Send documentation comments to mdsfeedback-doc@cisco.com
5-11
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 5 D Commands
deny (IPv6-ACL configuration)
deny (IPv6-ACL configuration)
To configure deny conditions for an IPv6 access control list (ACL), use the deny command in IPv6-ACL
configuration submode. To remove the conditions, use the no form of the command.
deny {ipv6-protocol-number | ipv6}
{source-ipv6-prefix/prefix-length | any | host source-ipv6-address}
{dest-ipv6-prefix/prefix-length | any | host dest-ipv6-address}
[log-deny]
deny icmp
{source-ipv6-prefix/prefix-length | any | host source-ipv6-address}
{dest-ipv6-prefix/prefix-length | any | host dest-ipv6-address}
[icmp-type [icmp-code]]
[log-deny]
deny tcp
{source-ipv6-prefix/prefix-length | any | host source-ipv6-address}
[source-port-operator source-port-number |
range source-port-number source-port-number]
{dest-ipv6-prefix/prefix-length | any | host dest-ipv6-address}
[dest-port-operator dest-port-number |
range dest-port-number dest-port-number]
[established] [log-deny]
deny udp
{source-ipv6-prefix/prefix-length | any | host source-ipv6-address}
[source-port-operator source-port-number |
range source-port-number source-port-number]
{dest-ipv6-prefix/prefix-length | any | host dest-ipv6-address}
[dest-port-operator dest-port-number |
range dest-port-number dest-port-number]
[log-deny]
no deny {ipv6-protocol-number | ipv6 | icmp | tcp | udp}
Syntax Description ipv6-protocol-number Specifies an IPv6 protocol number. The range is 0 to 255.
ipv6 Applies the ACL to any IPv6 packet.
source-ipv6-prefix/
prefix-length
Specifies a source IPv6 network or class of networks. The format is
X:X:X::X/n.
any Applies the ACL to any source or destination prefix.
host
source-ipv6-address
Applies the ACL to the specified source IPv6 host address. The format is
X:X:X::X.
dest-ipv6-prefix/prefix-
length
Specifies a destination IPv6 network or class of networks. The format is
X:X:X::X/n.
host dest-ipv6-address Applies the ACL to the specified destination IPv6 host address. The format
is X:X:X::X.
log-deny For packets that are dropped, creates an informational log message about the
packet that matches the entry. The message includes the input interface.