In this video, we're going to discuss IP version six access control lists or IPV six ACLs on the same
way as with IP version four, IPV six access control lists allow you to permit or deny traffic in your
network and are a component of a layered security model.
Warning security breach scanning.
In the real world, you don't necessarily just want to use access control lists for your security.
You want to implement firewalls and other mechanisms such as intrusion prevention systems or IPS.
But access lists are typically a first line of defense in security implementations.
Now, IPV six access lists share many of the same characteristics of IP version four.
So the knowledge that you've gained when working with IP version four access lists can also be applied
to IPV six access lists.
So they very similar.
But there are differences between the two that you need to be aware of.
In this topology.
I've got three Cisco, iOS, AVI routers running in genius three.
The routers are configured per the topology diagram.
Notice as an example that router one on the left is able to ping the loopback of router three.
So we could ping the loop back directly like that.
Or we could specify a source address being the loopback of router one, so rather one can ping the loopback
of router three directly using the gigabit or zero zero interface or using the loopback as the source
of the traffic.
So in order to conf t ipv six and there's a lot of options here, but we'll specify access list.
And let's call this access list one.
And press enter question mark shows us that we can permit or deny traffic as an example.
So I'm going to permit a source network of 2001.
Colon.
One colon.
Pollen slash 64 going anywhere.
So in other words, we're going to permit all traffic on this network, but that doesn't include the
loopback of rather one.
I'll go into gigabit zero zero and type IPV six and again, we have a lot of options, but in this case,
we're going to use a traffic filter of ACL one inbound.
So previously we were able to ping the loopback of router three from the loop back of rata one as well
as using the gigabit zero zero interface.
So pinging the loop back of router three works.
But when we specify the loop back as the source, the ping doesn't work.
We've got a zero success rate, whereas this way we've got 100% success rate.
So the access list is definitely working.
So show IPV six access list shows us our access list.
We can see that there are 11 matches.
So ping that again.
We don't see any matches on this line.
The implicit deny is dropping the traffic.
If we ping this way, we see the additional matches because the source traffic here is coming from 2001
colon one.
And that's what we matching in this access list.
Show IPV six interface gigabit zero zero.
Shows us information such as the link, local address, global unicast address.
Multicast groups that have been joined.
But notice sheer inbound access list is access list one or ACL one, so we can see the access list bound
on that interface.
So there was a simple example of an IP version six access list, permitting and denying traffic.
That's an example of a standard access list.
I hope you enjoyed this video.
If you did, please like it and please subscribe to my YouTube channel.
I wish you all the very best.