Udp Port Names; Biff-Biff (Mail Notification, Comsat, 512) Bootpc-Bootstrap Protocol (Bootp) Client; Bootps-Bootstrap Protocol (Bootp) Server; Discard-Discard - Cisco Nexus 5500 Series Command Reference Manual

Nx-os security command reference
Hide thumbs Also See for Nexus 5500 Series:
Table of Contents

Advertisement

deny udp (IPv6)
Command Modes
IPv6 ACL configuration
Command History
Release
5.2(1)N1(1)
Usage Guidelines
A newly created IPv6 ACL contains no rules.
When the device applies an IPv6 ACL to a packet, it evaluates the packet with every rule in the ACL.
The device enforces the first rule whose conditions are satisfied by the packet. When the conditions of
more than one rule are satisfied, the device enforces the rule with the lowest sequence number.
Source and Destination
You can specify the source and destination arguments in one of several ways. In each rule, the method
you use to specify one of these arguments does not affect how you specify the other. When you configure
a rule, use the following methods to specify the source and destination arguments:

UDP Port Names

When you specify the protocol argument as udp, the port argument can be a UDP port number, which
is an integer from 0 to 65535. It can also be one of the following keywords:
Cisco Nexus 5500 Series NX-OS Security Command Reference
88
Modification
This command was introduced.
Address and variable-length subnet mask—You can use an IPv6 address followed by a
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
IPv6-address/prefix-len
This example shows how to specify the source argument with the IPv6 address and VLSM for the
2001:0db8:85a3:: network:
switch(config-acl)# deny udp 2001:0db8:85a3::/48 any
Host address—You can use the host keyword and an IPv6 address to specify a host as a source or
destination. The syntax is as follows:
host IPv6-address
This syntax is equivalent to IPv6-address/128.
This example shows how to specify the source argument with the host keyword and the
2001:0db8:85a3:08d3:1319:8a2e:0370:7344 IPv6 address:
switch(config-acl)# deny udp host 2001:0db8:85a3:08d3:1319:8a2e:0370:7344 any
Any address—You can use the any keyword to specify that a source or destination is any IPv6
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
biff—Biff (mail notification, comsat, 512)
bootpc—Bootstrap Protocol (BOOTP) client (68)
bootps—Bootstrap Protocol (BOOTP) server (67)
discard—Discard (9)
dnsix—DNSIX security protocol auditing (195)
Chapter
D Commands
OL-27883-02

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents