Planet WGSW-28040 - Deny (IP)

Command Guide of WGSW-28040
57
4.3.6 deny (IP)
Command:
[sequence <1-2147483647>] deny (<0-255>|ipinip|egp|igp|hmp|rdp|ipv6|
ipv6:rout|ipv6:frag|rsvp|ipv6:icmp|ospf|pim|l2tp|ip) (A.B.C.D/A.B.C.D|any)
(A.B.C.D/A.B.C.D|any) [(dscp|precedence) VALUE]] [shutdown]
[sequence <1-2147483647>] deny icmp (A.B.C.D/A.B.C.D|any) (A.B.C.D/A.B.C.D|any)
(<0-255>|echo-reply|destination-unreachable|
source-quench|echo-request|router-advertisement|router-solicitation|
time-exceeded|timestamp| timestamp-reply|traceroute|any) (<0-255>|any)
[(dscp|precedence) VALUE] [shutdown]
[sequence <1-2147483647>] deny tcp (A.B.C.D/A.B.C.D|any) (<0-65535>|echo|
discard|daytime|ftp-data|ftp|telnet|smtp|time|hostname|whois|tacacs-ds|
domain|www|pop2|pop3|syslog|talk|klogin|kshell|sunrpc|drip|PORT_RANGE|any)
(A.B.C.D/A.B.C.D|any) (<0-65535>|echo|discard|daytime|ftp-data|ftp|telnet|
smtp|time|hostname|whois|tacacs-ds|domain|www|pop2|pop3|syslog|talk|
klogin|kshell|sunrpc|drip|PORT_RANGE|any)
[match-all TCP_FLAG] [(dscp|precedence) VALUE] [shutdown]
[sequence <1-2147483647>] deny udp (A.B.C.D/A.B.C.D|any)
(<0-65535>|echo|discard|time|nameserver|tacacs-ds|domain|bootps|
bootpc|tftp|sunrpc|ntp|netbios-ns|snmp|snmptrap|who|syslog|
talk|rip|PORT_RANGE|any) (A.B.C.D/A.B.C.D|any) (<0-65535>|echo|
discard|time|nameserver|tacacs-ds|domain|bootps|bootpc|tftp|
sunrpc|ntp|netbios-ns|snmp|snmptrap|who|syslog|PORT_RANGE|any)
[(dscp|precedence) VALUE] [shutdown]
no sequence <1-2147483647>
Parameter:
<1-2147483647>
(Optional) Specify sequence index of ACE, the sequence index represent the priority of
an ACE in ACL.
(A.B.C.D/A.B.C.D|a
ny)
Specify the source IPv4 address and mask of packet or any IPv4 address.
(A.B.C.D/A.B.C.D|a
ny)
Specify the destination IPv4 address and mask of packet or any IPv4 address.