Specifications
deny (ip access-list standard)
280
deny (ip access-list standard)
Specifies the conditions by which the IPv4 address filter denies access.
Syntax
To set or change information:
[<Seq>] deny {<Src IPv4> [<Src IPv4 wildcard>] | host <Src IPv4> | any}
To delete information:
no <Seq>
Input mode
(config-std-nacl)
Parameters
<Seq>
Specifies the sequence in which filter conditions are applied.
1. Default value when this parameter is omitted:
10 is set as the initial value if there are no conditions in the access list.
If conditions have been set, the initial value is the maximum value for the
application sequence that has been set plus 10.
Note, however, that if the maximum value for the application sequence is
greater than 4294967285, the value cannot be omitted.
2. Range of values:
Specify 1 to 4294967295 in decimal.
{<Src IPv4> [<Src IPv4 wildcard>] | host <Src IPv4> | any}
Specify an IPv4 address.
To specify all IPv4 addresses, specify
any.
1. Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
Specify <Src IPv4> [<Src IPv4 wildcard>
], host <Src IPv4>, or any.
- <Src IPv4> [<Src IPv4 wildcard>
] specification:
Specify the IPv4 address for <Src IPv4>.
- For
[<Src IPv4 wildcard>], specify a wildcard in IPv4 address format
that sets bits that permit an arbitrary value in an IPv4 address. If omitted,
the filter condition is a perfect match of <Src IPv4>.
host <Src IPv4>
specification:
The filter condition is a perfect match of <Src IPv4>.
-
any specification:
The IPv4 address is not included as a filter condition.
IPv4 address (nnn.nnn.nnn.nnn): 0.0.0.0 to 255.255.255.255
Default behavior
None