Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 276

seq 20 deny ip any 191.4.0.0 /16 seq 25 deny ip any 191.5.0.0 /16 Standard IP ACL Commands When you create an ACL without any rule and then apply it to an interface, the ACL behavior reflects an implicit permit. The C9000 supports both Ingress and Egress IP ACLs. NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections. deny Configure a filter that drops IP packets meeting the filter criteria. C9000 Series Syntax deny {source mask | any | host ip-address} [count [byte] | [dscp value] [order] [fragments] [log [interval minutes] [threshold-inmsgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {source [mask] | any | host ip-address} command. Parameters source mask any host ip-address count byte Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host then the IP address to specify a host IP address. (OPTIONAL) Enter the keyword count to count packets that the filter processes. (OPTIONAL) Enter the keyword byte to count bytes that the filter processes. Access Control Lists (ACL) 276