deny udp
Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
C-Series, E-Series, S-Series
Syntax
deny udp {source address mask | any | host ipv6-address}
[operator port [port]] {destination address | any | host ipv6-
address} [operator port [port]] [count [byte]] | [log]
[monitor]
To remove this filter, you have two choices:
Parameters
source address
mask
any
host
operator
port port
destination
address
count
•
Use the no seq sequence-number command syntax if you know the filter's
sequence number
•
Use the no deny udp {source address mask | any | host ipv6-
address} {destination address | any | host ipv6-address}
command
Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format. The range is /0 to /128. The :: notation specifies successive
hexadecimal fields of zero.
Enter a network mask in /prefix format (/x).
Enter the keyword any to specify that all routes are subject to the
filter.
ipv6-address
Enter the keyword host followed by the IPv6 address of the host in
the x:x:x:x::x format. The :: notation specifies successive hexadecimal
fields of zero.
(OPTIONAL) Enter one of the following logical operand:
•
•
•
•
•
Enter the application layer port number. Enter two port numbers if
using the range logical operand. The range is 0 to 65535.
Enter the IPv6 address of the network or host to which the packets
are sent in the x:x:x:x::x format followed by the prefix length in the /x
format. The range is /0 to /128. The :: notation specifies successive
hexadecimal fields of zero.
(OPTIONAL) Enter the keyword count to count packets processed
by the filter.
eq = equal to
neq = not equal to
gt = greater than
lt = less than
range = inclusive range of ports (you must specify two ports
for the port command parameter).
909