S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
5-11
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco NX-OS Release 4.x
Chapter 5 D Commands
deny (IPv6-ACL configuration)
deny (IPv6-ACL configuration)
To configure deny conditions for an IPv6 access control list (ACL), use the
deny
command in IPv6-ACL
configuration submode. To remove the conditions, use the
no
form of the command.
deny
{
ipv6-protocol-number
| ipv6
}
{
source-ipv6-prefix/prefix-length
| any | host
source-ipv6-address
}
{
dest-ipv6-prefix
/
prefix-length
| any | host
dest-ipv6-address
} [
log-deny
]
deny icmp
{
source-ipv6-prefix/prefix-length
| any | host
source-ipv6-address
}
{
dest-ipv6-prefix
/
prefix-length
| any | host
dest-ipv6-address
} [
icmp-type
[
icmp-code
]]
[log-deny]
deny tcp
{
source-ipv6-prefix/prefix-length
| any | host
source-ipv6-address
} [
source-port-operator
source-port-number
| range
source-port-number source-port-number
]
{
dest-ipv6-prefix
/
prefix-length
| any | host
dest-ipv6-address
} [
dest-port-operator
dest-port-number |
range
dest-port-number dest-port-number
] [
established
] [
log-deny
]
deny udp
{
source-ipv6-prefix/prefix-length
| any | host
source-ipv6-address
}
[
source-port-operator source-port-number
| range
source-port-number source-port-number
]
{
dest-ipv6-prefix
/
prefix-length
| any | host
dest-ipv6-address
} [
dest-port-operator
dest-port-number |
range
dest-port-number dest-port-number
] [
log-deny
]
no deny
{
ipv6-protocol-number
| ipv6 | icmp | tcp | udp
}
Syntax Description
ipv6-protocol-number
Specifies an IPv6 protocol number. The range is 0 to 255.
ipv6
Applies the ACL to any IPv6 packet.
source-ipv6-prefix/
prefix-length
Specifies a source IPv6 network or class of networks. The format is
X:X:X::X/n
.
any
Applies the ACL to any source or destination prefix.
host
source-ipv6-address
Applies the ACL to the specified source IPv6 host address. The format is
X:X:X::X
.
dest-ipv6-prefix
/
prefix-
length
Specifies a destination IPv6 network or class of networks. The format is
X:X:X::X/n
.
host
dest-ipv6-address
Applies the ACL to the specified destination IPv6 host address. The format
is
X:X:X::X
.
log-deny
(Optional) For packets that are dropped, creates an informational log
message about the packet that matches the entry. The message includes the
input interface.
icmp
Applies the ACL to any Internet Control Message Protocol (ICMP) packet.
icmp-type
Specifies an ICMP message type. The range is 0 to 255.
icmp-code
Specifies an ICMP message code. The range is 0 255.
tcp
Applies the ACL to any TCP packet.
source-port-operator
Specifies an operand that compares the source ports of the specified protocol.
The operands are
lt
(less than),
gt
(greater than), and
eq
(equals).
source-port-number
Specifies the port number of a TCP or UDP port. The number can be from 0
to 65535. A range requires two port numbers.
udp
Applies the ACL to any UDP packet.
