Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2(1) (OL-16599-01, March 2009)

Send comments to [e-mail]
6-15
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
deny (IPv4)
deny (IPv4)
To create an IPv4 ACL rule that denies traffic matching its conditions, use the deny command. To
remove a rule, use the no form of this command.
General Syntax
[sequence-number] deny protocol source destination {[dscp dscp] | [precedence precedence]}
[fragments] [log] [time-range time-range-name]
no deny protocol source destination {[dscp dscp] | [precedence precedence]} [fragments] [log]
[time-range time-range-name]
no sequence-number
Internet Control Message Protocol
[sequence-number] deny icmp source destination [icmp-message] {[dscp dscp] | [precedence
precedence]} [fragments] [log] [time-range time-range-name]
Internet Group Management Protocol
[sequence-number] deny igmp source destination [igmp-message] {[dscp dscp] | [precedence
precedence]} [fragments] [log] [time-range time-range-name]
Internet Protocol v4
[sequence-number] deny ip source destination {[dscp dscp] | [precedence precedence]}
[fragments] [log] [time-range time-range-name]
Transmission Control Protocol
[sequence-number] deny tcp source [operator port [port] | portgroup portgroup] destination
[operator port [port] | portgroup portgroup] {[dscp dscp] | [precedence precedence]}
[fragments] [log] [time-range time-range-name] [flags] [established]
User Datagram Protocol
[sequence-number] deny udp source [operator port [port] | portgroup portgroup] destination
[operator port [port] | portgroup portgroup] {[dscp dscp] | [precedence precedence]}
[fragments] [log] [time-range time-range-name]