Applying Ipv4-Acls On Gigabit Ethernet Interfaces; Arp Cache - Cisco MDS 9000 series Configuration Manual

ARP Cache

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•
If IPv4-ACLs are already configured in a Gigabit Ethernet interface, you cannot add this interface to an
Tip
Ethernet PortChannel group. For information on configuring IPv4-ACLs, see the Cisco MDS 9000
Family NX-OS Security Configuration Guide.

Applying IPv4-ACLs on Gigabit Ethernet Interfaces

To apply an IPv4-ACL on a Gigabit Ethernet interface, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# interface gigabitethernet 3/1
switch(config-if)#
Step 3
switch(config-if)# ip access-group SampleName
Step 4
switch(config-if)# ip access-group SampleName1 in
switch(config-if)# ip access-group SampleName2 out

ARP Cache

Cisco MDS NX-OS supports ARP cache for Gigabit Ethernet interface configured for IPv4. This section
includes the following topics:
•
•
Cisco MDS 9000 Family NX-OS IP Services Configuration Guide
7-8
Other protocols such as User Datagram Protocol (UDP) and HTTP are not supported in
Note
Gigabit Ethernet interfaces. Applying an ACL that contains rules for these protocols to a
Gigabit Ethernet interface is allowed but those rules have no effect.
Apply IPv4-ACLs to the interface before you enable an interface. This ensures that the filters are in
place before traffic starts flowing.
Be aware of the following conditions:
If you use the log-deny option, a maximum of 50 messages are logged per second.
–
The established option is ignored when you apply IPv4-ACLs containing this option to Gigabit
–
Ethernet interfaces.
– If an IPv4-ACL rule applies to a pre-existing TCP connection, that rule is ignored. For example
if there is an existing TCP connection between A and B and an IPv4-ACL which specifies
dropping all packets whose source is A and destination is B is subsequently applied, it will have
no effect.
Displaying ARP Cache, page 7-9
Clearing ARP Cache, page 7-9
Chapter 7 Configuring IPv4 for Gigabit Ethernet Interfaces
Purpose
Enters configuration mode.
Configures a Gigabit Ethernet interface
(3/1).
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for both ingress and
egress traffic (if the association does not
exist already).
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for ingress traffic.
Applies the IPv4-ACL SampleName on
Gigabit Ethernet 3/1 for egress traffic (if
the association does not exist already).
OL-19525-01,Cisco MDS NX-OS Release 4.2(1)