Cisco Nexus 5500 Series - install feature-set virtualization

65
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter D Commands
deny udp (IPv4)
• non500-isakmp—Internet Security Association and Key Management Protocol (45)
• ntp—Network Time Protocol (123)
• pim-auto-rp—PIM Auto-RP (496)
• rip—Routing Information Protocol (router, in.routed, 52)
• snmp—Simple Network Management Protocol (161)
• snmptrap—SNMP Traps (162)
• sunrpc—Sun Remote Procedure Call (111)
• syslog—System Logger (514)
• tacacs—TAC Access Control System (49)
• talk—Talk (517)
• tftp—Trivial File Transfer Protocol (69)
• time—Time (37)
• who—Who service (rwho, 513)
• xdmcp—X Display Manager Control Protocol (177)
Examples This example shows how to configure an IPv4 ACL named acl-lab-01 with rules that deny all UDP traffic
from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network and a final rule that permits all
other IPv4 traffic:
switch(config)# ip access-list acl-lab-01
switch(config-acl)# deny udp 10.23.0.0/16 10.176.0.0/16
switch(config-acl)# deny udp 192.168.37.0/16 10.176.0.0/16
switch(config-acl)# permit ip any any
Related Commands Command Description
ip access-list Configures an IPv4 ACL.
permit (IPv4) Configures a permit rule in an IPv4 ACL.
remark Configures a remark in an IPv4 ACL.
show ip access-list Displays all IPv4 ACLs or one IPv4 ACL.