Ipv6 access-list – Dell POWEREDGE M1000E User Manual

Page 282

2-252

Cisco Catalyst Blade Switch 3130 and 3032 for Dell Command Reference

OL-13271-03

Chapter 2 Cisco Catalyst Blade Switch 3130 and 3032 for Dell Cisco IOS Commands

ipv6 access-list

Use the ipv6 access-list global configuration command on the switch stack or on a standalone switch to
define an IPv6 access list and to place the switch in IPv6 access list configuration mode. To remove the
access list, use the no form of this command.

ipv6 access-list access-list-name

no ipv6 access-list access-list-name

Note

This command is supported only if you have configured a dual IPv4 and IPv6 Switch Database
Management (SDM) template on the switch.

Syntax Description

Defaults

No IPv6 access list is defined.

Command Modes

Global configuration

Command History

Usage Guidelines

To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 {default | vlan)
global configuration command and reload the switch.

The ipv6 access-list command is similar to the ip access-list command, but it is IPv6-specific.

Note

IPv6 ACLs are defined by a unique name (IPv6 does not support numbered ACLs). An IPv4 ACL and
an IPv6 ACL cannot share the same name.

See the

deny (IPv6 access-list configuration)

and

permit (IPv6 access-list configuration)

commands

for more information on filtering IPv6 traffic based on IPv6 option headers and optional, upper-layer
protocol-type information. See the “Examples” section for an example of a translated IPv6 ACL
configuration.

Note

Every IPv6 ACL has implicit permit icmp any any nd-na, permit icmp any any nd-ns, and deny ipv6
any any statements as its last match conditions. The two permit conditions allow ICMPv6 neighbor
discovery. To disallow ICMPv6 neighbor discovery and to deny icmp any any nd-na or icmp any any
nd-ns, there must be an explicit deny entry in the ACL. For the implicit deny ipv6 any any statement
to take effect, an IPv6 ACL must contain at least one entry.

access-list-name

Name of the IPv6 access list. Names cannot contain a space or quotation
mark or begin with a numeric.

Release

Modification

12.2(40)EX1

This command was introduced.