Technical data

100 ServerIron ADX NAT64 Configuration Guide
53-1002444-02
Configuring IPv6 ACLs
6
DRAFT: BROCADE CONFIDENTIAL
The second condition denies all IPv6 traffic from host 2001:db8:2383:e0ac::2 to host
2001:db8:2383:e0aa:0::24.
The third condition denies all UDP traffic.
The fourth condition permits all packets that are not explicitly denied by the other entries. Without
this entry, the ACL would deny all incoming IPv6 traffic on the ports to which you assigned the ACL.
The following commands apply the ACL named "netw" to the incoming traffic on port 1/2 and to the
incoming traffic on port 4/3.
ServerIronADX(config)# interface ethernet 1/2
ServerIronADX(config-if-1/2)# ipv6 traffic-filter netw in
ServerIronADX(config-if-1/2)# exit
ServerIronADX(config)# interface ethernet 4/3
ServerIronADX(config-if-4/3)# ipv6 traffic-filter netw in
ServerIronADX(config)# write memory
The folloiwng example swhos the commands for configuring another ACL and applying it to an
interface.
ServerIronADX(config)# ipv6 access-list nextone
ServerIronADX(config-ipv6-access-list rtr)# deny tcp 2001:db8:1570:21::/24
2001:db8:1570:22::/24
ServerIronADX(config-ipv6-access-list rtr)# deny udp any range 5 6
2001:db8:1570:22::/24
ServerIronADX(config-ipv6-access-list rtr)# permit ipv6 any any
ServerIronADX(config-ipv6-access-list rtr)# write memory
The first condition in this ACL denies TCP traffic from the 2001:db8:1570:21::/24 network to the
2001:db8:1570:22::/24 network.
The next condition denies UDP packets from source UDP port 5 or 6 to the 2001:db8:1570:22::/24
network.
The third condition permits all packets containing source and destination addresses that are not
explicitly denied by the first two conditions. Without this entry, the ACL would deny all incoming IPv6
traffic on the ports to which you assign the ACL.
The show running-config command displays the following output:
The show ipv6 access-list command displays the following output:
ServerIronADX(config)# show running-config
ipv6 access-list rtr
deny tcp 2001:db8:1570:21::/24 2001:db8:1570:22::/24
deny udp any range 5 6 2001:db8:1570:22::/24
permit ipv6 any any
ServerIronADX(config)# show ipv6 access-list rtr
ipv6 access-list rtr: 3 entries
deny tcp 2001:db8:1570:21::/24 2001:db8:1570:22::/24
deny udp any range 5 6 2001:db8:1570:22::/24
permit ipv6 any any