Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 115)

100

101

9-5

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 9 Configuring IPv6

Verifying the IPv6 Configuration

• src_port and dst_port—The source and destination port (or service) argument. Enter an operator (lt

for less than, gt for greater than, eq for equal to, neq for not equal to, or range for an inclusive

range) followed by a space and a port number (or two port numbers separated by a space for the

range keyword).

• icmp_type—Specifies the ICMP message type being filtered by the access rule. The value can be a

valid ICMP type number (from 0 to 155) or one of the ICMP type literals as shown in Appendix D,

“Addresses, Protocols, and Ports”. Alternatively, you can specify an ICMP object group using

object-group id.

Step 2 To apply the access list to an interface, enter the following command:

hostname(config)# access-group

access_list_name

{in | out} interface

if_name

See the “IPv6 Configuration Example” section on page 9-7 for an example IPv6 access list.

Verifying the IPv6 Configuration

This section describes how to verify your IPv6 configuration. You can use various show commands to

verify your IPv6 settings.

This section includes the following topics:

• The show ipv6 interface Command, page 9-5

• The show ipv6 route Command, page 9-6

The show ipv6 interface Command

To display the IPv6 interface settings, enter the following command:

hostname# show ipv6 interface [

if_name

]

Including the interface name, such as “outside”, displays the settings for the specified interface.

Excluding the name from the command displays the setting for all interfaces that have IPv6 enabled on

them. The output for the command shows the following:

• The name and status of the interface.

• The link-local and global unicast addresses.

• The multicast groups the interface belongs to.

• ICMP redirect and error message settings.

• Neighbor discovery settings.

The following is sample output from the show ipv6 interface command:

hostname# show ipv6 interface

ipv6interface is down, line protocol is down

IPv6 is enabled, link-local address is fe80::20d:88ff:feee:6a82 [TENTATIVE]

No global unicast address is configured

Joined group address(es):

ff02::1

ff02::1:ffee:6a82

ICMP error messages limited to one every 100 milliseconds

1 2 ... 110 111 112 113 114 115 116 117 118 119 120 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 115

Kommentare zu diesen Handbüchern