Cisco Nexus 5500 Series - Page 103

89
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter D Commands
deny udp (IPv6)
• domain—Domain Name Service (DNS, 53)
• echo—Echo (7)
• isakmp—Internet Security Association and Key Management Protocol (5)
• mobile-ip—Mobile IP registration (434)
• nameserver—IEN116 name service (obsolete, 42)
• netbios-dgm—NetBIOS datagram service (138)
• netbios-ns—NetBIOS name service (137)
• netbios-ss—NetBIOS session service (139)
• non500-isakmp—Internet Security Association and Key Management Protocol (45)
• ntp—Network Time Protocol (123)
• pim-auto-rp—PIM Auto-RP (496)
• rip—Routing Information Protocol (router, in.routed, 52)
• snmp—Simple Network Management Protocol (161)
• snmptrap—SNMP Traps (162)
• sunrpc—Sun Remote Procedure Call (111)
• syslog—System Logger (514)
• tacacs—TAC Access Control System (49)
• talk—Talk (517)
• tftp—Trivial File Transfer Protocol (69)
• time—Time (37)
• who—Who service (rwho, 513)
• xdmcp—X Display Manager Control Protocol (177)
Examples This example shows how to configure an IPv6 ACL named acl-lab13-ipv6 with rules denying all UDP
traffic from the 2001:0db8:85a3:: and 2001:0db8:69f2:: networks to the 2001:0db8:be03:2112::
network:
switch# configure terminal
switch(config)# ipv6 access-list acl-lab13-ipv6
switch(config-ipv6-acl)# deny udp 2001:0db8:85a3::/48 2001:0db8:be03:2112::/64
switch(config-ipv6-acl)# deny udp 2001:0db8:69f2::/48 2001:0db8:be03:2112::/64
Related Commands Command Description
ipv6 access-list Configures an IPv6 ACL.
permit (IPv6) Configures a permit rule in an IPv6 ACL.
remark Configures a remark in an ACL.
time-range Configures a time range.