Now IPV six access lists are similar to IP version for access lists.
Here are some examples.
Both can match on the source IP address or destination IP address in the protocol header.
IPV six ACLs on IPV six IP addresses.
IP version for access lists on IP version four addresses.
Both can match individual host addresses or subnets or prefixes.
In other words, you can match an individual host in IPV six and permit or deny that host, or you could
permit or deny a IP version six subnet.
Both IP version four and IP version six are applied in an inbound or outbound direction on a layer three
interface, such as a routers interface or switch to virtual interface on a switch.
Both IP version four and IP version six can match on transport layer protocol information such as TCP
IP or UDP source port number or destination port number.
Both can also match ICMP message types and codes.
Be careful.
There are differences between the types and codes in IP version six versus IP version four.
Both have an implicit deny statement at the end that matches all remaining packets.
So a deny any any to the end of both IP version four and IP version six.
Both also support time based access lists.
Now, there are some differences between IP version four and IP version six.
IP version four access lists only match IP version four packets and not IP version six and also only
match fields in IP version four headers.
We have this concept of ships in the night.
IP version six is totally independent and separate to IP version four.
So what IP version four is doing has nothing to do with IP version six.
And what IP version six is doing has nothing to do with IP version four.
IP version six could be permitted, but IP version four could be denied as an example, IP version six
access lists match on IP version six addresses only.
So it matches on source destination IP version six address as well as other fields unique to an IP version
six header.
Here are some examples of the differences between IP version four and IP version six.
IP version for access lists once again, only match IP version for packets.
IP version six Access Lists Only Match IP version six packets IP version four Access lists are identified
by a name or a number, but IP version six access lists only use names.
IP version for access lists identify whether an access list is extended or standard by using either
numbers such as 1 to 99 being standard access lists or 100 to 199 being extended access lists.
Or they use keywords such as standard or extended IP version six access lists use a similar convention
of standard and extended access lists, but they are only differentiated by the use of a word rather
than a number because numbers are not used in IP version six.
IP version for access lists can match on specific values unique to IP version for such as precedence
type of service, title and fragments.
Whereas IP version six access lists match on specific values unique to an IP version six header such
as a flow label or a DHCP value as well as extensions and option header values.
IP Version six Access lists have some implicit permit statements at the end of each access list just
above the implicit deny all at the end of the access list.
Whereas IP version for access lists do not have implicit permit statements.