interval
minutes
(OPTIONAL) Enter the keyword interval followed by the time
period in minutes at which ACL logs must be generated. The
interval range is from 1 to 10 minutes.
monitor (OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL
in which you are creating the rule is applied to the monitored
interface.
Defaults Not configured.
Command
Modes
ACCESS-LIST
Command
History
Version 9.4(0.0) Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
deny udp (for IPv6 ACLs)
Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
Syntax
deny udp {source address mask | any | host ipv6-address}
[operator port [port]] {destination address | any | host ipv6-
address} [operator port [port]] [count [byte]] [log [interval
minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s
sequence number
• Use the no deny udp {source address mask | any | host ipv6-
address} {destination address | any | host ipv6-address}
command
Parameters
source Enter the IP address of the network or host from which the
packets are sent.
mask Enter a network mask in /prefix format (/x) or A.B.C.D. The
mask, when specified in A.B.C.D format, may be either
contiguous or non-contiguous.
any
Enter the keyword any to specify that all routes are subject
to the filter.
Access Control Lists (ACL)
277
To Next Page
Loading...
