Intel SBCEGBESW1 manual Deny IP, No IPv4 ACL is defined, IP-Access List Configuration mode

ACL Commands

•list-of-flags— Specifies a list of TCP flags that can be triggered. If a flag is set, it is prefixed by “+”.

If a flag is not set, it is prefixed by “-”. The possible values are: +urg, +ack, +psh, +rst, +syn, +fin, -urg,-ack,-psh,-rst,-synand -fin. The flags are concatenated into one string. For example: +fin-ack.

Default Configuration

No IPv4 ACL is defined.

Command Mode

IP-Access List Configuration mode

User Guidelines

Use the ip access-listGlobal Configuration mode command to enable the IP-Access List Configuration mode.

Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-anycondition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied.

Example

The following example shows how to define a permit statement for an IP ACL.

Console(config)# ip access-listip-acl1

Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any dscp 56

deny (IP)

The deny IP-Access List Configuration mode command denies traffic if the conditions defined in the deny statement match.

Syntax

deny [disable-port] {any protocol} {any {source source-wildcard}} {any

{destination destination-wildcard}} [dscp dscp number ip-precedenceip-precedence][in-portport-num out-portport-num]

deny-icmp

deny-igmp

44 Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide