Deny Sctp (Ipv6) - Cisco Nexus 5500 Series Command Reference Manual

deny sctp (IPv6)

deny sctp (IPv6)
To create an access control list (ACL) rule that denies SCTP IPv6 traffic matching its conditions, use the
deny command. To remove a rule, use the no form of this command.
Syntax Description sequence-number
source
destination
Cisco Nexus 5500 Series NX-OS Security Command Reference
74
[sequence-number] deny sctp source [operator port [port] | portgroup portgroup] destination
[operator port [port] | portgroup portgroup] [dscp dscp | flow-label flow-label-value |
fragments]
no deny sctp source [operator port [port] | portgroup portgroup] destination [operator port [port]
| portgroup portgroup] [dscp dscp | flow-label flow-label-value | fragments | log ]
no sequence-number
(Optional) Sequence number of the deny command, which causes the device
to insert the command in that numbered position in the access list. Sequence
numbers maintain the order of rules within an ACL.
A sequence number can be any integer between 1 and 4294967295.
By default, the first rule in an ACL has a sequence number of 10.
If you do not specify a sequence number, the device adds the rule to the end
of the ACL and assigns a sequence number that is 10 greater than the
sequence number of the preceding rule.
Use the resequence command to reassign sequence numbers to rules.
Source IPv6 addresses that the rule matches. For details about the methods
that you can use to specify this argument, see the
section in the "Usage Guidelines" section.
Destination IPv6 addresses that the rule matches. For details about the
methods that you can use to specify this argument, see the
Destination" section in the "Usage Guidelines" section.
Chapter D Commands
"Source and Destination"
"Source and
OL-27883-02