Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

deny (IPv6)

Cisco Nexus 7000 Series Security Command Reference

246
Name or number of the protocol of packets that the
rule matches. Valid numbers are from 0 to 255. Valid
protocol names are the following keywords:
• ahp—Specifies that the rule applies to
Authentication Header Protocol (AHP) traffic
only. When you use this keyword, only the other
keywords and arguments that apply to all IPv6
protocols are available.
• esp—Specifies that the rule applies to
Encapsulating Security Payload (ESP) traffic
only. When you use this keyword, only the other
keywords and arguments that apply to all IPv6
protocols are available.
• icmp—Specifies that the rule applies to ICMP
traffic only. When you use this keyword, the
icmp-message argument is available, in addition
to the keywords that are available for all valid
values of the protocol argument.
• ipv6—Specifies that the rule applies to all IPv6
traffic. When you use this keyword, only the
other keywords and arguments that apply to all
IPv6 protocols are available.
• pcp—Specifies that the rule applies to Payload
Compression Protocol (PCP) traffic only. When
you use this keyword, only the other keywords
and arguments that apply to all IPv6 protocols
are available.
• sctp—Specifies that the rule applies to Stream
Control Transmission Protocol (SCTP) traffic
only. When you use this keyword, the operator
argument and the portgroup keyword are
available, in addition to the keywords that are
available for all valid values of the protocol
argument.
• tcp—Specifies that the rule applies to TCP
traffic only. When you use this keyword, the
flags and operator arguments and the
portgroup and established keywords are
available, in addition to the keywords that are
available for all valid values of the protocol
argument.
• udp—Specifies that the rule applies to UDP
traffic only. When you use this keyword, the
operator argument and the portgroup keyword
are available, in addition to the keywords that
are available for all valid values of the protocol
D Commands