Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

bootps—Bootstrap Protocol (BOOTP) server (67)

discard—Discard (9)

dnsix—DNSIX security protocol auditing (195)

domain—Domain Name Service (DNS, 53)

echo—Echo (7)

isakmp—Internet Security Association and Key Management Protocol (5)

mobile-ip—Mobile IP registration (434)

nameserver—IEN116 name service (obsolete, 42)

netbios-dgm—NetBIOS datagram service (138)

netbios-ns—NetBIOS name service (137)

netbios-ss—NetBIOS session service (139)

non500-isakmp—Internet Security Association and Key Management Protocol (45)

ntp—Network Time Protocol (123)

pim-auto-rp—PIM Auto-RP (496)

rip—Routing Information Protocol (router, in.routed, 52)

snmp—Simple Network Management Protocol (161)

snmptrap—SNMP Traps (162)

sunrpc—Sun Remote Procedure Call (111)

syslog—System Logger (514)

tacacs—TAC Access Control System (49)

talk—Talk (517)

tftp—Trivial File Transfer Protocol (69)

time—Time (37)

who—Who service (rwho, 513)

xdmcp—X Display Manager Control Protocol (177)

This example shows how to configure an IPv4 ACL named acl-lab-01 with rules that deny all TCP and UDP

traffic from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network and a final rule that permits

all other IPv4 traffic:

switch# configure terminal

switch(config)# ip access-list acl-lab-01

switch(config-acl)# deny tcp 10.23.0.0/16 10.176.0.0/16

switch(config-acl)# deny udp 10.23.0.0/16 10.176.0.0/16

switch(config-acl)# deny tcp 192.168.37.0/16 10.176.0.0/16

switch(config-acl)# deny udp 192.168.37.0/16 10.176.0.0/16

switch(config-acl)# permit ip any any

Cisco Nexus 7000 Series Security Command Reference