static routes using the ipv6 route command.
To configure an IPv6 default route and static routes, perform the following steps:
To add the default route, use the following command:
Step 1
hostname(config)# ipv6 route interface_name ::/0 next_hop_ipv6_addr
The address ::/0 is the IPv6 equivalent of "any."
(Optional) Define IPv6 static routes. Use the following command to add an IPv6 static route to the IPv6
Step 2
routing table:
hostname(config)# ipv6 route if_name destination next_hop_ipv6_addr [admin_distance]
The ipv6 route command works like the route command used to define IPv4 static routes.
Note
See the
route command used to configure the default route.

Configuring IPv6 Access Lists

Configuring an IPv6 access list is similar configuring an IPv4 access, but with IPv6 addresses.
To configure an IPv6 access list, perform the following steps:
Create an access entry. To create an access list, use the ipv6 access-list command to create entries for
Step 1
the access list. There are two main forms of this command to choose from, one for creating access list
entries specifically for ICMP traffic, and one to create access list entries for all other types of IP traffic.
•
•
The following describes the arguments for the ipv6 access-list command:
•
•
•
•
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
"Example 4: IPv6 Configuration Example" section on page B-13
To create an IPv6 access list entry specifically for ICMP traffic, enter the following command:
hostname(config)# ipv6 access-list id [line num] {permit | deny} icmp source
destination [icmp_type]
To create an IPv6 access list entry, enter the following command:
hostname(config)# ipv6 access-list id [line num] {permit | deny} protocol source
[src_port] destination [dst_port]
id—The name of the access list. Use the same id in each command when you are entering multiple
entries for an access list.
line num—When adding an entry to an access list, you can specify the line number in the list where
the entry should appear.
permit | deny—Determines whether the specified traffic is blocked or allowed to pass.
icmp—Indicates that the access list entry applies to ICMP traffic.
Configuring IPv6 Default and Static Routes
for an example of the ipv6
10-5