06-20-2019 12:26 AM
Ipv6 access-list net
Permit ipv6 2001:DB8:AD59:BA21::/64 2001:DB8:C0AB:BA14::/64
Permit tcp 2001:DB8:AD59:BA21::/64 2001:DB8:C0AB:BA13::/64 eq telnet
Permit tcp 2001:DB8AD59:BA21::64 any eq http
Permit ipv6 2001:DB8:AD59::/48 any
deny ipv6 any any log
Which statement is true and why?
Solved! Go to Solution.
06-20-2019 01:00 AM
06-20-2019 12:45 AM
Hi there,
Statement 3 is the only correct one. Although every ACL ends with an implicit deny, the final ACE is an explicit deny which also stipulates that every denied packet is also logged.
cheers,
Seb.
06-20-2019 01:00 AM
07-23-2019 07:47 AM
Sorry but answer 1 why it is not correct?
IP address | 2001:db8:ad59:ba21::/64 |
type | GLOBAL-UNICAST (reserved for documentation purpose (2001:db8::/32) [rfc3849][IANA]) |
network | 2001:db8:ad59:ba21:: |
Prefix length | 64 |
network range | 2001:0db8:ad59:ba21:0000:0000:0000:0000- 2001:0db8:ad59:ba21:ffff:ffff:ffff:ffff |
total IP addresses | 18446744073709551616 |
07-24-2019 12:23 AM
Hi Giuseppe,
The question mentioned a source IP of 2001:DB80:AD59:BA21:101:CAB:64:38 /64 , which gives a subnet of:
2001:DB80:AD59:BA21::/64
This is different to the subnet you mention due to the position of the zero in the second hextet:
The question: | Your example and the also the ACL |
:DB80: | :0DB8: |
These are totally different addresses.
cheers,
Seb.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide