Arp Access-List - Cisco Catalyst 3560X-24P Command Reference Manual

arp access-list

arp access-list
Use the arp access-list global configuration command on the switch stack or on a standalone switch to
define an Address Resolution Protocol (ARP) access control list (ACL) or to add clauses to the end of a
previously defined list. Use the no form of this command to delete the specified ARP access list.
Syntax Description
acl-name
Defaults No ARP access lists are defined.
Command Modes Global configuration
Command History Release
12.2(53)SE2
Usage Guidelines After entering the arp access-list command, you enter ARP access-list configuration mode, and these
configuration commands are available:
•
•
•
•
•
Use the permit and deny access-list configuration commands to forward and to drop ARP packets based
on the specified matching criteria.
When the ARP ACL is defined, you can apply it to a VLAN by using the ip arp inspection filter vlan
global configuration command. ARP packets containing only IP-to-MAC address bindings are compared
to the ACL. All other types of packets are bridged in the ingress VLAN without validation. If the ACL
permits a packet, the switch forwards it. If the ACL denies a packet because of an explicit deny
statement, the switch drops the packet. If the ACL denies a packet because of an implicit deny statement,
the switch compares the packet to the list of DHCP bindings (unless the ACL is static, which means that
packets are not compared to the bindings).
Catalyst 3750-X and 3560-X Switch Command Reference
2-20
arp access-list acl-name
no arp access-list acl-name
Name of the ACL.
Modification
This command was introduced.
default: returns a command to its default setting.
deny: specifies packets to reject. For more information, see the
configuration)" section on page
exit: exits ARP access-list configuration mode.
no: negates a command or returns to default settings.
permit: specifies packets to forward. For more information, see the
configuration)" section on page
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
136.
429.
"deny (ARP access-list
"permit (ARP access-list
OL-21522-02