Cisco Catalyst 2960 Series, Configuration Manual

Page: 288 / 2288

Applying an IPv6 ACL to an Interface
This section describes how to apply IPv6 ACLs to network interfaces. You can apply an ACL to outbound
or inbound traffic on Layer 3 interfaces, or to inbound traffic on Layer 2 interfaces.
Beginning in privileged EXEC mode, follow these steps to control access to an interface:
DETAILED STEPS
Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 1
Identify a Layer 2 interface (for port ACLs) or Layer 3 interface
(for router ACLs) on which to apply an access list, and enter
interface configuration mode. interface interface_id
Example:
Switch# interface interface-id
Step 2
If applying a router ACL, change the interface from Layer 2 mode
(the default) to Layer 3 mode. no switchport
Example:
Switch# no switchport
Step 3
Configure an IPv6 address on a Layer 3 interface (for router ACLs).
This command is not required on Layer 2 interfaces or if the
interface has already been configured with an explicit IPv6 address. ipv6 address ipv6_address
Example:
Switch# ipv6 address ipv6-address
Step 4
Apply the access list to incoming or outgoing traffic on the
interface. The
out keyword is not supported for Layer 2 interfaces
(port ACLs).
ipv6 traffic-filter access-list-name
Example:
Switch# ipv6 traffic-filter
access-list-name {in | out}
Step 5
Returns to privileged EXEC mode. Alternatively, you can also
press
Ctrl-Z to exit global configuration mode.
end
Example:
Switch(config)# end
Step 6
Verify the access list configuration. show running-config Step 7
(Optional) Saves your entries in the configuration file. copy running-config startup-config
Example:
copy running-config startup-config
Step 8
Displaying IPv6 ACLs
You can display information about all configured access lists, all IPv6 access lists, or a specific access list by
using one or more of the privileged EXEC commands.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
206
Configuring IPv6 ACLs