Permit (Arp Access-List Configuration) - Cisco Catalyst 3560X-24P Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

permit (ARP access-list configuration)

Use the permit Address Resolution Protocol (ARP) access-list configuration command to permit an
ARP packet based on matches against the Dynamic Host Configuration Protocol (DHCP) bindings. Use
the no form of this command to remove the specified access control entry (ACE) from the access control
list.
This command is available only if your switch is running the IP services feature set.
Syntax Description
request
ip
any
host sender-ip
sender-ip
sender-ip-mask
mac
host sender-mac
sender-mac
sender-mac-mask
response ip
host target-ip
target-ip target-ip-mask (Optional) Accept the specified range of target IP addresses.
mac
host target-mac
target-mac
target-mac-mask
log
Defaults
There are no default settings.
Command Modes
ARP access-list configuration
OL-21522-02
permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask}
[{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac
sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no permit {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
(Optional) Requests a match for the ARP request. When request is not
specified, matching is performed against all ARP packets.
Specify the sender IP address.
Accept any IP or MAC address.
Accept the specified sender IP address.
Accept the specified range of sender IP addresses.
Specify the sender MAC address.
Accept the specified sender MAC address.
Accept the specified range of sender MAC addresses.
Define the IP address values for the ARP responses.
(Optional) Accept the specified target IP address.
Specify the MAC address values for the ARP responses.
(Optional) Accept the specified target MAC address.
(Optional) Accept the specified range of target MAC addresses.
(Optional) Log a packet when it matches the ACE. Matches are logged if
you also configure the matchlog keyword in the
logging global configuration command.
Catalyst 3750-X and 3560-X Switch Command Reference
permit (ARP access-list configuration)
ip arp inspection vlan
2-429