Cisco AJ732A - MDS 9134 Fabric Switch Command Reference Manual page 650

ip access-list
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
operator
port port-value
icmp-type icmp-value
established
tos tos-value
log-deny
Defaults Denied.
Command Modes Configuration mode.
Command History Release
4.1(1b)
1.2(1)
Usage Guidelines
Using the log-deny option at the end of the individual ACL entries shows the ACL number and whether
the packet was permitted or denied, in addition to port-specific information. This option causes an
information logging message about the packet that matches the dropped entry (or entries).
The behaviour is counterintutive compared to other cisco products and should be documented to relieve
Note
customer satisfaction.
Cisco MDS 9000 Family Command Reference
11-44
Compares source or destination ports to the packet and has the following
options:
any = Any destination IP
eq = Equal source port
gt = Greater than and including source port
lt = Less than and including source port
range port = Source port range port-value
Specifies the decimal number (ranging from 0 to 65535) or one of the
following names to indicate a TCP or UDP port.
The TCP port names are: dns, ftp, ftp-data, http, ntp, radius, sftp, smtp, snmp,
snmp-trap, ssh, syslog, tacacs-ds, telnet, wbem-http, wbem-https, and www.
The UDP port names are: dns, ftp, ftp-data, http, ntp, radius, sftp, smtp,
snmp, snmp-trap, ssh, syslog, tacacs-ds, telnet, tftp, wbem-http, wbem-https,
and www.
Filters ICMP packets by ICMP message type. The range is 0 to 255. The
types include: echo, echo-reply, redirect, time-exceeded, traceroute, and
unreachable.
Indicates an established connection for the TCP protocol. A match occurs if
the TCP datagram has the ACK, FIN, PSH, RST, SYN or URG control bits
set. The non-matching case is that of the initial TCP datagram to form a
connection.
Filters packets by the following type of service level: normal-service (0),
monetary-cost (1), reliability (2), throughput (4), and delay (8).
Sends an information logging message to the console about the packet that is
denied entry.
Modification
Added a note information for the usage section.
This command was introduced.
Chapter 11 I Commands
OL-18089-01, Cisco MDS NX-OS Release 4.x