Cisco Nexus 5500 Series Command Reference Manual page 78

deny udp (IPv4)
Address and network wildcard-You can use an IPv4 address followed by a network wildcard to
•
specify a host or a network as a source or destination. The syntax is as follows:
IPv4-address network-wildcard
This example shows how to specify the source argument with the IPv4 address and network wildcard
for the 192.168.67.0 subnet:
switch(config-acl)# deny udp 192.168.67.0 0.0.0.255 any
• Address and variable-length subnet mask-You can use an IPv4 address followed by a
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
IPv4-address/prefix-len
This example shows how to specify the source argument with the IPv4 address and VLSM for the
192.168.67.0 subnet:
switch(config-acl)# deny udp 192.168.67.0/24 any
Host address-You can use the host keyword and an IPv4 address to specify a host as a source or
•
destination. The syntax is as follows:
host IPv4-address
This syntax is equivalent to IPv4-address/32 and IPv4-address 0.0.0.0.
This example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# deny udp host 192.168.67.132 any
Any address-You can use the any keyword to specify that a source or destination is any IPv4
•
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
UDP Port Names
When you specify the protocol argument as udp, the port argument can be a UDP port number, which
is an integer from 0 to 65535. It can also be one of the following keywords:
biff-Biff (mail notification, comsat, 512)
•
bootpc-Bootstrap Protocol (BOOTP) client (68)
•
bootps-Bootstrap Protocol (BOOTP) server (67)
•
discard-Discard (9)
•
dnsix-DNSIX security protocol auditing (195)
•
domain-Domain Name Service (DNS, 53)
•
echo-Echo (7)
•
isakmp-Internet Security Association and Key Management Protocol (5)
•
• mobile-ip-Mobile IP registration (434)
• nameserver-IEN116 name service (obsolete, 42)
• netbios-dgm-NetBIOS datagram service (138)
netbios-ns-NetBIOS name service (137)
•
netbios-ss-NetBIOS session service (139)
•
Cisco Nexus 5500 Series NX-OS Security Command Reference
64
Chapter D Commands
OL-27883-02