2-82
Catalyst 2950 and Catalyst 2955 Switch Command Reference
OL-10102-01
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
deny (access-list configuration)
deny (access-list configuration)
Use the deny access-list configuration command to configure conditions for a named or numbered IP
access control list (ACL). Use the no form of this command to remove a deny condition from the IP ACL.
Use these commands with standard IP ACLs:
deny {source source-wildcard | host source | any}
no deny {source source-wildcard | host source | any}
Use these commands with extended IP ACLs:
deny protocol {source source-wildcard | host source | any} [operator port] {destination
destination-wildcard | host source | any} [operator port] [dscp dscp-value] [time-range
time-range-name]
no deny protocol {source source-wildcard | host source | any} [operator port] {destination
destination-wildcard | host source | any} [operator port] [dscp
dscp-value] [time-range
time-range-name]
This command is available on physical interfaces only if your switch is running the enhanced software
image (EI).
Syntax Description protocol Name of an IP protocol.
protocol can be ip, tcp, or udp.
source source-wildcard |
host source | any
Define a source IP address and wildcard.
The source is the source address of the network or host from which the
packet is being sent, specified in one of these ways:
• The 32-bit quantity in dotted-decimal format. The source-wildcard
applies wildcard bits to the source.
• The keyword host, followed by the 32-bit quantity in dotted-decimal
format, as an abbreviation for source and source-wildcard of source
0.0.0.0.
• The keyword any as an abbreviation for source and source-wildcard
of 0.0.0.0 255.255.255.255. You do not need to enter a
source-wildcard.
destination
destination-wildcard | host
destination | any
Define a destination IP address and wildcard.
The destination is the destination address of the network or host to which
the packet is being sent, specified in one of these ways:
• The 32-bit quantity in dotted-decimal format. The
destination-wildcard applies wildcard bits to the destination.
• The keyword host, followed by the 32-bit quantity in dotted-decimal
format, as an abbreviation for destination and destination-wildcard
of destination 0.0.0.0.
• The keyword any as an abbreviation for destination and
destination-wildcard of 0.0.0.0 255.255.255.255. You do not need to
enter a destination-wildcard.