Cisco Cisco SF302-08PP 8-port 10 100 PoE+ Managed Switch Manual De Mantenimiento
Access Control
IPv6-Based ACLs
552
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
27
NOTE
ACLs are also used as the building elements of flow definitions for per-flow QoS
handling (see
handling (see
).
Defining an IPv6-based ACL
To define an IPv6-based ACL:
STEP 1
Click Access Control > IPv6-Based ACL.
This window contains the list of defined ACLs and their contents
STEP 2
Click Add.
STEP 3
Enter the name of a new ACL in the ACL Name field. The names are
case-sensitive.
case-sensitive.
STEP 4
Click Apply. The IPv6-based ACL is saved to the Running Configuration file.
Adding Rules (ACEs) for an IPv6-Based ACL
NOTE
Each IPv6-based rule consumes two TCAM rules.
STEP 1
Click Access Control > IPv6-Based ACE.
This window contains the ACE (rules) for a specified ACL (group of rules).
STEP 2
Select an ACL, and click Go. All currently-defined IP ACEs for the selected ACL are
displayed.
displayed.
STEP 3
Click Add.
STEP 4
Enter the parameters.
•
ACL Name—Displays the name of the ACL to which an ACE is being added.
•
Priority—Enter the priority. ACEs with higher priority are processed first.
•
Action—Select the action assigned to the packet matching the ACE. The
options are as follows:
options are as follows:
-
Permit—Forward packets that meet the ACE criteria.
-
Deny—Drop packets that meet the ACE criteria.
-
Shutdown—Drop packets that meet the ACE criteria, and disable the
port to which the packets were addressed. Ports are reactivated from the
Port Management page.
port to which the packets were addressed. Ports are reactivated from the
Port Management page.