Users Guide

ManualsBrandsDell ManualsAccess PlatformsPowerSwitch S5148F-ON

381

382

383

384

385

386

387

388

389

390

• capture — (Optional) Capture packets the lter processes.

• dscp value — (Optional) Deny a packet based on the DSCP values, from 0 to 63.

• fragment — (Optional) Use ACLs to control packet fragments.

• ack — (Optional) Set the bit as acknowledgement.

• fin — (Optional) Set the bit as nish—no more data from sender.

• psh — (Optional) Set the bit as push.

• rst — (Optional) Set the bit as reset.

• syn — (Optional) Set the bit as synchronize.

• urg — (Optional) Set the bit set as urgent.

• operator — (Optional) Enter a logical operator to match the packets on the specied port number. The

following options are available:

• eq — Equal to

• gt — Greater than

• lt — Lesser than

• neq — Not equal to

• range — Range of ports, including the specied port numbers.

• host ip-address — (Optional) Enter the IP address to use a host address only.

Default Not congured

Command Mode IPV4-ACL

Usage Information The no version of this command removes the lter.

Example

OS10(config)# ip access-list testflow

OS10(conf-ipv4-acl)# deny udp any any capture session 1

Supported Releases 10.2.0E or later

deny udp (IPv6)

Congures a lter to drop UDP IPv6 packets that match lter criteria.

Syntax

deny udp [A::B | A::B/x | any | host ipv6-address [operator]] [A::B | A:B/x |

any | host ipv6-address [operator]] [ack | fin | psh | rst | syn | urg]

[capture | dscp value | fragment]

Parameters

• A::B — Enter the IPv6 address in hexadecimal format separated by colons.

• A::B/x — Enter the number of bits to match to the IPv6 address.

• any — (Optional) Enter for all routes to be subject to the lter: