2-103Cisco Catalyst Blade Switch 3130 and 3032 for Dell Command ReferenceOL-13271-03Chapter 2 Cisco Catalyst Blade Switch 3130 and 3032 for Dell Cisco IOS Commandsdeny (IPv6 access-list configuration)deny (IPv6 access-list configuration)Use the deny command in IPv6 access list configuration mode on the switch stack or on a standaloneswitch to set deny conditions for an IPv6 access list. Use the no form of this command to remove thedeny conditions.deny {protocol} {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}[operator [port-number]] [dscp value] [fragments] [log] [log-input] [routing] [sequencevalue] [time-range name]no deny {protocol} {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}[operator [port-number]] [dscp value] [fragments] [log] [log-input] [routing] [sequencevalue] [time-range name]Internet Control Message Protocoldeny icmp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}[operator [port-number]] [icmp-type [icmp-code] | icmp-message] [dscp value] [log][log-input] [routing] [sequence value] [time-range name]Transmission Control Protocoldeny tcp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}[operator [port-number]] [ack] [dscp value] [established] [fin] [log] [log-input] [neq {port |protocol}] [psh] [range {port | protocol}] [rst] [routing] [sequence value] [syn] [time-rangename] [urg]User Datagram Protocoldeny udp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}[operator [port-number]] [dscp value] [log] [log-input] [neq {port | protocol}] [range {port |protocol}] [routing] [sequence value] [time-range name]Note This command is supported only if you have configured a dual IPv4 and IPv6 Switch DatabaseManagement (SDM) template on the switch.Syntax Description protocol Name or number of an Internet protocol. It can be one of the keywordsahp, esp, icmp, ipv6, pcp, sctp, tcp, or udp, or an integer in the rangefrom 0 to 255 representing an IPv6 protocol number.source-ipv6-prefix/prefix-lengthThe source IPv6 network or class of networks about which to set denyconditions.This argument must be in the form documented in RFC 2373 where theaddress is specified in hexadecimal using 16-bit values between colons.any An abbreviation for the IPv6 prefix ::/0.
