Cisco Catalyst 4500 Series Configuration Manual page 232

deny
Command History Release
12.1(19)EW
Usage Guidelines
Deny clauses can be added to forward or drop ARP packets based on some matching criteria.
Examples The following example shows a host with a MAC address of 0000.0000.abcd and an IP address of
1.1.1.1. The following example shows howto deny both requests and responses from this host:
Switch(config)# arp access-list static-hosts
Switch(config-arp-nacl)# deny ip host 1.1.1.1 mac host 0000.0000.abcd
Switch(config-arp-nacl)# end
Switch# show arp access-list
ARP access list static-hosts
Switch#
Related Commands Command
arp access-list
ip arp inspection filter vlan
permit
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
2-194
Modification
This command was introduced on the Catalyst 4500 series switch.
deny ip host 1.1.1.1 mac host 0000.0000.abcd
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
Description
Defines an ARP access list or adds clauses at the end of a
predefined list.
Permits ARPs from hosts that are configured for static IP
when DAI is enabled and to define an ARP access list and
applies it to a VLAN.
Permits an ARP packet based on matches against the DHCP
bindings.
OL-30934-01