RE: Unable to create IPv6 ACL on IOS 12.4(24)T2

From: Ján Hrabèák <hrabcak_at_antik.sk>
Date: Tue, 23 Feb 2010 11:18:09 +0100

You are trying under global config mode. Ipv6 ACL should by aplied on (sub)interface. Try it under some ipv6 enabled interface.

Example:

Ipv6ROUTER(config)#do sh run int vl130
Building configuration...

Current configuration : 82 bytes
!
interface Vlan130
 no ip address
 ipv6 enable
 ipv6 traffic-filter TEST in
end

JH

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Andy Reid
Sent: Tuesday, February 23, 2010 11:03 AM
To: Jan Hrabhak
Cc: robclav_at_gmail.com; garry baker; Cisco Certification
Subject: Re: Unable to create IPv6 ACL on IOS 12.4(24)T2

Hi JH,

Unfortunately I do not have that configuration option on any of my routers:
Rack1R4(config)#ipv6 ?
  access-list Configure access lists
  cef Cisco Express Forwarding for IPv6
  cga Configure IPv6 certified generated address
  dhcp Configure IPv6 DHCP
  general-prefix Configure a general IPv6 prefix
  hop-limit Configure hop count limit
  host Configure static hostnames
  icmp Configure ICMP parameters
  inspect Context-based Access Control Engine
  local Specify local options
  mfib Multicast Forwarding
  mld Global mld commands
  mobile Mobile IPv6
  multicast IPv6 multicast
  multicast-routing Enable IPv6 multicast
  nat NAT-PT Configuration commands
  nd Configure IPv6 ND
  neighbor Neighbor
  ospf OSPF
  pim Configure Protocol Independent Multicast
  port-map Port to application mapping (PAM) configuration
commands
  prefix-list Build a prefix list
  route Configure static routes
  router Enable an IPV6 routing process
  source-route Process packets with source routing header options
  unicast-routing Enable unicast routing

regards Andy

Jan Hrabhak wrote:
> Hi,
>
> I think the correct command for aplying ipv6 access-list to router
> running 12.4(24) and maybe lower versions is
>
> Ipv6 traffic-filter:
>
> Ipv6-ROUTER(config-if)#ipv6 traffic-filter ?
> WORD Access-list name
>
> Regards,
> JH
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf
> Of Andy Reid
> Sent: Tuesday, February 23, 2010 10:42 AM
> To: robclav_at_gmail.com
> Cc: garry baker; Cisco Certification
> Subject: Re: Unable to create IPv6 ACL on IOS 12.4(24)T2
>
> Hi.
>
> Yes, each router has the following configuration:
>
> ipv6 unicast-routing
> ipv6 cef
> ipv6 multicast-routing
>
> regards Andy
>
> robclav_at_gmail.com wrote:
>
>> Guys, did you enabled ipv6 stack?
>> Hth
>> Robclav
>>
>>
>> BlackBerry de movistar, allm donde estis esta tu oficin@
>>
>> -----Original Message-----
>> From: garry baker <baker.garry_at_gmail.com>
>> Date: Tue, 23 Feb 2010 08:59:54
>> To: <ccie_at_reid.it>
>> Cc: <ccielab_at_groupstudy.com><ccielab_at_groupstudy.com>
>> Subject: Re: Unable to create IPv6 ACL on IOS 12.4(24)T2
>>
>> no problem, i see that it works on my older version of code on 3800:
>>
>> 3845(config)#ipv6 access-list ?
>> WORD User selected string identifying this access list
>> log-update Control access list log updates
>>
>> Cisco IOS Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version
>> 12.4(9)T7, RELEASE SOFTWARE (fc3)
>>
>>
>> On Tue, Feb 23, 2010 at 8:51 AM, Andy Reid <ccie_at_reid.it> wrote:
>>
>>
>>
>>> Thanks for checking so fast on other platforms Garry.
>>>
>>> I will load an older version of IOS onto the 2801 and see what happens.
>>>
>>> regards Andy
>>>
>>> garry baker wrote:
>>>
>>>
>>>
>>>> i see the same thing on 7200 Cisco IOS Software, 7200 Software
>>>> (C7200-ADVIPSERVICESK9-M), Version 12.4(24)T2, RELEASE SOFTWARE
>>>> (fc2)
>>>> Router(config)#ipv6 access-list ?
>>>> log-update Control access list log updates and also Cisco IOS
>>>> Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version
>>>> 12.4(24)T2, RELEASE SOFTWARE (fc2)
>>>> Router(config)#ipv6 access-list ?
>>>> log-update Control access list log updates
>>>>
>>>> On Tue, Feb 23, 2010 at 8:36 AM, Andy Reid <ccie_at_reid.it <mailto:
>>>> ccie_at_reid.it>> wrote:
>>>>
>>>> Hi all,
>>>>
>>>> I am experiencing a problem creating an IPv6 ACL - there is no
>>>> option to give the ACL a name as shown below:
>>>>
>>>> Rack1R4(config)#ipv6 access-list ?
>>>> log-update Control access list log updates
>>>>
>>>> The problem is the same on 2 x 1841's and 2 x 2801's. All are
>>>> running Advanced Enterprise Services Version 12.4(24)T2.
>>>> I have looked for related bugs but could not find one that matched
>>>> for this version of code (lots of IPv6 bugs though).
>>>>
>>>> Has anyone come across this problem? and what version of code do
>>>> you run that allows this ACL to be created.
>>>>
>>>> Many thanks, Andy
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>> <http://www.ccie.net/>
>>>>
>>>>
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _____________________________________________________________________
>> _ _ Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Feb 23 2010 - 11:18:09 ART

This archive was generated by hypermail 2.2.0 : Mon Mar 01 2010 - 06:28:36 ART