Table of Contents
Advertisement
Understanding IPv6 ACLs
These sections describe some characteristics of IPv6 ACLs on the switch:
•
•
Supported ACL Features
IPv6 ACLs on the switch have these characteristics:
•
•
•
IPv6 ACL Limitations
With IPv4, you can configure standard and extended numbered IP ACLs, named IP ACLs, and MAC
ACLs. IPv6 supports only named ACLs.
The switch supports most Cisco IOS-supported IPv6 ACLs with some exceptions:
•
•
•
•
•
•
•
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
37-2
Supported ACL Features, page 37-2
IPv6 ACL Limitations, page 37-2
Fragmented frames (the fragments keyword as in IPv4) are supported.
The same statistics supported in IPv4 are supported for IPv6 ACLs.
If the switch runs out of TCAM space, packets associated with the ACL label are forwarded to the
CPU, and the ACLs are applied in software.
IPv6 source and destination addresses—ACL matching is supported only on prefixes from /0 to /64
and host addresses (/128) that are in the extended universal identifier (EUI)-64 format. The switch
supports only these host addresses with no loss of information:
aggregatable global unicast addresses
–
link local addresses
–
The switch does not support matching on these keywords: flowlabel, routing header, and
undetermined-transport.
The switch does not support reflexive ACLs (the reflect keyword).
This release supports only input router ACLs for IPv6; it does not support VLAN ACLs (VLAN
maps), port ACLs, or output router ACLs.
The switch does not apply MAC-based ACLs on IPv6 frames.
When configuring an ACL, there is no restriction on keywords entered in the ACL, regardless of
whether or not they are supported on the platform. When you apply the ACL to an interface that
requires hardware forwarding (physical ports or SVIs), the switch checks to determine whether or
not the ACL can be supported on the interface. If not, attaching the ACL is rejected.
If an ACL is applied to an interface and you attempt to add an access control entry (ACE) with an
unsupported keyword, the switch does not allow the ACE to be added to the ACL that is currently
attached to the interface.
Chapter 37
Configuring IPv6 ACLs
OL-8915-03
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
