Deny (Access-List Configuration) - Cisco Catalyst 2950 Command Reference Manual

deny (access-list configuration)

deny (access-list configuration)
Use the deny access-list configuration command to configure conditions for a named or numbered IP
access control list (ACL). Use the no form of this command to remove a deny condition from the IP ACL.
Use these commands with standard IP ACLs:
Use these commands with extended IP ACLs:
This command is available on physical interfaces only if your switch is running the enhanced software
image (EI).
Syntax Description protocol
source source-wildcard |
host source | any
destination
destination-wildcard | host
destination | any
Catalyst 2950 and Catalyst 2955 Switch Command Reference
2-82
deny {source source-wildcard | host source | any}
no deny {source source-wildcard | host source | any}
deny protocol {source source-wildcard | host source | any} [operator port] {destination
destination-wildcard | host source | any} [operator port] [dscp dscp-value] [time-range
time-range-name]
no deny protocol {source source-wildcard | host source | any} [operator port] {destination
destination-wildcard | host source | any} [operator port] [dscp dscp-value] [time-range
time-range-name]
Name of an IP protocol.
protocol can be ip, tcp, or udp.
Define a source IP address and wildcard.
The source is the source address of the network or host from which the
packet is being sent, specified in one of these ways:
Define a destination IP address and wildcard.
The destination is the destination address of the network or host to which
the packet is being sent, specified in one of these ways:
The 32-bit quantity in dotted-decimal format. The source-wildcard
•
applies wildcard bits to the source.
The keyword host, followed by the 32-bit quantity in dotted-decimal
•
format, as an abbreviation for source and source-wildcard of source
0.0.0.0.
The keyword any as an abbreviation for source and source-wildcard
•
of 0.0.0.0 255.255.255.255. You do not need to enter a
source-wildcard.
The 32-bit quantity in dotted-decimal format. The
•
destination-wildcard applies wildcard bits to the destination.
• The keyword host, followed by the 32-bit quantity in dotted-decimal
format, as an abbreviation for destination and destination-wildcard
of destination 0.0.0.0.
The keyword any as an abbreviation for destination and
•
destination-wildcard of 0.0.0.0 255.255.255.255. You do not need to
enter a destination-wildcard.
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
OL-10102-01