ACL Command s
deny (IP)
SPS208G/SPS224G4/SPS2024 Command Line Interface Reference Guide 53
3
Syntax
deny [disable-port] {any |
protocol
} {any | {
source source-wildcard
}} {ny |
{
destination destination-wildcard
}} [dscp
dscp number
| ip-precedence
ip-
precedence
]
deny-icmp [disable-port] {any | {
source source-wildcard
}} {any | {
destination
destination-wildcard
}} {ny |
icmp-type
} {any |
icmp-code
} [dscp
number
| ip-
precedence
number
]
deny-igmp [disable-port] {any | {
source source-wildcard
}} {any | {
destination
destination-wildcard
}} {any |
igmp-type
} [dscp
number
| ip-precedence
number
]
deny-tcp [disable-port] {any | {
source source-wildcard
}} {any |
source-port
} {any |
{
destination destination-wildcard
}} {any |
destination-port
} [dscp
number
| ip-
precedence
number
] [flags
list-of-flags
]
eny-udp [disable-port] {any | {
source source-wildcard
}} {any |
source-port
} {any |
{
destination destination-wildcard
}} {any |
destination-port
} [dscp
number
| ip-
precedence
number
]
Parameters
•disable-port — Specifies that the port is disabled.
•
source
— Specifies the IP address or host name from which the packet was
sent. Specify any to indicate IP address 0.0.0.0 and mask 255.255.255.255.
•
source-wildcard
— (Optional for the first type) Specifies wildcard bits by
placing 1’s in bit positions to be ignored. Specify any to indicate IP addre ss
0.0.0.0 and mask 255.255.255.255.
•
destination
— Specifies the IP address or host name to which the packet is
being sent . Specify any to indicate IP addre ss 0.0.0.0 and ma sk
255.255.255.255.
•
destination-wildcard
— (Optional for the first type) Specifies wildcard bits
by placing 1’s in bit positions to be ignored. Specify any to indicate IP
address 0.0.0.0 and mask 255.255.255.255.