IPv6 ACLs

FastIron devices support IPv6 Access Control Lists (ACLs) for inbound and outbound traffic filtering.

The following points apply to named ACLs:

  • An ACL name cannot begin with numbers or underscore.
  • Double quotes usage is permitted solely for enclosing names that contain spaces. If the name contains spaces, put it within quotation marks.
  • All other special characters are allowed.

In this section:

  1. IPv6 ACL Traffic Filtering Criteria
  2. IPv6 Protocol Names and Numbers
  3. Default and Implicit IPv6 ACL Action
    There are default actions and implicit IPv6 ACL rules.
  4. IPv6 ACL Configuration Notes
    Consider the following configuration guidelines for IPv6 ACLs:
  5. Creating and Applying an IPv6 ACL
    Before an IPv6 ACL can be applied to an interface or a VLAN, it must first be created.
  6. Neighbor Discovery (ND)-Packet DoS Attacks
    Checking for neighbor discovery (ND) packets with a hop limit less than 255 helps protect against Denial of Service (DoS) attacks.
  7. Displaying IPv6 ACLs
Parent topic: ACLs