Deny (Role-Based Access Control List) - Cisco Nexus 7000 Series Command Reference Manual

deny (role-based access control list)

deny (role-based access control list)
To configure a deny action in the security group access control list (SGACL), use the deny command. To
remove the action, use the no form of this command.
2
deny {all| icmp| igmp| ip}{tcp| udp} [ {src| dst}{ | {eq | gt| lt| neq}| port -number}| range {port-number
1| port-number 2}[log]
no deny {all| icmp| igmp| ip}{tcp| udp} [ {src| dst}{ | {eq | gt| lt| neq}| port -number}| range {port-number
1| port-number 2}[log]
Syntax Description
all
icmp
igmp
ip
tcp
udp
src
dst
eq
gt
lt
neq
port-number
range
port-number1
port-number2
2
Cisco Nexus 7000 Series Security Command Reference
262
Specifies all traffic.
Specifies Internet Control Message Protocol (ICMP)
traffic.
Specifies Internet Group Management Protocol
(IGMP) traffic.
Specifies IP traffic.
Specifies TCP traffic.
Specifies User Datagram Protocol (UDP) traffic.
Specifies the source port number.
Specifies the destination port number.
Specifies equal to the port number.
Specifies greater than the port number.
Specifies less than the port number.
Specifies not equal to the port number.
Port number for TCP or UDP. The range is from 0 to
65535.
Specifies a port range for TCP or UDP.
First port in the range. The range is from 0 to 65535.
Last port in the range. The range is from 0 to 65535.
D Commands