IP Addresses and Services Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

PDF

IP Addresses and Services Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

IPv4 and IPv6 ACL in class map

Updated: August 12, 2026

Want to summarize with AI?

Log in

This topic describes the enhanced Quality of Service (QoS) support for using IPv4 and IPv6 access control lists (ACLs) in class maps on the Cisco 8000 Series Router.

Quality of Service (QoS) features are enhanced to support these:

  • Support on L3 interface, sub-interface, bundle interface, and bundle sub-interface

  • Support for only ingress direction

  • IPv6-supported match fields:

    • Destination Port

    • Fragment bit

    • ICMP type and code

    • IGMP type and code

    • IPv6 Destination Address

    • IPv6 Source Address

    • IPv6 Protocol

    • Precedence/DSCP

    • Source Port

Configure IPv6 ACL QoS

Use this procedure to configure IPv6 ACL QoS by matching packets against an IPv6 ACL, an IPv4 ACL, and a CoS value in a class-map, and then applying a QoS action through a policy-map.

Procedure

  1. Create an IPv6 access list aclv6 and add ACEs to permit the required IPv6 traffic.

    Example:

    ipv6 access-list aclv6
10 permit ipv6 1111:6666::2/64 1111:7777::2/64 authen
30 permit tcp host 1111:4444::2 eq 100 host 1111:5555::2
!

  2. Create an IPv4 access list aclv4 and add an ACE to permit the required IPv4 traffic.

    Example:

    ipv4 access-list aclv4
10 permit ipv4 host 10.6.10.2 host 10.7.10.2
!

  3. Create a class-map c.aclv6 using the match-any keyword to match packets against the IPv6 ACL, the IPv4 ACL, and a CoS value.

    Example:

    class-map match-any c.aclv6
match access-group ipv6 aclv6
match access-group ipv4 aclv4
match cos 1
end-class-map
!

  4. Create a policy-map p.aclv6 that sets the IP precedence for traffic matching the class-map, and include the default class.

    Example:

    policy-map p.aclv6
class c.aclv6
  set precedence 3
!
class class-default
!
end-policy-map
!

    You have successfully configured IPv6 ACL QoS with an IPv4 ACL and CoS match fields.