This video we're going to discuss IP version 6 access control lists IPV six seals on the same way as
with IP version 4 IPV 6 access control lists allow you to permit or deny traffic in your network and
are a component of a layered security model.
What makes
in the real world you don't necessarily just want to use Access Control lists for your security.
You want to implement firewalls and other mechanisms such as intrusion prevention systems or IP addresses
but access lists are typically a first line of defense in security implementations.
Now IPV six access lists share many of the same characteristics of IP version 4.
So the knowledge that you've gained when working with IP version for access lists can also be applied
to IPV Sixaxis lists.
So they very similar but there are differences between the two that you need to be aware of in this
topology.
I've got three Cisco Ioway.
If the routers are running in Janissary the routers are configured per the topology diagram.
Notice as an example that Rodda one on the left is able to paying the loop back of three.
So we could ping the loop back directly like that or we could specify a source address being the loopback
of Rato one.
So one can ping the loop back of router three directly using the gigabit 00 interface or using the loopback
as the source of the traffic.
So in order to convert IPV 6 and there's a lot of options here but we'll specify access list and let's
call this access list 1 and press enter.
Question mark shows us that we can permit or deny traffic as an example.
So I'm going to permit a source network of 2001 Colan one colon colon slash 64 going anyway.
So in other words we going to permit all traffic on this network but that doesn't include the loopback
of Route One or two gigabit 0 0 and type IPV syncs.
And again we have a lot of options but in this case we're going to use a traffic filter of ACL one inbound
So previously we were able to paying the loopback of rodder three from the loop back of wrought a one
as well as using the gigabit 00 interface.
So pinging the loopback of Rodda 3 works but when we specify the loopback as the source the ping doesn't
work.
We've got a zero success rate where as this way we've got 100 percent success rate.
So the access list is definitely working.
So show IPV 6 access list shows us how access list we can see that there are 11 matches.
So ping that again we don't see any matches on this line.
The implicit deny is dropping the traffic if we're paying this way we see the additional matches because
the source traffic here is coming from 2001 cold on one.
And that's what we matching in the access list show IPV 6 interface gigabit 00 shows us information
such as the link local address global unicorn's to trace multicast groups that have been joined.
But notice here in bone access list is access list one ACL one so we can see the access list Beland
on that interface.
So there was a simple example of an IP version 6 access list permitting and denying traffic.
That's an example of a standard access list.
I hope you enjoyed this video if you did please like it please subscribe to my YouTube channel.
I wish you all the very best.