HP Cisco MDS 9140 Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2( - Page 379

Chapter 6 Security Commands ipv6 port traffic-filter Send comments to [email protected] ipv6 port traffic-filter To apply an IPv6 access control list (ACL) to an interface as a port ACL, use the ipv6 port traffic-filter command. To remove an IPv6 ACL from an interface, use the no form of this command. ipv6 port traffic-filter access-list-name in no ipv6 port traffic-filter access-list-name in Syntax Description access-list-name in Name of the IPv6 ACL, which can be up to 64 alphanumeric, case-sensitive characters. Specifies that the device applies the ACL to inbound traffic. Command Default None Command Modes Interface configuration mode Command History Release 4.0(1a)N1(1) Modification This command was introduced. Usage Guidelines By default, no IPv6 ACLs are applied to an interface. You can use the ipv6 port traffic-filter command to apply an IPv6 ACL as a port ACL to the following interface types: • Ethernet interfaces • EtherChannel interfaces You can also use the ipv6 port traffic-filter command to apply an IPv6 ACL as a port ACL to the following interface types: • VLAN interfaces Note You must enable VLAN interfaces globally before you can configure a VLAN interface. For more information, see the feature interface-vlan command. The switch applies port ACLs to inbound traffic only. The switch checks inbound packets against the rules in the ACL. If the first matching rule permits the packet, the switch continues to process the packet. If the first matching rule denies the packet, the switch drops the packet and returns an ICMP host-unreachable message. If you delete the specified ACL from the device without removing the ACL from an interface, the deleted ACL does not affect traffic on the interface. OL-16599-01 Cisco Nexus 5000 Series Command Reference 6-45