Quantcast
Channel: IEOC - INE's Online Community
Viewing all articles
Browse latest Browse all 10744

Why IPv6 ACL does not work outbound?

$
0
0

When I apply this IPv6 ACL outbound, I am able to ping the destination address but if I apply it inbound it works. Do IPv6 ACLs only work inbound?

ACL Applied Outbound

R4(config-if)#do sh ipv6 access-l
IPv6 access list FromV38
    deny ipv6 FEC0:CC1E:1:38::/64 FEC0:CC1E:1:4::/64 sequence 10
    permit ipv6 any any sequence 20
R4(config-if)#do sh run int f0/0
Building configuration...

Current configuration : 293 bytes
!
interface FastEthernet0/0
 ip address 192.10.1.4 255.255.255.0
 ip rip authentication mode md5
 ip rip authentication key-chain RIP
 ip summary-address rip 163.1.0.0 255.255.192.0
 ip summary-address rip 150.1.0.0 255.255.240.0
 duplex auto
 speed auto
 ipv6 traffic-filter FromV38 out
end

R3(config-if)#do ping fec0:cc1e:1:4::4 sou f0/0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0:CC1E:1:4::4, timeout is 2 seconds:
Packet sent with a source address of FEC0:CC1E:1:38::3
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 84/91/104 ms

ACL Applied Inbound


R4(config-if)#int s0/1/0
R4(config-if)#ipv6 traf
R4(config-if)#ipv6 traffic-filter FromV38 i
R4(config-if)#int s0/1/1
R4(config-if)#ipv6 traffic-filter FromV38 i
R4(config-if)#do sh ipv6 access-l

R3(config-if)#do ping fec0:cc1e:1:4::4 sou f0/0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FEC0:CC1E:1:4::4, timeout is 2 seconds:
Packet sent with a source address of FEC0:CC1E:1:38::3
AAAAA
Success rate is 0 percent (0/5)


Viewing all articles
Browse latest Browse all 10744

Trending Articles