Reference Guide

Version 7.8.1.0 Introduced on the C-Series.
Version 7.4.1.0 Introduced on the E-Series TeraScale Added the monitor option.
deny
Configure a filter that drops IPv6 packets that match the filter criteria.
C-Series, E-Series, S-Series
Syntax
deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s
sequence number
• Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp |
udp} command
Parameters
ip-protocol-
number
Enter an IPv6 protocol number. The range is 0 to 255.
icmp Enter the keyword icmp to deny Internet Control Message Protocol
version 6.
ipv6 Enter the keyword ipv6 to deny any Internet Protocol version 6.
tcp Enter the keyword tcp to deny the Transmission Control protocol.
udp Enter the keyword udp to deny the User Datagram Protocol.
Defaults Not configured.
Command Modes ACCESS-LIST
Command History
Version 8.4.2.1 Introduced on the S-Series.
Version 8.2.1.0 Introduced on the E-Series TeraScale.
Version 7.8.1.0 Introduced on the C-Series.
Version 7.4.1.0 Introduced on the E-Series TeraScale Added the monitor option.
deny icmp
Configure a filter to drop all or specific ICMP messages.
C-Series, E-Series, S-Series
Syntax
deny icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} [message-type]
[count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
916