Deny (Arp Access-List Configuration) - Cisco ME 3400 Command Reference Manual

deny (ARP access-list configuration)

deny (ARP access-list configuration)
Use the deny Address Resolution Protocol (ARP) access-list configuration command to deny an ARP
packet based on matches against the DHCP bindings. Use the no form of this command to remove the
specified access control entry (ACE) from the access list.
Syntax Description request
ip
any
host sender-ip
sender-ip sender-ip-mask
mac
host sender-mac
sender-mac
sender-mac-mask
response ip
host target-ip
target-ip target-ip-mask
mac
host target-mac
target-mac
target-mac-mask
log
Defaults
There are no default settings. However, at the end of the ARP access list, there is an implicit deny ip any
mac any command.
Command Modes ARP access-list configuration
Cisco ME 3400 Ethernet Access Switch Command Reference
2-76
deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host sender-mac
| sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask}
[{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac
sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
no deny {[request] ip {any | host sender-ip | sender-ip sender-ip-mask} mac {any | host
sender-mac | sender-mac sender-mac-mask} | response ip {any | host sender-ip | sender-ip
sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac
| sender-mac sender-mac-mask} [{any | host target-mac | target-mac target-mac-mask}]} [log]
(Optional) Define a match for the ARP request. When request is not
specified, matching is performed against all ARP packets.
Specify the sender IP address.
Deny any IP or MAC address.
Deny the specified sender IP address.
Deny the specified range of sender IP addresses.
Deny the sender MAC address.
Deny a specific sender MAC address.
Deny the specified range of sender MAC addresses.
Define the IP address values for the ARP responses.
Deny the specified target IP address.
Deny the specified range of target IP addresses.
Deny the MAC address values for the ARP responses.
Deny the specified target MAC address.
Deny the specified range of target MAC addresses.
(Optional) Log a packet when it matches the ACE.
Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
OL-9640-10