S e n d c o m m e n t s t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
6-15
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
deny (IPv4)
deny (IPv4)
To create an IPv4 ACL rule that denies traffic matching its conditions, use the
deny
command. To
remove a rule, use the
no
form of this command.
General Syntax
[
sequence-number
]
deny
protocol
source
destination
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
no deny
protocol
source
destination
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
no
sequence-number
Internet Control Message Protocol
[
sequence-number
]
deny icmp
source
destination
[
icmp-message
]
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
Internet Group Management Protocol
[
sequence-number
]
deny igmp
source
destination
[
igmp-message
]
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
Internet Protocol v4
[
sequence-number
]
deny ip
source
destination
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
Transmission Control Protocol
[
sequence-number
]
deny tcp
source
[
operator
port
[
port
]
|
portgroup
portgroup
]
destination
[
operator
port
[
port
]
|
portgroup
portgroup
]
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
[
flags
]
[
established
]
User Datagram Protocol
[
sequence-number
]
deny udp
source
[
operator
port
[
port
]
|
portgroup
portgroup
]
destination
[
operator
port
[
port
]
|
portgroup
portgroup
]
{[
dscp
dscp
]
|
[
precedence
precedence
]}
[
fragments
]
[
log
]
[
time-range
time-range-name
]
