Stop IPV6

[Patrick McHenry]

IPv6 has become a problem in our network. When a device that connects without IPv6 turned off (Apples or hp printers in particular) the VLAN gets pounded with IPv6 traffic and brings the VLAN to a stop. So, I thought that I might try to stop all v6 traffic on our 6509 core switches. I was wonder if the access-list below should work? And should it work on a 3750 with the ipservices image?

Also, is there another solution to stopping this?

Thanks, Pat.

access-list 101 permit ip any any
mac access-list extended IPV6
permit any any 0x86dd

vlan access-map BLOCK_IPV6 10
match mac-address IPV6
action drop
match ip address 101 20
action forward

vlan filter BLOCK_IPV6 vlan-list xx

Also, when I put this config on a 3750 in lab, I noticed that it asked me for a mask. What values should I configure?

[paolo bevilacqua · Accepted solution]

the VLAN gets pounded with IPv6 traffic and brings the VLAN to a stop

That is not normal. you should find what exactly is happenign, as a cisco switch  is supposed to handle whatever traffic type and volume without a problem.

[Patrick McHenry]

How can I find out what the problem is? And where should I begin to look?

[Patrick McHenry]

Also, if a Windows PC has IPV6 still on the network is not affected.