QoS to deny custom TCP Service port

[kent2612]

Hi,

Please help verify if the command below are correct as I need to disable a custom TCP port e,g, TCP/101 from any source to the switch itself,
policy service TCP_101 destination tcp-port 101
policy condition deny_TCP_10161 destination ip Any service TCP_101
policy action deny_TCP_101 disposition deny
policy rule deny_TCP_101 precedence 60 condition deny_TCP_10161 action deny_TCP_101
qos apply

[silvio]

With your configuration you deny all traffic through the switch with dest port 101.

policy condition deny_TCP_10161 destination network group Switch service TCP_101

this is for only destination to all ip of the switch.
BR Silvio