Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 906)

894 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
12
deny icmp [||any|from-vlan
|
host ]
[||any|
host ] ( ,log,rule-precedence
<1-5000>)
{(rule-description )}
deny ip [||any|from-vlan |
host ]
[||any|
host ] (log,rule-precedence <1-5000>) {(
rule-description )}
deny proto [||eigrp|gre|igmp|igp|ospf|vrrp]
[||any|from-vlan
|
host ]
[||any|
host ] (log,rule-precedence <1-5000>)
{(rule-description )}
deny [tcp|udp] [||any|from-vlan
|
host ]
[||any|
eq |host |range ]
[eq
[<1-65535>||bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop
3|
sip|smtp|ssh|telnet|tftp|www]|range ]
(log,rule-precedence <1-5000>) {(rule-description )}
Parameters
deny
[||any|
from-vlan |host ] [|any|host
|
] (log,mark [8021p <0-7>|dscp <0-63>],
rule-precedence <1-5000>) {(rule-description )}
AS-NAME> Applies this deny rule to packets based on service protocols and ports specified in the network-service alias
•
– Specify the network-service alias name (should be existing and
configured).
A network-service alias defines service protocols and ports to match. When used with an ACL, the
network-service alias defines the service-specific components of the ACL deny rule.
For more information on configuring network-service alias, see
alias .
Specifies the source IP address and mask (A.B.C.D/M) to match. Packets, matching the service protocols and
ports specified in the network-service alias, received from the specified network are dropped.
S-NAME> Applies a network-group alias to identify the source IP addresses. Packets, matching the service protocols
and ports specified in the network-service alias, received from the addresses identified by the network-group
alias are dropped.
•
– Specify the network-group alias name (should be existing and
configured).
A network-group alias defines a single or a range of addresses of devices, hosts, and networks. When used
with an ACL, the network-group alias defines the network-specific component of the ACL rule (permit/deny).