IPv6 ACL operation
IPv6 traffic inbound or outbound on a port.
IPv6 traffic inbound or outbound on a VLAN.
Routed IPv6 traffic entering or leaving the switch on a VLAN. (ACLs do not screen traffic at the internal point where traffic moves between VLANs or subnets within the switch.)
Interface |
ACL application |
Application point |
Filter action |
---|---|---|---|
Port |
Static port ACL (switch configured) |
Inbound on the switch port |
Inbound IPv6 traffic |
RADIUS-assigned ACLThis chapter describes ACLs statically configured on the switch. For information on RADIUS-assigned ACLs, see the Aruba-OS Switch Access Security Guide for your switch. |
Inbound on the switch port used by authenticated client |
Inbound IPv6 traffic from the authenticated client |
|
VLAN |
VACL |
Entering the switch on the VLAN |
Inbound IPv6 traffic |
IP routing interface (VLAN or tunnel) |
RACLSupports one inbound and/or one outbound RACL. When both are used, one RACL can be assigned to filter both inbound and outbound, or different RACLs can be assigned to filter inbound and outbound. |
Entering the switch on the VLAN |
Routed IPv6 traffic entering the switch and IPv6 traffic with a destination on the switch itself |
Exiting from the switch on the VLAN |
Routed IPv6 traffic exiting from the switch |
After you assign an ACL to an interface, the default action on the interface is to implicitly deny any IPv6 traffic that is not permitted by the ACL. (This applies only in the direction of traffic flow filtered by the ACL.)