Enabling IPv6 ACL rules for mirroring

ACL-based inbound mirroring applies to extended-ACL rules that include the mirror keyword.

  1. Enter configure terminal to access global configuration mode.
    device# configure terminal
    
  2. Enter the ipv6 access-list extended command to create or access the ACL.
    device(config)# ipv6 access-list extended extd_v6_01
    
  3. In each rule for which you need to enable mirroring, include the mirror keyword.
    device(conf-ipv6acl-ext)# seq 5 permit tcp 1000:1::/64 2000:1::/64 mirror
    device(conf-ipacl-ext)# seq 15 deny udp 1000:1::/64 2000:1::/64 mirror
    
  4. Apply the ACL that you created to the appropriate physical interface, specifying the in keyword.
    device(config)# interface ethernet 3/1
    device(conf-if-eth-3/1)# ipv6 access-group extd_v6_01 in