Cisco WS-C3560E-48PD-SF Command Reference - Page 102
deny (ARP access-list configuration
View all Cisco WS-C3560E-48PD-SF manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 102 highlights
deny (ARP access-list configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (ARP access-list configuration) Use the deny Address Resolution Protocol (ARP) access-list configuration command to deny an ARP packet based on matches against the DHCP bindings. Use the no form of this command to remove the specified access control entry (ACE) from the access list. deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log] no deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log] This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI). Syntax Description request ip any host sender-ip sender-ip sender-ip-mask mac host sender-mac sender-mac sender-mac-mask response ip host target-ip target-ip target-ip-mask mac host target-mac target-mac target-mac-mask log (Optional) Define a match for the ARP request. When request is not specified, matching is performed against all ARP packets. Specify the sender IP address. Deny any IP or MAC address. Deny the specified sender IP address. Deny the specified range of sender IP addresses. Deny the sender MAC address. Deny a specific sender MAC address. Deny the specified range of sender MAC addresses. Define the IP address values for the ARP responses. Deny the specified target IP address. Deny the specified range of target IP addresses. Deny the MAC address values for the ARP responses. Deny the specified target MAC address. Deny the specified range of target MAC addresses. (Optional) Log a packet when it matches the ACE. Defaults There are no default settings. However, at the end of the ARP access list, there is an implicit deny ip any mac any command. Command Modes ARP access-list configuration 2-70 Catalyst 3560 Switch Command Reference 78-16405-05