CLI Guide

generation of ACL logs is terminated with the seq, permit,
or deny commands. The threshold range is from 1 to 100.
interval minutes (OPTIONAL) Enter the keyword interval followed by the
time period in minutes at which ACL logs must be
generated. The interval range is from 1 to 10 minutes.
monitor (OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL
in which you are creating the rule is applied to the
monitored interface.
Defaults Not configured.
Command Modes ACCESS-LIST
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.4(0.0) Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE
Switch IO Module.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
deny udp (for IPv6 ACLs)
Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
Syntax
deny udp {source address mask | any | host ipv6-address}
[operator port [port]] {destination address | any | host ipv6-
address} [operator port [port]] [count [byte]] [log [interval
minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s
sequence number
• Use the no deny udp {source address mask | any | host ipv6-
address} {destination address | any | host ipv6-address}
command
Parameters
source Enter the IP address of the network or host from which the
packets are sent.
306
Access Control Lists (ACL)