• Address and variable-length subnet mask—You can use an IPv4 address followed by a variable-length
subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:
IPv4-address/prefix-len
The following example shows how to specify the source argument with the IPv4 address and VLSM for the
192.168.67.0 subnet:
switch(config-acl)# deny udp 192.168.67.0/24 any
• Host address—You can use the host keyword and an IPv4 address to specify a host as a source or
destination. The syntax is as follows:
host
IPv4-address
This syntax is equivalent to IPv4-address/32 and IPv4-address 0.0.0.0.
The following example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# deny icmp host 192.168.67.132 any
• Any address—You can use the any keyword to specify that a source or destination is any IPv4 address.
For examples of the use of the any keyword, see the examples in this section. Each example shows how
to specify a source or destination by using the any keyword.
ICMP Message Types
The icmp-message argument can be one of the following keywords:
• administratively-prohibited—Administratively prohibited
• alternate-address—Alternate address
• conversion-error—Datagram conversion
• dod-host-prohibited—Host prohibited
• dod-net-prohibited—Net prohibited
• echo—Echo (ping)
• echo-reply—Echo reply
• general-parameter-problem—Parameter problem
• host-isolated—Host isolated
• host-precedence-unreachable—Host unreachable for precedence
• host-redirect—Host redirect
• host-tos-redirect—Host redirect for ToS
• host-tos-unreachable—Host unreachable for ToS
• host-unknown—Host unknown
• host-unreachable—Host unreachable
• information-reply—Information replies
Cisco Nexus 7000 Series Security Command Reference
238
D Commands
deny (IPv4)
To Next Page
Loading...
