In IPv4 for access-list, we have implicit deny at the end
In Ipv6 ACL, there is implicit permit for 2 messages
Neighbor solicitation
Neighbor Advertisement
After that, we have implied deny for everything
To explicitly allow NS and NA in case if any router doesn’t support implicit permit
ipv6 access-list FILTERv6
permit icmp any any nd-na
permit icmp any any nd-ns
ipv6 deny any any
No comments:
Post a Comment