1
00:00:00,480 --> 00:00:07,800
In this video, we're going to discuss IP version six access control lists or IPv6 ACLs on the same

2
00:00:07,800 --> 00:00:14,730
way as with IP version four IPV six access control lists allow you to permit or deny traffic in your

3
00:00:14,730 --> 00:00:19,560
network and are a component of a layered security model.

4
00:00:19,950 --> 00:00:25,950
In the real world, you don't necessarily just want to use access control lists for your security.

5
00:00:25,980 --> 00:00:34,140
You want to implement firewalls and other mechanisms such as protocol analyses, such as intrusion prevention

6
00:00:34,140 --> 00:00:35,940
systems or IPS.

7
00:00:35,940 --> 00:00:41,880
But access lists are typically a first line of defense in security implementations.

8
00:00:42,420 --> 00:00:47,490
Now, IPV six access lists share many of the same characteristics of IP version four.

9
00:00:47,520 --> 00:00:53,670
So the knowledge that you've gained when working with IP version four access lists can also be applied

10
00:00:53,670 --> 00:00:55,890
to IPV six access lists.

11
00:00:55,890 --> 00:00:57,330
So they very similar.

12
00:00:57,330 --> 00:01:02,670
But there are differences between the two that you need to be aware of both of them.

13
00:01:02,670 --> 00:01:07,830
As an example, filter on IP addresses of IP packets and upper layer protocols.

14
00:01:08,190 --> 00:01:14,130
So as an example, you can filter on an IP version for address using an IP version for access list.

15
00:01:14,460 --> 00:01:22,950
IPV six access lists can also filter on a source IPV six IP address or IPV six destination address,

16
00:01:23,040 --> 00:01:30,540
but IPV six access lists can also filter on ICMP or TCP IP or UDP.

17
00:01:31,140 --> 00:01:38,790
You could also use IPV six access lists to implement quality of service policies in your network or

18
00:01:38,790 --> 00:01:40,800
to filter writing advertisements.

19
00:01:41,340 --> 00:01:50,130
However, the CCNA course focuses on the use of IPV six to filter IPV six packets arriving or being

20
00:01:50,130 --> 00:01:55,080
received or being transmitted from router interfaces.