deny ipv4-dest

Denies further processing to packets received with matching IPv4 address.

Syntax

deny ipv4-dest address mask

no deny ipv4-dest address mask

Parameters

deny ipv4-dest: Specifies IPv4 address to be denied. Valid ranges is 1 through 254.
address mask: Specifies the IPv4 address and mask, which must be configured in dotted decimal notation, such as 196.168.0.1.

Modes

Transport tunnel config mode

Usage Guidelines

You must have an admin role to perform this task.

If another destination IP value is already configured, it must be removed before configuring a new destination IP.

If the same command is executed more than once, the second and subsequent executions are ignored and no error is reported.

Table 1. Error messages
Message	Reason
`Error: Deny IP address mask is already configured`	Duplicate IPv4 addresses are not allowed.
`Error: Invalid destination IP address`	IPv4 address is set to 0.0.0.0 or 255.255.255.255.
`Error: Destination IP address conflicts with transport-tunnel tunnelName`	IPv4 address conflicts with another transport tunnel.
% Value 'ipv4-dest' not in range <1-254>.	Example:device(config-tranport-tunnel)# deny ipv4-dest asdf asdf

Examples

The following example configures the IPv4 address and mask to match and deny further packet processing for transport tunnel tt1 and verifies the configuration with the show command.

device(config)# transport-tunnel tt1 
device(config-transport-tunnel)# deny ipv4-dest 192.168.4.20 255.255.255.0 

device# show running-config transport-tunnel tt1 
transport-tunnel tt1 
  deny ipv4-dest 192.168.4.20 255.255.255.0