Block IPv6 ICMP between networks with ACL

[Djibo Karimou]

Let's say I have 2 networks : (2001:DB8:DC:20::1/64 and 2001:DB8:DC:30::1/64) and need to block the first one from being able to ping the 2nd one through an ACL, how would I proceed?

[tavkaur · Accepted solution]

Hi Djibo,

In case you are looking to block the traffic from these hosts on the ASA you need to configure an ACL and add it to an interface via access group

ipv6 access-list <name> deny icmp host 2001:DB8:DC:20::1 host 2001:DB8:DC:30::1

access-group <name> interface <name_of_ingress_int>