Arp Access-List - Cisco Catalyst 3560-X Command Reference Manual

arp access-list

arp access-list
Syntax Description
Defaults
Command Modes
Command History
Usage Guidelines
Catalyst 3750-X and 3560-X Switch Command Reference
2-20
Downloaded from www.Manualslib.com
Use the arp access-list global configuration command on the switch stack or on a standalone switch to
define an Address Resolution Protocol (ARP) access control list (ACL) or to add clauses to the end of a
previously defined list. Use the no form of this command to delete the specified ARP access list.
arp access-list acl-name
no arp access-list acl-name
acl-name Name of the ACL.
No ARP access lists are defined.
Global configuration
Release Modification
12.2(53)SE2 This command was introduced.
After entering the arp access-list command, you enter ARP access-list configuration mode, and these
configuration commands are available:
default: returns a command to its default setting.
•
deny: specifies packets to reject. For more information, see the
•
configuration)" section on page
exit: exits ARP access-list configuration mode.
•
no: negates a command or returns to default settings.
•
• permit: specifies packets to forward. For more information, see the
configuration)" section on page
Use the permit and deny access-list configuration commands to forward and to drop ARP packets based
on the specified matching criteria.
When the ARP ACL is defined, you can apply it to a VLAN by using the ip arp inspection filter vlan
global configuration command. ARP packets containing only IP-to-MAC address bindings are compared
to the ACL. All other types of packets are bridged in the ingress VLAN without validation. If the ACL
permits a packet, the switch forwards it. If the ACL denies a packet because of an explicit deny
statement, the switch drops the packet. If the ACL denies a packet because of an implicit deny statement,
the switch compares the packet to the list of DHCP bindings (unless the ACL is static, which means that
packets are not compared to the bindings).
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
136.
429.
"deny (ARP access-list
"permit (ARP access-list
OL-21522-02