D-Link DXS-3250 - xStack Switch - Stackable, Cli Manual

Page: 38 / 466

ACL Commands
Page 37
deny (IP)
The deny IP-Access List Configuration mode command denies traffic if the conditions defined in the deny
statement match.
Syntax
deny [ disable-port ] { any | protocol } { any | { source source-wildcard }} { any | { destination destination-wildcard }}
[ dscp dscp number | ip-precedence ip-precedence ] [ in-port port-num | out-port port-num ]
Parameters
•
source — Specifies the IP address or host name from which the packet was sent. Specify any to indicate IP
address 0.0.0.0 and mask 255.255.255.255.
•
source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be
ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255.
•
destination — Specifies the IP address or host name to which the packet is being sent. Specify any to
indicate IP address 0.0.0.0 and mask 255.255.255.255.
•
destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit positions to be
ignored. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255.
•
protocol — Specifies the abbreviated name or number of an IP protocol. The following table lists protocols
that can be specified:
I P P r o t o c o l A b b r e v i a t e d N a m e P r o t o c o l N u m b e r
Internet Control Message Protocol icmp 1
Internet Group Management Protocol igmp 2
IP in IP (encapsulation) Protocol ip 4
Transmission Control Protocol tcp 6
Exterior Gateway Protocol egp 8
Interior Gateway Protocol igp 9
User Datagram Protocol udp 17
Host Monitoring Protocol hmp 20
Reliable Data Protocol rdp 27
Inter-Domain Policy Routing Protocol
idpr 35
Ipv6 protocol ipv6 41
Routing Header for IPv6 ipv6-route 43
Fragment Header for IPv6 ipv6-frag 44
Inter-Domain Routing Protocol
idrp 45
Reservation Protocol rsvp 46
General Routing Encapsulation gre 47
Encapsulating Security Payload (50)
esp 50
Authentication Header ah 51
ICMP for IPv6 ipv6-icmp 58