This video we're going to discuss IP version 6 access control lists IPV six seals on the same way as
with IP version 4 IPV 6 access control lists allow you to permit or deny traffic in your network and
are a component of a layered security model.
Access denied.
I it's create an extended access list.
So that's the access list we could apply it on gigabit to 0 0.
I'll say no and remove the access list to show IPV 6 interface gigabit 0 0 doesn't show any access lists
applied to the interface.
And again show run shows us that no access list is applied to the interface so we can paying
the loopback overall history from both the gigabit 00 interface and loopback interface of wrote a one.
So let's create another access list so IPV 6 access list.
And use a name such as ACL 2 would make more sense to use better names than that.
But that's OK for this lab.
Now I'm going to specify protocols permit TCAP any any permit or see MP three thousand and one color
in one colon colon slash 64 going any.
Interface gigabit is 0 0 IPV 6 and we have to use traffic full here ACL to inbound.
So again can a one paying the loop of router 3.
The answer is No.
When using the loopback as the source but it can ping the loopback of router 3 using the physical interface
can we telnet to the loopback of wrote 3.
The moment it says Connection refused Let's have a look to the Viti one line of auroras three.
We need to allow telnet on the line so line Vicci 1 0 for transport input all posts what Siska enable
password Cisco Let's try again.
We can telnet to the Rodda and what happens if we telnet using a source interface of loopback Zira.
Notice we are able to telnet to router 3 using both the loopback as well as the physical interface but
we can't ping from the loop back off road of one.
So just to reiterate
we have created an access list so show IPV six access list.
We've created the sexist list called access list too that's permitting any TZP traffic but it's only
permitting ICMP traffic from the network.
There is an implicit deny.
So when traffic is sent from this Lubeck address as the source it's dropped
because it's not permitted by the statement or by the statement.
But if we telnet to the loop back from the local loop back it works.
Notice when we do show access list we can see the matches have increased just pulled us to the right
and put in the password to that again notice matches have increased to enter matches have increased
and again matches have increased.
So telnet is permitted from the back of the router but ICMP isn't.
So again pings are failing.
And that's because of this access list is only permitting pain.
Why see MP traffic from this network.
We've also applied the access list inbound on gigabit 00 of Rodda to.
So that's an example of an extended IP version 6 access list.
A lot of the knowledge that you have with IP version 4 can be applied directly to IP version 6 access
lists.
I hope you enjoyed this video if you did please like it and please subscribe to my YouTube channel.
I wish you all the very best.