Managing the FHS IPv6 access list

About this task

You can create an FHS IPv6 access list or add IPv6 prefixes to an existing IPv6 access list.

Procedure

  1. Enter Global Configuration mode:

    enable

    configure terminal

  2. Create an FHS IPv6 access list or add IPv6 prefixes to an existing IPv6 access list:

    ipv6 fhs ipv6–access-list [WORD<1-64>] [WORD<0-46>] [ge<0-128>] [le <0-128>] [mode <allow | deny>]

  3. Delete an FHS IPv6 access list or delete a particular IPv6 prefix from the IPv6 access list:

    no ipv6 fhs ipv6–access-list [WORD<1-64>] [WORD<0-46>]

  4. Set the ge/le values and mode of the FHS IPv6 access list to default value:

    default ipv6 fhs ipv6–access-list [WORD<1-64>] [WORD<0-46>] [ge|le|mode]

Example

Switch>enable
Switch#config t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#ipv6 fhs ipv6–access-list ipv6_acl_1 fe80::221:2fff:fe31:5376/64
Switch(config)#

Variable Definitions

The following table defines parameters for the ipv6 fhs ipv6-access-list command.

Variable

Description

WORD<1-64>

Specifies the IPv6 access list name.

WORD<0-46>

Specifies the IPv6 address or the prefix length to be added to the IPv6 access list.

ge <0 -128>

Specifies the minimum value of prefix length advertised in prefix information of RA or DHCPv6 packets.

By default, the value is equal to the configured prefix length.

Note:

If you manually configure the value, ensure that it is greater than the configured prefix length. Also ensure, the ge value is always less than the le value.

le <0 -128>

Specifies the maximum value of prefix length advertised in prefix information of RA or DHCPv6 packets.

By default, the value is equal to the configured prefix length.

Note:

If you manually configure the value, ensure that it is greater than the configured prefix length.

mode <allow | deny>

Specifies the access mode.

By default, the value is allow.