IPv6 Access Control List (2)

IPv6 Access Control List (2)

This LAB only permit network prefix 2001:aaaa::/64 access network prefix 2001:bbbb::/64 , deny network prefix 2001:cccc::/64 access network prefix 2001:bbbb::/64 .


**********  IPv6 ACL config **********
==============================================
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
 ipv6 address 2001:BBBB::1/64
 ipv6 traffic-filter ipv6acl2 out


ipv6 access-list ipv6acl2
 permit ipv6 2001:AAAA::/64 2001:BBBB::/64
 deny ipv6 2001:CCCC::/64 2001:BBBB::/64
 permit ipv6 any any
!        

==============================================
v6acl#show ipv6 access-list ipv6acl2
IPv6 access list ipv6acl2
    permit ipv6 2001:AAAA::/64 2001:BBBB::/64 (20 matches) sequence 10
    deny ipv6 2001:CCCC::/64 2001:BBBB::/64 (25 matches) sequence 20
    permit ipv6 any any sequence 30
v6acl#
==============================================

VPCS[2]> ping 2001:bbbb::3  

*2001:cccc::1 icmp6_seq=1 ttl=64 time=78.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=2 ttl=64 time=47.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=3 ttl=64 time=63.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=4 ttl=64 time=78.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=5 ttl=64 time=47.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)

VPCS[2]>
VPCS[2]>
VPCS[2]>
VPCS[2]> ping 2001:bbbb::2

*2001:cccc::1 icmp6_seq=1 ttl=64 time=47.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=2 ttl=64 time=46.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=3 ttl=64 time=47.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=4 ttl=64 time=46.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)
*2001:cccc::1 icmp6_seq=5 ttl=64 time=47.000 ms (ICMP type:1, code:1, Communicat
ion with destination administratively prohibited)




VPCS[1]> ping 2001:bbbb::2

2001:bbbb::2 icmp6_seq=1 ttl=62 time=109.000 ms
2001:bbbb::2 icmp6_seq=2 ttl=62 time=78.000 ms
2001:bbbb::2 icmp6_seq=3 ttl=62 time=78.000 ms
2001:bbbb::2 icmp6_seq=4 ttl=62 time=78.000 ms
2001:bbbb::2 icmp6_seq=5 ttl=62 time=94.000 ms

VPCS[1]> ping 2001:bbbb::3

2001:bbbb::3 icmp6_seq=1 ttl=62 time=109.000 ms
2001:bbbb::3 icmp6_seq=2 ttl=62 time=78.000 ms
2001:bbbb::3 icmp6_seq=3 ttl=62 time=78.000 ms
2001:bbbb::3 icmp6_seq=4 ttl=62 time=78.000 ms
2001:bbbb::3 icmp6_seq=5 ttl=62 time=63.000 ms

VPCS[1]>