Deny IPv6 in 3750

Infuscomus · ‎05-08-2015

i want to completely deny IPv6 traffic with a 3750 switch.

Is this possible ?

The switch has VLANs configured with IPV4 ACLs.

Can IPv4 ALCs co-exists with some IPv6 ALCs ?

Is there a way to allow IPv4 but not IPv6 ?

Mark Malone · ‎05-08-2015

Yes you can deny all ipv6 traffic and yes ipv4 acls can exist no problem with ipv6 they are applied differently to the interface

This will show you how to apply ipv6 acls , both ip access-group and traffic-filter can be applied to the same physical/;logical interface

http://www.cisco.com/c/en/us/support/docs/ip/ip-version-6/113126-ipv6-acl-00.html

Infuscomus · ‎05-10-2015

Seems to work on a router, but not in a Catalyst 3750. Is IPv6 supported on newer IOSes for the Catalyst 3750 ?

vivek srivastava · ‎05-11-2015

It should work on 3750 as well. What the IOS version you are using ?

Infuscomus · ‎05-11-2015

I'm currently using 12.2(53)SE2 and it does not seem to support IPv6.

Mark Malone · ‎05-11-2015

Hvae you tried to turn ipv6 on first with "ipv6 unicast-routing "

vivek srivastava · ‎05-11-2015

Since its a switch, first you will need to change the SDM template to dual-ipv4-and-ipv6 with the sdm prefer dual-ipv4-and-ipv6 global configuration command. Please note that you will need to reload the switch in order for this change to take effect.

Then you will need to enable IPv6 Routing with the ipv6 unicast-routing global configuration command.

Infuscomus · ‎05-11-2015

I will test this. Thank you.

Infuscomus · ‎05-11-2015

Anything that starts with IPv6 is unrecognized command.