Skip to main content
Cisco SD-WAN
Support
Product Documentation
Viptela Documentation

access-list

policy ipv6 access-list, vpn interface access-list—Configure or apply an IPv6 access list (on vEdge routers only).

vManage Feature Template

For vEdge routers only:

Configuration ► Templates ► VPN Interface Bridge
Configuration ► Templates ► VPN Interface Cellular (for vEdge cellular wireless routers only)
Configuration ► Templates ► VPN Interface Ethernet
Configuration ► Templates ► VPN Interface GRE
Configuration ► Templates ► VPN Interface PPP
Configuration ► Templates ► VPN Interface PPP Ethernet

Command Hierarchy

Create an Access List

policy ipv6
  access-list acl-name
    default-action action
    sequence number
      match
        class class-name
        destination-port number
        next-header protocol
        packet-length number
        plp (high | low)
        source-port number
        tcp flag
        traffic-class value
      action
        drop
        count counter-name
        log
        accept
          class class-name
          mirror mirror-name
          policer policer-name
          set traffic-class value

Apply an Access List

vpn vpn-id
  interface interface-name
    ipv6 access-list acl-name (in | out)

Options

Access List Name
acl-name
Name of the access list to configure or to apply to the interface. acl-name can be up to 32 characters long.
Direction in which to Apply Access List
(in | out)
Direction in which to apply the access list. Applying it in the inbound direction (in) affects packets being received on the interface. Applying it in the outbound direction (out) affects packets being transmitted on the interface.

Example

Apply an IPv6 access list to data traffic being recieved on an interface in VPN 1:

vpn 1
  interface ge0/4
    ip address fd00:1234:/16
    no shutdown
    access-list acl-filter in

Release Information

Command introduced in Viptela Software Release 16.3.​

Additional Information

See the Configuring Localized Data Policy for IPv6 article for your software release.
access-list (for IPv4)

  • Was this article helpful?