Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

deny (IPv4)
precedence precedence
fragments
log

Cisco Nexus 7000 Series Security Command Reference

232
• cs7—CS7, precedence 7 (111000)
• default—Default DSCP value (000000)
• ef—Expedited Forwarding (101110)
(Optional) Specifies that the rule matches only packets
that have an IP Precedence field with the value
specified by the precedence argument. The
precedence argument can be a number or a keyword,
as follows:
• 0–7—Decimal equivalent of the 3 bits of the IP
Precedence field. For example, if you specify
3, the rule matches only packets that have the
following bits in the DSCP field: 011.
• critical—Precedence 5 (101)
• flash—Precedence 3 (011)
• flash-override—Precedence 4 (100)
• immediate—Precedence 2 (010)
• internet—Precedence 6 (110)
• network—Precedence 7 (111)
• priority—Precedence 1 (001)
• routine—Precedence 0 (000)
(Optional) Specifies that the rule matches only those
packets that are noninitial fragments. You cannot
specify this keyword in the same rule that you specify
Layer 4 options, such as a TCP port number, because
the information that the devices requires to evaluate
those options is contained only in initial fragments.
(Optional) Specifies that the device generates an
informational logging message about each packet that
matches the rule. The message includes the following
information:
• Whether the protocol was TCP, UDP, ICMP or
a number
• Source and destination addresses
• Source and destination port numbers, if
applicable
D Commands