Specifications

deny (ip access-list extended)
277
1. Default value when this parameter is omitted:
None. (The parameter is not set as a detection condition.)
2. Range of values:
Specify 0 to 63 (in decimal) or the DSCP name.
For details about the DSCP names that can be specified, see Table 19-6
DSCP names that can be specified.
ack
Specifies the detection of packets whose ACK flag in the TCP header is 1.
This parameter option is available only when the protocol is TCP.
1. Default value when this parameter is omitted:
None. (The parameter is not set as a detection condition.)
2. Range of values:
None
fin
Specifies the detection of packets whose FIN flag in the TCP header is 1.
This parameter option is available only when the protocol is TCP.
1. Default value when this parameter is omitted:
None. (The parameter is not set as a detection condition.)
2. Range of values:
None
psh
Specifies the detection of packets whose PSH flag in the TCP header is 1.
This parameter option is available only when the protocol is TCP.
1. Default value when this parameter is omitted:
None. (The parameter is not set as a detection condition.)
2. Range of values:
None
rst
Specifies the detection of packets whose RST flag in the TCP header is 1.
This parameter option is available only when the protocol is TCP.
1. Default value when this parameter is omitted:
None. (The parameter is not set as a detection condition.)
2. Range of values:
None
syn
Specifies the detection of packets whose SYN flag in the TCP header is 1.
This parameter option is available only when the protocol is TCP.
1. Default value when this parameter is omitted: