ICMP Message Type
Keywords
port-unreachable
precedence-
unreachable
protocol-
unreachable
reassembly-timeout
redirect
router-
advertisement
router-solicitation
source-quench
source-route-failed
time-exceeded
timestamp-reply
timestamp-request
traceroute
ttl-exceeded
unreachable
deny tcp
Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria.
C-Series, E-Series, S-Series, Z-Series
Syntax
deny tcp {source mask | any | host ip-address} [bit] [operator
port [port]] {destination mask | any | host ip-address} [dscp]
[bit] [operator port [port]] [count [byte] | log] [order]
[monitor] [fragments]
To remove this filter, you have two choices:
Parameters
source
256
ICMP Message Type Name
Port unreachable
Precedence cutoff
Protocol unreachable
Reassembly timeout
All redirects
Router discovery advertisements
Router discovery solicitations
Source quenches
Source route failed
All time exceeded
Timestamp replies
Timestamp requests
Traceroute
TTL exceeded
All unreachables
•
Use the no seq sequence-number command if you know the filter's sequence
number.
•
Use the no deny tcp {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.
Enter the IP address of the network or host from which the packets
are sent.