Configuration Guide User guide

1768 FastIron Configuration Guide
53-1002494-02
Enabling IPv6 on an interface to which an ACL will be applied
Enabling IPv6 on an interface to which an ACL will be applied
Before an IPv6 ACL can be applied to an interface, it must first be created, and then IPv6 must be
enabled on that interface.
To enable IPv6 on an interface, enter ipv6 enable at the Interface level of the CLI, or assign an IPv6
address to the interface, as described in “IPv6 configuration on each router interface” on
page 362.
For example:
These commands enable IPv6 on Ethernet interface 1/1 ready for an IPv6 ACL to be applied.
Syntax for enabling IPv6 on an interface
Syntax: ipv6 enable
When issued at the Interface Configuration level, this command enables IPv6 for a specific
interface.
Applying an IPv6 ACL to an interface
As mentioned in “IPv6 ACL overview” on page 1755, IPv6 ACLs are supported on the following
devices:
• Gbps Ethernet ports
• 10 Gbps Ethernet ports
• Trunk groups
• Virtual routing interfaces
To apply an IPv6 ACL to an interface, enter commands such as the following.
Brocade(config)#interface ethernet 3/1
Brocade(config-if-e100-3/1)#ipv6 traffic-filter access1 in
This example applies the IPv6 ACL “access1” to incoming IPv6 packets on Ethernet interface 3/1.
As a result, Ethernet interface 3/1 denies all incoming packets from the site-local prefix
fec0:0:0:2::/64 and the global prefix 2001:100:1::/48 and permits all other incoming packets.
Brocade(config)#interface ethernet 1/1
Brocade(config-if-1/1)#ipv6 enable