Re: Extended or Standard for VTY access

From: Cristian Matei <cmatei_at_ine.com>
Date: Mon, 1 Jun 2015 03:10:42 -0500

It should work and allow you access only on the 2001:123:A::1 IPv6 address of the router

Cristian.

Sent from my iPhone

> On Jun 1, 2015, at 04:49, Robert Hosford <rhosford_at_certifiednets.com> wrote:
>
> HI GS,
>
> Does anyone use extended ACLS for VTY access? I think it would be fairly common.
>
>
>
> ipv6 access-list vtyin
> !I know people use this
> permit ipv6 2001:A:B::/48 any
> permit ipv6 2001:C:D::/48 any
> !What about this?
> permit ipv6 2001:a:b::/48 host 2001:123:A::1
>
> deny ipv6 any any log
>
> Line vty 0 15
> ipv6 access-class vtyin in
>
> Thanks,
>
> Robert
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Jun 01 2015 - 03:10:42 ART

This archive was generated by hypermail 2.2.0 : Mon Jul 06 2015 - 15:05:53 ART