Permit (Arp) - Cisco Nexus 7000 Series Command Reference Manual

P Commands

permit (ARP)

To create an ARP ACL rule that permits ARP traffic that matches its conditions, use the permit command.
To remove a rule, use the no form of this command.
General Syntax
[ sequence-number ] permit ip {any| host sender-IP| sender-IP sender-IP-mask} mac {any| host sender-MAC|
sender-MAC sender-MAC-mask} [log]
[ sequence-number ] permit request ip {any| host sender-IP| sender-IP sender-IP-mask} mac {any| host
sender-MAC| sender-MAC sender-MAC-mask} [log]
[ sequence-number ] permit response ip {any| host sender-IP| sender-IP sender-IP-mask} {any| host
target-IP| target-IP target-IP-mask} mac {any| host sender-MAC| sender-MAC sender-MAC-mask} [any|
host target-MAC| target-MAC target-MAC-mask] [log]
no sequence-number
no permit ip {any| host sender-IP| sender-IP sender-IP-mask} mac {any| host sender-MAC| sender-MAC
sender-MAC-mask} [log]
no permit request ip {any| host sender-IP| sender-IP sender-IP-mask} mac {any| host sender-MAC|
sender-MAC sender-MAC-mask} [log]
no permit response ip {any| host sender-IP| sender-IP sender-IP-mask} {any| host target-IP| target-IP
target-IP-mask} mac {any| host sender-MAC| sender-MAC sender-MAC-mask} [any| host target-MAC|
target-MAC target-MAC-mask] [log]
Syntax Description
sequence-number
ip
any
(Optional) Sequence number of the permit command,
which causes the device to insert the command in that
numbered position in the access list. Sequence
numbers maintain the order of rules within an ACL.
A sequence number can be any integer between 1 and
4294967295.
By default, the first rule in an ACL has a sequence
number of 10.
If you do not specify a sequence number, the device
adds the rule to the end of the ACL and assigns a
sequence number that is 10 greater than the sequence
number of the preceding rule.
Use the resequence command to reassign sequence
numbers to rules.
Introduces the IP address portion of the rule.
Specifies that any host matches the part of the rule
that contains the any keyword. You can use any to
specify the sender IP address, target IP address, sender
MAC address, and target MAC address.
Cisco Nexus 7000 Series Security Command Reference
permit (ARP)
537