Cisco Catalyst 2960 Series, Configuration Manual

Page: 289 / 2288

DETAILED STEPS
Purpose Command or Action
Displays all access lists configured on the switch show access-list
Example:
Switch# show access-lists
Step 1
Displays all configured IPv6 access list or the access
list specified by name. show ipv6 access-list acl_name
Example:
Switch# show ipv6 access-list [access-list-name]
Step 2
Configuration Examples for IPv6 ACL
Example: Creating IPv6 ACL
This example configures the IPv6 access list named CISCO. The first deny entry in the list denies all packets
that have a destination TCP port number greater than 5000. The second deny entry denies packets that have
a source UDP port number less than 5000. The second deny also logs all matches to the console. The first
permit entry in the list permits all ICMP packets. The second permit entry in the list permits all other traffic.
The second permit entry is necessary because an implicit deny -all condition is at the end of each IPv6 access
list.
Logging is supported only on Layer 3 interfaces.
Note
Switch(config)# ipv6 access-list CISCO
Switch(config-ipv6-acl)# deny tcp any any gt 5000
Switch (config-ipv6-acl)# deny ::/0 lt 5000 ::/0 log
Switch(config-ipv6-acl)# permit icmp any any
Switch(config-ipv6-acl)# permit any any
Example: Applying IPv6 ACLs
This example shows how to apply the access list Cisco to outbound traffic on a Layer 3 interface.
Switch(config-if)# no switchport
Switch(config-if)# ipv6 address 2001::/64 eui-64
Switch(config-if)# ipv6 traffic-filter CISCO out
Example: Displaying IPv6 ACLs
This is an example of the output from the
show access-lists
privileged EXEC command. The output shows
all access lists that are configured on the switch or switch stack.
Switch #show access-lists
Extended IP access list hello
10 permit ip any any
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
207
Configuration Examples for IPv6 ACL