702
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
D E L L C O N F I D E N T I A L – PR E LI M IN A RY 2 0 12 - F O R P RO O F O N LY
ipv6 access-list
Use the
ipv6 access-list
global configuration mode command to define an
IPv6 access list and to place the device in IPv6 access list configuration mode.
Use the
no
form of this command to remove the access list.
Syntax
ipv6 access-list
[
access-list-name]
no ipv6 access-list
[access-list-name]
Parameters
•
access-list-name
—Name of the IPv6 access list.
•
access-list-name
—0–32 characters (use "" for empty string)
Default
No IPv6 access list is defined.
Command Mode
Global Configuration mode
User Guidelines
IPv6 ACL is defined by a unique name. IPv4 ACL, IPv6 ACL, MAC ACL or
Policy Map cannot have the same name.
Every IPv6 ACL has implicit permit icmp any any nd-ns any, permit icmp any
any nd-na any, and deny ipv6 any any statements as its last match conditions.
(The former two match conditions allow for ICMPv6 neighbor discovery.)
The IPv6 neighbor discovery process makes use of the IPv6 network layer
service, therefore, by default, IPv6 ACLs implicitly allow IPv6 neighbor
discovery packets to be sent and received on an interface. In IPv4, the Address
Resolution Protocol (ARP), which is equivalent to the IPv6 neighbor
discovery process, makes use of a separate data link layer protocol; therefore,
by default, IPv4 ACLs implicitly allow ARP packets to be sent and received on
an interface.
Example