interval
minutes
(OPTIONAL) Enter the
keyword
interval followed by the time
period in minutes at which ACL logs must be generated. The
interval range is from 1 to 10 minutes.
monitor
(OPTIONAL) Enter the keyword
monitor
when the rule is
describing the traffic that you want to monitor and the ACL
in which you are creating the rule is applied to the monitored
interface.
Defaults
Not configured.
Command
Modes
ACCESS-LIST
Command
History
Version 9.4(0.0)
Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
Version 9.3(0.0)
Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
Version 9.2(0.0)
Introduced on the MXL 10/40GbE Switch IO Module.
deny udp (for IPv6 ACLs)
Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
Syntax
deny udp {
source address mask
| any | host
ipv6-address
}
[
operator port
[
port
]] {
destination address
| any | host
ipv6-
address
} [
operator port
[
port
]] [count [byte]] [log [interval
minutes
] [threshold-in-msgs [
count
]] [monitor]
To remove this filter, you have two choices:
• Use the
no seq sequence-number
command syntax if you know the filter’s
sequence number
• Use the
no deny udp {
source address mask
| any | host
ipv6-
address
} {
destination address
| any | host
ipv6-address
}
command
Parameters
source
Enter the IP address of the network or host from which the
packets are sent.
mask
Enter a network mask in /prefix format (/x) or A.B.C.D. The
mask, when specified in A.B.C.D format, may be either
contiguous or non-contiguous.
any
Enter the keyword
any
to specify that all routes are subject
to the filter.
Access Control Lists (ACL)
277
