After an IPv6 ACL is configured, it is linked to an interface using the ipv6 traffic-filter command:

Router(config-if)# ipv6 traffic-filter access-list-name { in | out }

The figure shows the NO-R3-LAN-ACCESS ACL configured previously and the commands used to apply the IPv6 ACL inbound to the S0/0/0 interface. Applying the ACL to the inbound S0/0/0 interface will deny packets from 2001:DB8:CAFE:30::/64 to both of the LANs on R1.

To remove an ACL from an interface, first enter the no ipv6 traffic-filter command on the interface, and then enter the global no ipv6 access-list command to remove the access list.

Note: IPv4 and IPv6 both use the ip access-class command to apply an access list to VTY ports.