Unsolved
This post is more than 5 years old
2 Posts
0
21760
October 30th, 2011 18:00
IPv6: management access-list does not apply?!
Hello all,
I am setting up a Powerconnect 6248 switch with IPv6. I noticed that the management access-list does not seem to apply to IPv6! The ACL seems to work just fine against IPv4 clients, but when I use the IPv6 address on the switch, it just bypasses them. Is this a bug? Is there a work around?
I thought I would work around the issue by creating an IPv6 ACL and applying the filter to the VLAN, but again I ran into a bit of a roadblock. If I have a IPv4 access group defined, the switch will not allow me to add an IPv6 traffic filter. It is either one or the other.
Any ideas on how to work around these issues?
0 events found
No Events found!
pemontto
3 Posts
0
December 6th, 2012 12:00
Currently experiencing the same issue on a PowerConnect 7024. There doesn't seem to be a viable solution to restrict management access to the device's IPv6 addresses without creating an IPv6 ACL including all possible IPv6 address entry points and applying that to all interfaces, an un-wieldy and sub-optimal solution.
pemontto
3 Posts
0
December 7th, 2012 08:00
Thanks for the response, that was my first avenue but unfortunately there's no IPv6 support under management ACLs. Also supplying an IPv6 address with ip-source is not valid. This seems to be a pretty glaring oversight for a device that supports IPv6 management.
Console(config-macl)#permit ?
Press enter to execute the command.
Gigabitethernet Enter a GigabitEthernet port.
Tengigabitethernet Enter a TenGigabitEthernet port.
mask Specify the source IP address network mask or the
number of bits that comprise the source IP address
prefix. The prefix length must be preceded by a
forward slash (/).
port-channel Specify the port-channel number.
priority To set the priority for rule.
service Define service type condition.
vlan Specify the VLAN number.
Console(config-macl)#permit ip-source ?
Specify the source IP address.
Console(config-macl)#permit ip-source 2001:DB8::/32
Error:Invalid IP address.
pemontto
3 Posts
0
December 11th, 2012 07:00
Thanks again, I've tried including the vlan and priority and a number of variations but all return the "Error:Invalid IP address." message when using IPv6 addresses.
jeffgus
2 Posts
0
December 11th, 2012 10:00
Still not working? It has been over a years since I initially posted the issue. When will there be a firmware update that fixes the problem?