Administrator Guide

Layer 2 Switching Commands 532
Default Configuration
No IPv6 traffic filters are configured by default.
Command Modes
Global Configuration mode, Interface Configuration (Ethernet, Port-
channel, VLAN) mode
User Guidelines
This command specified in Interface Configuration mode only affects a
single interface, whereas the Global Configuration mode setting is applied to
all interfaces. The optional control-plane keyword allows application of an
ACL on the CPU port ingress queue. Control plane packets (e.g., BPDUs) are
dropped because of the implicit deny all rule added at the end of every access
control list. To mitigate this behavior, permit rules must be added by the
operator to allow the appropriate control plane packets to ingress the CPU
(i.e., ARP, DHCP, LACP, STP BPDU, etc.). The control-plane keyword does
not filter traffic received over the out-of-band port.
Example
The following example attaches an IPv6 access control list to an interface.
console(config-if-Gi1/0/1)#ipv6 traffic-filter DELL_IP6 in
show ipv6 access-lists
Use the show ipv6 access-lists command in User Exec and Privileged Exec
mode to display an IPv6 access list and all of the rules that are defined for the
IPv6 ACL. Use the [
name ] parameter to identify a specific IPv6 ACL to
display.
Syntax
show ipv6 access-lists [ name ]
• name — The name used to identify the IPv6 ACL.
Default Configuration
There is no default configuration for this command.
2CSNXXX_SWUM204.book Page 532 Monday, January 25, 2016 1:25 PM