beautypg.com

Syntax for enabling ipv6 on an interface, Applying an ipv6 acl to an interface – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 164

background image

• nd-ns
• next-header
• no-admin
• no-route
• packet-too-big
• parameter-option
• parameter-problem
• port-unreachable
• reassembly-timeout
• renum-command
• renum-result
• renum-seq-number
• router-advertisement
• router-renumbering
• router-solicitation
• time-exceeded
• unreachable

NOTE
If you do not specify a message type, the ACL applies to all types ICMP messages types.

Enabling IPv6 on an interface to which an ACL will be applied

Before an IPv6 ACL can be applied to an interface, it must first be created, and then IPv6 must be
enabled on that interface.

To enable IPv6 on an interface, enter ipv6 enable at the Interface level of the CLI, or assign an IPv6
address to the interface, as described in section "IPv6 configuration on each router interface" in the
FastIron Ethernet Switch Administration Guide .

For example:

device(config)#interface ethernet 1/1

device(config-if-1/1)#ipv6 enable

These commands enable IPv6 on Ethernet interface 1/1 ready for an IPv6 ACL to be applied.

Syntax for enabling IPv6 on an interface

Syntax: ipv6 enable

When issued at the Interface Configuration level, this command enables IPv6 for a specific interface.

Applying an IPv6 ACL to an interface

As mentioned in

IPv6 ACL overview

on page 153, IPv6 ACLs are supported on the following devices:

Enabling IPv6 on an interface to which an ACL will be applied

164

FastIron Ethernet Switch Security Configuration Guide

53-1003088-03