Extended ACL Instance
15-9
deny proto [<1-
254>|WORD|eigrp|gre|
igmp|igp|ospf|vrrp]
[<source-IP/
Mask>|any|host
<IP>][<dest-IP/
Mask>|any|host <IP>]
{log} {rule-description
<WORD>|rule-precedence
<1-5000>}
Use with the deny command to deny any protocol other
than TCP, UDP or ICMP packets
• <1-254] – Displays protocol number
• <WORD> – Refers to any protocol name
• eigrp – EIGRP Protocol 88
• gre – GRE Protocol 47
• igmp – IGMP Protocol 2
• igp – IGP Protocol 9
• ospf – OSPF Protocol 89
• vrrp – VRRP Protocol 112
• <source-IP/Mask>|any|host <IP> – The source is the
source IP address of the network or host (in dotted
decimal format). The source-mask is the network
mask. For example, 10.1.1.10/24 indicates the first 24
bits of the source IP are used for matching
• any – any is an abbreviation for a source IP of 0.0.0.0,
and the source-mask bits are equal to 0
• host – host is an abbreviation for exact source
(A.B.C.D) and the source-mask bits equal to 32
• <dest-IP/mask|any|host <IP> – Defines the
destination host IP address or destination network
address
• log – Generates log messages when the packet
coming from the interface matches the ACL entry. Log
messages are generated only for router ACLs
• rule-precedence <1-5000> – Defines an integer
value between 1-5000. This value sets the rule
precedence in the ACL
• rule-description <WORD> – Defines access-list
entry name
To Next Page
Loading...
Need help?
General
