Configuring IPv4 and IPv6 Access Control Lists
Step 4
switch(config)# ip access-list List1 deny tcp any any
Updates List1 to deny TCP traffic from any source address to any destination address.
Creating IPv6-ACLs
To create an IPv6-ACL, follow these steps:
Procedure
Step 1
switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# ipv6 access-list List1
switch(config-ipv6-acl)#
Configures an IPv6-ACL called List1 and enters IPv6-ACL configuration submode.
Step 3
switch(config)# no ipv6 access-list List1
(Optional) Removes the IPv6-ACL called List1 and all its entries.
Step 4
switch(config-ipv6-acl)# permit ipv6 any any
Adds an entry permitting IPv6 traffic from any source address to any destination address.
Step 5
switch(config-ipv6-acl)# no permit ipv6 any any
(Optional) Removes an entry from the IPv6-ACL.
Step 6
switch(config-ipv6-acl)# deny tcp any any
Adds an entry to deny TCP traffic from any source address to any destination address.
Defining IPv4-ACLs
To define an IPv4-ACL that restricts management access, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Creating IPv6-ACLs
105