Cisco Systems Configuring IPv6 Access Lists, RADIUS Configuration, IPv6 WDS Support

4-35
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-29225-01
Chapter4 Configuring the Access Point for the First Time
Configuring IPv6
Configuring IPv6 Access Lists
IPv6 access lists (ACL) are used to filter traffic and restrict access to the router. IPv6 prefix lists are used
to filter routing protocol updates.
Beginning in privileged EXEC mode, use these commands to to configure the access list globally and
assign it to interface:
– ap(config)# ipv6 access-list acl-name
– ap(config-ipv6-acl)# deny/permit protocol
Beginning in privileged EXEC mode, use this command to deny or permit access:
ap(config)# deny/permit ?
This filter is based on the IPv6 address irrespective of the higher layer protocols.
Beginning in privileged EXEC mode, use these commands to assign the globally configured ACL to the
outbound and inbound traffic on layer3 interface:
– ap(config)# interface interface
– ap(config)# ipv6 traffic-filter acl-name in/out
RADIUS Configuration
RADIUS iserver is a background process serving three functions:
•authenticate users before granting them access to the network
•authorize users for certain network services
•account for the usage of certain networkservices
Beginning in privileged EXEC mode, use these commands to configure the radius server in the Access
Point:
– ap(config)# radius server server name
– ap(config-radius-server)# address ipv6 ipv6 address
IPv6 WDS Support
The WDS and the infrastructure access points communicate over a multicast protocol called WLAN
Context Control Protocol (WLCCP).
Cisco IOS Release 15.2(4)JA supports communication between the WDS and Access Point through IPv6
addresses. The WDS works on a Dual Stack; that is, it accepts both IPv4 and IPv6 registeration.
ipv6 nd cache expire expire-time-in-seconds Configures the length of time before the IPv6 neighbor discovery cache
entry expires.
ipv6 nd cache interface-limit size [log rate] Configures a neighbor discovery cache limit on a specified interface.
ipv6 nd na glean Configures neighbor discovery to glean an entry from an unsolicited
neighbor advertisement.
Command Purpose