Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Chapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsdeny (IPv6 access-list configuration)router-solicitationunreachabletime-exceededExamplesThis example configures the IPv6 access list named CISCO and applies the access list to outbound trafficon a Layer 3 interface. The first deny entry in the list prevents all packets that have a destination TCPport number greater than 5000 from leaving the interface. The second deny entry in the list prevents allpackets that have a source UDP port number less than 5000 from leaving the interface. The second denyalso logs all matches to the console. The first permit entry in the list permits all ICMP packets to leavethe interface. The second permit entry in the list permits all other traffic to leave the interface. Thesecond permit entry is necessary because an implicit deny-all condition is at the end of each IPv6 accesslist.Switch(config)# ipv6 access-list CISCOSwitch(config-ipv6-acl)# deny tcp any any gt 5000Switch config-ipv6-acl)# deny ::/0 lt 5000 ::/0 logSwitch(config-ipv6-acl)# permit icmp any anySwitch(config-ipv6-acl)# permit any anySwitch(config-ipv6-acl)# exitSwitch(config)# interface gigabitethernet1/0/3Switch(config-if)# no switchportSwitch(config-if)# ipv6 address 2001::/64 eui-64Switch(config-if)# ipv6 traffic-filter CISCO outRelated CommandsCommandipv6 access-listipv6 traffic-filterpermit (IPv6access-listconfiguration)show ipv6 access-listDescriptionDefines an IPv6 access list and enters IPv6 access list configuration mode.Filters incoming or outgoing IPv6 traffic on an interface.Sets permit conditions for an IPv6 access list.Displays the contents of all current IPv6 access lists.OL-9776-08Catalyst 3750-E and 3560-E Switch Command Reference2-135