
12 - 6 WiNG CLI Reference Guide
deny [tcp|udp] [<source-
IP>|any|host <IP>] {eq <source-
port>|range <starting-source-
port>
<ending-source-port>} [<dest-
IP|any|host <IP>]{eq <source-
port>} {range <starting-
source-port> <ending-source-
port>} {eq [<1-65535> |
<WORD>|/jointfilesconvert/422517/bgp|dns|ftp|ftp
|gopher|https|ldap|nntp|ntp|po
p3|smtp|ssh | telnet |tftp|
www}{log} {rule-precedence
<1-5000>
}
Use with the deny command to reject TCP or UDP packets
• deny – Rejects TCP or UDP packets
• [tcp|udp] – Specifies TCP or UDP as the protocol
• <source-IP>|any|host <IP> – The source is the source IP address of
the network or host (in dotted decimal format
• any – any is an abbreviation for a source IP of 0.0.0.0, and the
source-mask bits are equal to 0
• host – host is an abbreviation for exact source (A.B.C.D) and the
source-mask bits equal to 32
• eq <source-port> – The source port <source-port> to match. Values
in the range 1 to 65535
• range <starting-source-port> <ending-source-port> – Specifies the
protocol range (starting and ending protocol numbers)
•
<dest-IP>|any|host <IP> – Defines the destination host IP address
or destination network address
• eq <source-port> {range <starting-source-port> <ending-source-
port>} – Defines a specific destination port
• range <starting-source-port> <ending-source-port> – Specifies the
destination port or range of ports. Port values are in the range of 1 to
65535
• <1-65535> – Destination port
• <WORD> – Displays any Service Name
• /jointfilesconvert/422517/bgp – Bgp port 179
• dns – DNS port 53
• ftp – Ftp-ctrl port 21
• ftp-data – Ftp-data port 20
• gopher – Gopher port 70
• https – HTTPS port 443
• ldap – LDAP port 389
• nntp – NNTP port 119
• ntp – NTP port 123
• pop3 – Pop3 port 110
• smtp – SMTP port 25
• ssh – SSH port 22
• telnet – Telnet port 23
• tftp – TFTP port 69
• www – HTTP port 80
• log – Generates log messages when the packet coming from the
interface matches the ACL entry. Log messages are generated only
for router ACLs
• rule-precedence <1-5000> – Defines an integer value between
1-5000. This value sets the rule precedence in the ACL
Comentarios a estos manuales