[c-nsp] Blocking IPV6 with VACL ???

Phil Mayers p.mayers at imperial.ac.uk
Thu Oct 29 11:40:08 EDT 2009


Jeff Fitzwater wrote:
> My goal is to block IPV4 MDNS (This works) and now block all IPV6 from  
> crossing between vlan ports on a 6500 running sup 720-CXL  SXI.    We  
> are not routing IPV6 on this 6500.
> 
> Does anybody use MAC ACCESS-LIST within an VACL?

You need "mac packet-classify" or something similar on the SVI i.e.

int Vlan10
  mac packet-classify

IIRC


More information about the cisco-nsp mailing list