Page 1 of 1

QoS to deny custom TCP Service port

Posted: 17 Apr 2024 04:53
by kent2612
Hi,

Please help verify if the command below are correct as I need to disable a custom TCP port e,g, TCP/101 from any source to the switch itself,
policy service TCP_101 destination tcp-port 101
policy condition deny_TCP_10161 destination ip Any service TCP_101
policy action deny_TCP_101 disposition deny
policy rule deny_TCP_101 precedence 60 condition deny_TCP_10161 action deny_TCP_101
qos apply

Re: QoS to deny custom TCP Service port

Posted: 19 Apr 2024 08:23
by silvio
With your configuration you deny all traffic through the switch with dest port 101.

policy condition deny_TCP_10161 destination network group Switch service TCP_101

this is for only destination to all ip of the switch.
BR Silvio