How do I configure an IPv6 Access Control List (ACL) using CLI commands on my managed switch?

Create the access control list with the name ipv6-acl.

(Netgear Switch) (Config)# ipv6 access-list ipv6-acl

Define three rules to:
- Permit any IPv6 traffic to the destination network 2001:DB8:C0AB:AC14::/64 from the source network 2001:DB8:C0AB:AC11::/64.
- Permit IPv6 Telnet traffic to the destination network 2001:DB8:C0AB:AC13::/64 from the source network 2001:DB8:C0AB:AC11::/64.
- Permit IPv6 HTTP traffic to any destination network from the source network 2001:DB8:C0AB:AC11::/64.
(Netgear Switch) (Config-ipv6-acl)# permit ipv6 2001:DB8:C0AB:AC11::/64 2001:DB8:C0AB:AC14::/64 (Netgear Switch) (Config-ipv6-acl)# permit tcp 2001:DB8:C0AB:AC11::/64 2001:DB8:C0AB:AC13::/64 eq telnet (Netgear Switch) (Config-ipv6-acl)# permit tcp 2001:DB8:C0AB:AC11::/64 any eq http
Apply the rules to inbound traffic on port 1/0/1. Only traffic matching the criteria will be accepted.

(Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)# ipv6 traffic-filter ipv6-acl in (Netgear Switch) (Interface 1/0/1)# exit (Netgear Switch) (Config)#exit
View the configuration.

For more information, see the following support articles:

This article applies to the following managed switches and their respective firmware:

Last Updated:07/07/2025 | Article ID: 21730