ACL Commands
deny (IP)
Cisco 220 Series Smart Plus Switches Command Line Interface Reference Guide Release 1.0.0.x
68
4
•
disable-port—(Optional) Disables the Ethernet interface if the condition is
matched.
Default Configuration
No MAC-based ACE is defined.
Command Mode
MAC Access-List Configuration mode
User Guidelines
After an ACE is added to an ACL, an implicit deny any any condition exists at the
end of the list. That is, if there are no matches, the packets are denied. However,
before the first ACE is added, the list permits all packets.
Example
switchxxxxxx(config)#
mac access-list extended server1
switchxxxxxx(config-mac-acl)#
deny 00:00:00:00:00:01 00:00:00:00:00:ff any
deny (IP)
To set deny conditions for an IPv4-based ACL, use the deny IP Access-List
Configuration mode command.
To remove an IPv4-based ACE, use the no sequence command.
Syntax
[sequence
value
] deny
protocol
{any |
source source-wildcard
} {any |
destination
destination-wildcard
} [dscp
number
|
precedence
number
] [disable-port]
[sequence
value
] deny
icmp
{any |
source source-wildcard
} {any |
destination
destination-wildcard
} [any |
icmp-type
] [any |
icmp-code
] [dscp
number
|
precedence
number
] [disable-port]
[sequence
value
] deny
tcp
{any
| {
source source-wildcard
} {any
|
source-port
/
port-
range
} }{any |
destination destination-wildcard
} {any |
destination-port
/
port-range
}
[dscp
number
| precedence
number
] [match-all
list-of-flags
] [disable-port]
