In this video, we're going to discuss IP version six access control lists or IPV six ACLs on the same
way as with IP version four, IPV six access control lists allow you to permit or deny traffic in your
network and are a component of a layered security model.
Access denied.
Now let's create an extended access list.
So that's the access list we've got applied on gigabit or zero zero.
So I'll say no and remove the access list.
So show IPV six interface gigabit is zero zero.
It doesn't show any access lists applied to the interface.
And again, show run shows us that no access list is applied to the interface.
So we can ping.
The loopback of router three from both the gigabit zero zero interface and loopback interface of right
of one.
So let's create another access list.
So IPV six access list and I'll use a name such as ACL two would make more sense to use better names
than that.
But that's okay for this lab.
Now I'm going to specify a protocol.
So permit TCP any any.
Permit ICMP 2001 colon one colon colon slash 64.
Going anywhere interface gigabit zero zero IPV six.
And we have to use traffic full to here.
A SQL to inbound.
So again can rather one ping the loopback of router three.
The answer is no when using the loopback as the source, but it can ping the loopback of router three
using the physical interface.
Can we telnet to the loopback of right of three?
At the moment.
It says Connection refused.
Let's have a look to the v t line of right of three.
We need to allow telnet on the line.
So line v t y is zero for transport input all password Cisco enable password Cisco to try again.
We can telnet to the router.
And what happens if we telnet using a source interface of loopback zero.
Notice we are able to telnet to router three using both the loopback as well as the physical interface,
but we can't ping from the loopback of rata one.
So just to reiterate.
We have created an access list.
So show IPV six access list we've created to the sexist list called access list too.
That's permitting any TCP traffic, but it's only permitting ICMP traffic from.
This network.
There's an implicit deny.
So when traffic is sent from this loopback address as the source, it's dropped.
Because it's not permitted by the statement or by this statement.
But if we telnet to the loopback from the local loopback.
It works.
I notice when we do show access list, we can see the matches have increased.
And I'll just pulled us to the right and put in the password.
Do that again.
Notice matches have increased.
Hit enter.
Matches have increased.
Enter again.
Matches have increased.
So Telnet is permitted from the loopback of this router, but ICMP isn't.
So again, pings are failing.
And that's because this access list is only permitting ping or ICMP traffic from this network.
We've also applied the access list inbound on gigabit zero zero of router to.
So that's an example of an extended IP version six axis list.
A lot of the knowledge that you have with IP version four can be applied directly to IP version six
access lists.
I hope you enjoyed this video.
If you did, please like it and please subscribe to my YouTube channel.
I wish you all the very best.